click.m.payflex.com/?qs=806f9c2ea648c5644fa461522528fa781169625ed44f3a1257392a5514c4cbccfce546c79475039b3156db5607e97796120cecd2b7004124db734679d7d1ed57
13.111.119.182302 Found 471 B URL User Request GET HTTP/1.1 click.m.payflex.com/?qs=806f9c2ea648c5644fa461522528fa781169625ed44f3a1257392a5514c4cbccfce546c79475039b3156db5607e97796120cecd2b7004124db734679d7d1ed57
IP 13.111.119.182:443
Certificate IssuerDigiCert Inc
Subjectclick.m.payflex.com
FingerprintA4:CB:A7:32:C5:F5:8C:B6:84:4A:4A:F7:B2:B3:55:17:C3:F4:74:60
ValidityTue, 31 Jan 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (399), with CRLF line terminators
Hash 0fa487e3d7693f5d7d9eb6614025e172
72a15c8e8948bce6fe8953ec6181c26d03f0aafb
d63fd2ee8b17c99445b26735e5235c7bf0baf88ef9053750298d0c61eab4c17c
GET /?qs=806f9c2ea648c5644fa461522528fa781169625ed44f3a1257392a5514c4cbccfce546c79475039b3156db5607e97796120cecd2b7004124db734679d7d1ed57 HTTP/1.1
Host: click.m.payflex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://urldefense.com/v3/__https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa*email*ins*banner*squ5*intro&utm_campaign=TPA*Partner__;KysrKysr!!OGSHN0lhuvqf8g!k1tYgUZ_7ISVl9tEHT4amli0wURXtScbgy108yBriFtZRRNdteak6b8D4ppJJdDUu-kCPAo2CJOFfMkPRrWQI8d3YetMT6pu7rg$
Date: Sat, 09 Dec 2023 01:45:38 GMT
Connection: close
Content-Length: 471
urldefense.com/v3/__https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa*email*ins*banner*squ5*intro&utm_campaign=TPA*Partner__;KysrKysr!!OGSHN0lhuvqf8g!k1tYgUZ_7ISVl9tEHT4amli0wURXtScbgy108yBriFtZRRNdteak6b8D4ppJJdDUu-kCPAo2CJOFfMkPRrWQI8d3YetMT6pu7rg$
52.204.90.22302 Found 0 B URL User Request GET HTTP/2 urldefense.com/v3/__https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa*email*ins*banner*squ5*intro&utm_campaign=TPA*Partner__;KysrKysr!!OGSHN0lhuvqf8g!k1tYgUZ_7ISVl9tEHT4amli0wURXtScbgy108yBriFtZRRNdteak6b8D4ppJJdDUu-kCPAo2CJOFfMkPRrWQI8d3YetMT6pu7rg$
IP 52.204.90.22:443
Certificate IssuerSectigo Limited
Subjectwww.urldefense.com
FingerprintE5:20:37:B4:E3:E2:83:BE:A8:99:C5:4D:2A:2F:E0:F1:C8:F1:F0:F2
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/__https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa*email*ins*banner*squ5*intro&utm_campaign=TPA*Partner__;KysrKysr!!OGSHN0lhuvqf8g!k1tYgUZ_7ISVl9tEHT4amli0wURXtScbgy108yBriFtZRRNdteak6b8D4ppJJdDUu-kCPAo2CJOFfMkPRrWQI8d3YetMT6pu7rg$ HTTP/1.1
Host: urldefense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Dec 2023 01:45:40 GMT
content-length: 0
location: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
strict-transport-security: max-age=31536000
x-robots-tag: noindex, nofollow
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self';
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw73e5a8fa/images/Bento%20Boxes/surprisingly-eligible-fsa.png
104.16.43.62200 OK 9.6 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw73e5a8fa/images/Bento%20Boxes/surprisingly-eligible-fsa.png
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8f6cf1d60eb5fbdeeead4982e02c7f63
b07651c9582028d9a4d37cf626fc176f36266a78
2cd7f9b308a3a38dfa08df1dbed243ba4887d1f07ff324244cd4e409103a05dd
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw73e5a8fa/images/Bento%20Boxes/surprisingly-eligible-fsa.png HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 9606
age: 670587
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=26506
content-disposition: inline; filename="surprisingly-eligible-fsa.webp"
etag: "cb46ec0376919c35e1239428b26fdc01"
last-modified: Tue, 01 Aug 2023 10:00:04 GMT
vary: Accept
via: 1.1 d2344bac503cfadf51884e9930680ffe.cloudfront.net (CloudFront)
x-amz-cf-id: gbqCel7Q9eyNjXIaVcEwvv83QCy7kPgjsv6kD4oTmAEhdvVpG-dxKg==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Sat, 31 Aug 2024 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring:
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46c015f01-ARN
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw1e4ea82d/images/Bento%20Boxes/nav-bento-icon-cold-allergy2.png
104.16.43.62200 OK 2.1 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw1e4ea82d/images/Bento%20Boxes/nav-bento-icon-cold-allergy2.png
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash c58cfc4be47f498f39f0b8f738e7dac5
dd62d1d635fea4dd9fb628148e0a5a7b7eca0ea9
364f6ddd8b71e4dc65d26763ba513e70547df48e99916ec3d956f20ca08d0ba9
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw1e4ea82d/images/Bento%20Boxes/nav-bento-icon-cold-allergy2.png HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 2074
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4724
content-disposition: inline; filename="nav-bento-icon-cold-allergy2.webp"
etag: "ed8297ef27697782161b3f803ee45f0e"
last-modified: Fri, 08 Dec 2023 08:31:18 GMT
vary: Accept
via: 1.1 8bdae94273544c8186e20a3c31375f98.cloudfront.net (CloudFront)
x-amz-cf-id: tkkqg_ySE6t_Skmozsq0lkls7jUwUFiKjCORizYrSWBrbRj-Q6SMYw==
x-amz-cf-pop: ARN1-C1
x-cache: Miss from cloudfront
x-amz-expiration: expiry-date="Tue, 07 Jan 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring:
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 61077
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46bff5f01-ARN
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw848a31cb/images/Shop-by-Brand/CeraVie.png?sw=200
104.16.43.62200 OK 6.6 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw848a31cb/images/Shop-by-Brand/CeraVie.png?sw=200
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash a2f0f6587435750ae64bb602b37c39f9
81dcbdd7649ed41c40f6016fcf42156aac99b788
c58d7894b9e0b08efae2e58f3012e1bc6a0d8b4331c56931a1d4a8b10e61ee5b
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw848a31cb/images/Shop-by-Brand/CeraVie.png?sw=200 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 6634
age: 770396
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=10951
content-disposition: inline; filename="CeraVie.webp"
etag: "5634add7b178212bc38ce80475cbe0a3"
last-modified: Fri, 15 Sep 2023 07:19:56 GMT
vary: Accept
via: 1.1 9c3701a40f5e4766165113d719972734.cloudfront.net (CloudFront)
x-amz-cf-id: Ga70aKpgYVF5Z3PbLVhSB0-FnxnSyB9G_FN2njPgzGEptdyHMIZJaw==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Tue, 15 Oct 2024 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=200
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46c085f01-ARN
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dwe650f247/images/Shop-by-Brand/CM-by-Aura.png?sw=200
104.16.43.62200 OK 5.2 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dwe650f247/images/Shop-by-Brand/CM-by-Aura.png?sw=200
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1664f81e5a0704b7eaa47cc0cb74b187
ac53c9e2f3a7a5ed88cfecf8d89e6b86be21a5a5
a88145611c435e93c4b29a9baf29264190ccc851c3af6721b8c5acb99c27de53
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dwe650f247/images/Shop-by-Brand/CM-by-Aura.png?sw=200 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 5172
age: 18052
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=13054
content-disposition: inline; filename="CM-by-Aura.webp"
etag: "6c609f0257cb27c766fcc0f7d5b765e7"
last-modified: Tue, 17 Oct 2023 07:18:54 GMT
vary: Accept
via: 1.1 350f2b5d7e6ee985da330b123098fd88.cloudfront.net (CloudFront)
x-amz-cf-id: duwIOCUIzGgwmJE7gMEXzAo_j-KwcYH95xzvTz919FlK7f2HTBjulg==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Sat, 16 Nov 2024 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=200
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46c055f01-ARN
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw0d8ef38c/images/Shop-by-Brand/dpl.png?sw=200
104.16.43.62200 OK 2.8 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw0d8ef38c/images/Shop-by-Brand/dpl.png?sw=200
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash fbf561992373f52ee70f899b312c2b2d
33f626236a9226fc680685ac559d5ac0624494b9
f8dd5e9573eef0697f651932d9614816b6f429a813dfdf2881c274d0e269e98e
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw0d8ef38c/images/Shop-by-Brand/dpl.png?sw=200 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 2844
age: 753883
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3957
content-disposition: inline; filename="dpl.webp"
etag: "5b30164ee100a9881c3944d5dcfdcb41"
last-modified: Fri, 15 Sep 2023 07:19:55 GMT
vary: Accept
via: 1.1 1cc4305a3ce000ca199328864ca1c98e.cloudfront.net (CloudFront)
x-amz-cf-id: mGtjXUjmBQP3XKn86_nik-kiFR_nXTwrfBEIi2pX_ZpAloNr0XkWww==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Tue, 15 Oct 2024 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=200
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46c095f01-ARN
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw7a6f9596/images/Shop-by-Brand/nanit.png?sw=200
104.16.43.62200 OK 3.3 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw7a6f9596/images/Shop-by-Brand/nanit.png?sw=200
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 61c4d3aac121c011612c73b3fcdaf7cf
dcb20dd0c290e5759d9f6651bc79a4ed0e520179
c27af8df324fd9e32902ece39b220be784926b2b6b628994f2242cdfb4c0b020
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw7a6f9596/images/Shop-by-Brand/nanit.png?sw=200 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 3256
age: 670585
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=6912
content-disposition: inline; filename="nanit.webp"
etag: "629b9e59fae118986f4621e8b870d87f"
last-modified: Fri, 15 Sep 2023 07:19:55 GMT
vary: Accept
via: 1.1 fb13343f41a549822047f18ba839fd5a.cloudfront.net (CloudFront)
x-amz-cf-id: 9HuWW24uQ0y8fIVayXYxcvltRfIEFxTv9F8cUCt_Gwzh4r4PeczCCw==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Tue, 15 Oct 2024 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=200
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46c0b5f01-ARN
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw2c8aea0f/images/Shop-by-Brand/Supergoop.png?sw=200
104.16.43.62200 OK 6.7 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw2c8aea0f/images/Shop-by-Brand/Supergoop.png?sw=200
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 68663f961237df16e73b9ba002be110d
f11b6eef3f3b5093ed48260e23bfa2585ec94cdb
590225f6245a5d4250eb92148af596c3093755285cc02004e8d559d126754a69
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw2c8aea0f/images/Shop-by-Brand/Supergoop.png?sw=200 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 6712
age: 65
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=12026
content-disposition: inline; filename="Supergoop.webp"
etag: "c1a835f7acd31b78a8bed980c61b0ea6"
last-modified: Fri, 15 Sep 2023 07:19:56 GMT
vary: Accept
via: 1.1 c908cbeaf223c80632fd467b8ff1278a.cloudfront.net (CloudFront)
x-amz-cf-id: Xfv9yM51vFlUhIW8a2YtpjULW37E5LzZOoyqZZwJFo5Pe2DPNxWyMw==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Tue, 15 Oct 2024 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=200
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46c065f01-ARN
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw13906514/images/Shop-by-Brand/Tylenol.png?sw=200
104.16.43.62200 OK 4.9 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw13906514/images/Shop-by-Brand/Tylenol.png?sw=200
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4bcbff911c1034ab0018bdc3111d8ab2
4673f0fd251f9d1cbf43e8962b27029bf9f9afde
f7726b1f5ab10666d717f05249cb231da519ff5acce98ce740f7a8f0b6f4bb76
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Sites/default/dw13906514/images/Shop-by-Brand/Tylenol.png?sw=200 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 4914
age: 1291671
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=8151
content-disposition: inline; filename="Tylenol.webp"
etag: "33b36b7c0b5c2d658254cd0fbc262fd3"
last-modified: Fri, 15 Sep 2023 07:19:55 GMT
vary: Accept
via: 1.1 22696b6e831fc717b53b9273ad3341c2.cloudfront.net (CloudFront)
x-amz-cf-id: 8UQUoQE7zwkAwVMX5iKgSbDYFkc7ApxAyzPH_4qBQp5LogihIJa4cQ==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Tue, 15 Oct 2024 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=200
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46c075f01-ARN
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw2907c618/images/Bento%20Boxes/bundles-background.png
104.16.43.62200 OK 4.4 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw2907c618/images/Bento%20Boxes/bundles-background.png
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 276aa9b9d36b474f7578ae2888905750
3c5c36beae4e4294abad85915f5a7516154144f5
f9953ac24d67dcfd6b0ff8710f67e0e93cf69bf6c602c2793423b4a0eacbdf52
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw2907c618/images/Bento%20Boxes/bundles-background.png HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 4350
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=10352
content-disposition: inline; filename="bundles-background.webp"
etag: "88d6a0b8df8c4606630a51c9b93dc717"
last-modified: Fri, 08 Dec 2023 08:31:18 GMT
vary: Accept
via: 1.1 a370d34019720f60dd35cbe89cb3994a.cloudfront.net (CloudFront)
x-amz-cf-id: fd2IEce4RmjHEcwj6EBhCnhKqTOfbmszsOAwh0INdMhJlYeIxWwUbA==
x-amz-cf-pop: ARN1-C1
x-cache: Miss from cloudfront
x-amz-expiration: expiry-date="Tue, 07 Jan 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring:
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 61074
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46c045f01-ARN
X-Firefox-Spdy: h2
fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwffb45ce1/images/Navigation/FSA-NavigationSpotlight-AdventureMedical.jpg
104.16.43.62200 OK 58 kB URL GET HTTP/2 fsastore.com/dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwffb45ce1/images/Navigation/FSA-NavigationSpotlight-AdventureMedical.jpg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1476x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 935b8a50e62c63d5d275ba9f4bb79721
872b28849e9a5ae05caa00ee4be2af2ebdbcdacf
247cd867a17d150358595553337a173805ad213d815065d0781ee7a3f1575d16
GET /dw/image/v2/BFKW_PRD/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwffb45ce1/images/Navigation/FSA-NavigationSpotlight-AdventureMedical.jpg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 57534
age: 69482
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=64530
content-disposition: inline; filename="FSA-NavigationSpotlight-AdventureMedical.webp"
etag: "93a91b6229f3db9bb53b775fa2980792"
last-modified: Mon, 04 Dec 2023 11:00:03 GMT
vary: Accept
via: 1.1 b58b188f0b591d63a56e49672312d538.cloudfront.net (CloudFront)
x-amz-cf-id: HNosLimIjnY1ldSiR6qLRD1-uefOmdnIqKJ01zpdzYctqKPqwcV04Q==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Fri, 03 Jan 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring:
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f47c0c5f01-ARN
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/vf5928b44d7e444509a7421f188b577e968e788bf/images/icons/betterhelp-icon.png
104.16.43.62200 OK 9.1 kB URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/vf5928b44d7e444509a7421f188b577e968e788bf/images/icons/betterhelp-icon.png
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2a98010e1649cea6ef57d4d285fa7803
68943e2c893abe8100192d56aedf4595957ebc60
fce1b8a0624097392a4adafc8455493865bf83cec7ad615e19e9f4c13c7464cd
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/vf5928b44d7e444509a7421f188b577e968e788bf/images/icons/betterhelp-icon.png HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 9052
cache-control: public, max-age=157
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=22859
content-disposition: inline; filename="betterhelp-icon.webp"
cross-origin-resource-policy: cross-origin
expires: Sat, 09 Dec 2023 01:47:14 GMT
last-modified: Thu, 16 Nov 2023 21:25:13 GMT
vary: Accept
x-dw-request-base-id: -p0S5vXFc2UBAAB_
cf-cache-status: HIT
age: 64
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f47c125f01-ARN
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/dw28629051/images/discover.jpg
104.16.43.62200 OK 444 B URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/dw28629051/images/discover.jpg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 48x34, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 72adbc2d5a24bab4c23cfd0dae4d0512
0a2d87d7cc2bd0e246022148d77f2c35c3859018
4609f11def9b9615194d446b959b426643e8ae64c041039ce1504677d8f62fd6
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/dw28629051/images/discover.jpg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/webp
content-length: 444
cache-control: public, max-age=2591140
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=1758
content-disposition: inline; filename="discover.webp"
cross-origin-resource-policy: cross-origin
expires: Sat, 06 Jan 2024 02:35:50 GMT
last-modified: Thu, 07 Dec 2023 02:30:47 GMT
vary: Accept
x-dw-request-base-id: -p3I6oYvcWUBAAB_
cf-cache-status: HIT
age: 168931
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f47c145f01-ARN
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.6.0.slim.min.js
151.101.130.137200 OK 25 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.slim.min.js
IP 151.101.130.137:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65241)
Hash 1276065911521c5c22037a31365d179d
d1c6704e94efe2d465fc161b6381e127d35acd81
bbb7b9921ca2b61948753a6edb63c78443663dc45d1621d18e102e1dcb34e512
GET /jquery-3.6.0.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-11ab4"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:45:41 GMT
age: 7284142
x-served-by: cache-lga13624-LGA, cache-bma1643-BMA
x-cache: HIT, HIT
x-cache-hits: 83, 33084
x-timer: S1702086342.912630,VS0,VE0
vary: Accept-Encoding
content-length: 24587
X-Firefox-Spdy: h2
cnstrc.com/js/cust/healthe-commerce_QXVGlQ.js
108.157.214.80200 OK 102 kB URL GET HTTP/2 cnstrc.com/js/cust/healthe-commerce_QXVGlQ.js
IP 108.157.214.80:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subjectcnstrc.com
FingerprintA3:1C:8A:A5:69:DD:C8:A5:C6:9E:15:46:A9:00:63:B6:94:DE:0D:96
ValidityWed, 18 Oct 2023 00:00:00 GMT - Sat, 16 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 102 kB (102425 bytes)
Hash 14628bd837d787c0786de3aafb15ab00
a02e78a1e8e1483301f4f6cce35c65d03c211cb1
fb3f6d1181e43ce2b1bd14d63f084479e901aaa64994b9fee9fe434497097174
GET /js/cust/healthe-commerce_QXVGlQ.js HTTP/1.1
Host: cnstrc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sat, 09 Dec 2023 00:59:17 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sat, 09 Dec 2023 01:30:13 GMT
cache-control: public, max-age=1800
etag: W/"261bc463a7273426aea37a1ae6338cfc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9fde400234236c10982fe8b8a3ca9eb2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: _RAQ-cecKCHo6HPICqBeCKv5OhM9lpKYpMqpedXCuKZDDAKu98g-mA==
age: 928
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
216.58.207.234200 OK 5.4 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
IP 216.58.207.234:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (2134)
Hash 7c96a5f11d9741541d5e3c42ff6380d7
d3fa2564c021cf730e58ffddb138cf6b57ed126e
81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee
GET /ajax/libs/webfont/1.6.26/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5437
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:54:03 GMT
expires: Fri, 06 Dec 2024 15:54:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 121899
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwa55cf08d/images/header/help-contact.svg
104.16.43.62200 OK 981 B URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwa55cf08d/images/header/help-contact.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash f0e25b653ee2e295733f0a1609714030
70a4ae98f727f9c4d31933b45481fb0ea2990f0c
f4228d57fe369d0ba23ff63ae6b8f78d4ceab10a776467e60e0d29cf784da60d
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwa55cf08d/images/header/help-contact.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: POkj6buHX2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2560727
expires: Sat, 23 Dec 2023 17:11:23 GMT
last-modified: Tue, 27 Oct 2020 20:44:19 GMT
cf-cache-status: HIT
age: 1295584
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f46bfd5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/storePage.css
104.16.43.62200 OK 448 B URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/storePage.css
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash c2623c7dcd1f41157c8feb500d3bb7bc
b65da07a6570a317d63b2ff9bf18184730066db4
7adb8efe2578c33623aff060157b4a13f1356e7a0762b744b59749cfc743b31e
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/storePage.css HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: text/css
cache-control: public, max-age=2591887
cf-bgj: minify
cf-polished: origSize=849
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:25 GMT
last-modified: Thu, 07 Dec 2023 02:31:18 GMT
x-dw-request-base-id: POnenT17c2UBAAB_
cf-cache-status: HIT
age: 19223
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bf25f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw18acd0f0/images/header/fsa-perks-dashboard.svg
104.16.43.62200 OK 59 kB URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw18acd0f0/images/header/fsa-perks-dashboard.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 701c90f0841f8aefad5c58acfb00433e
b22335880678574fd53c5dc37c82aa91a31ed64a
fedfd06f9ed3ec28e39ec89fa91a710c9b718ccb7d136ee9d7ab5437de4a6c66
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw18acd0f0/images/header/fsa-perks-dashboard.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: -p3eePEOYGUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591427
expires: Sun, 24 Dec 2023 02:48:17 GMT
last-modified: Tue, 27 Oct 2020 20:44:19 GMT
cf-cache-status: HIT
age: 1291671
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bfc5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/dwdf172db0/svg/symbols.svg
104.16.43.62200 OK 62 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/dwdf172db0/svg/symbols.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 2a7ad8efc557a0d0c8bdb7a1bae1b271
416d81f7000d195e77ed9f6d3e575f61c6f2a868
536772ba3ac2946753b8fc51eaa3aa4a9f8b7a65cac7384765852f40f77a308f
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/dwdf172db0/svg/symbols.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: image/svg+xml
x-dw-request-base-id: POlSQYYvcWUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591140
expires: Sat, 06 Jan 2024 02:35:50 GMT
last-modified: Thu, 07 Dec 2023 02:29:58 GMT
cf-cache-status: HIT
age: 168932
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f7cd545f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/components/commerceAssets/imageAndTextCommon.css
104.16.43.62200 OK 24 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/components/commerceAssets/imageAndTextCommon.css
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash f04b18e4c0facb7a89b9811da373a427
ce68b88ed4e2cd5eef26b785edec944b7c5e5bac
d02976e3a65b96058b43dab020945b3881690fee49e3a54ce3e29506d82e8937
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/components/commerceAssets/imageAndTextCommon.css HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: text/css
cache-control: public, max-age=2591887
cf-bgj: minify
cf-polished: origSize=1151
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:25 GMT
last-modified: Thu, 07 Dec 2023 02:31:42 GMT
vary: accept-encoding
x-dw-request-base-id: -p2EtD17c2UBAAB_
cf-cache-status: HIT
age: 19223
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bf85f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/components/commerceAssets/campaignBanner.css
104.16.43.62200 OK 77 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/components/commerceAssets/campaignBanner.css
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash fe5bae45bd3dc057977ea3dc905f60b0
02a51bd240770a232426a64423185e12347038d6
01edacc4092aca04766c89d1792357484d1021eb3fea806ccaf915a6a6429170
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/components/commerceAssets/campaignBanner.css HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: text/css
cache-control: public, max-age=2591887
cf-bgj: minify
cf-polished: origSize=1092
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:25 GMT
last-modified: Thu, 07 Dec 2023 02:31:42 GMT
vary: accept-encoding
x-dw-request-base-id: POnSnT17c2UBAAB_
cf-cache-status: HIT
age: 19223
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bf95f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/Wraith%20Types%20-%20WT%20Volkolak%20Sans%20Display%20Bold.otf
104.16.43.62200 OK 41 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/Wraith%20Types%20-%20WT%20Volkolak%20Sans%20Display%20Bold.otf
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type OpenType font data\012- data
Hash 75d7e09dc33aed543caffed3361694c9
bc14fe94cda6eac70ba4b1d3a2c7ac6c153212ac
157a4d7743b405c90eb47e61f070ee5bd26658d521a987d393ef7ef4c7273341
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/Wraith%20Types%20-%20WT%20Volkolak%20Sans%20Display%20Bold.otf HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/fonts.css
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: application/x-font-otf
content-length: 41356
x-dw-request-base-id: -p1BtT17c2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591874
expires: Sun, 07 Jan 2024 20:23:25 GMT
last-modified: Thu, 07 Dec 2023 02:31:19 GMT
cf-cache-status: HIT
age: 19210
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f7fd635f01-ARN
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/components/commerceLayouts/layout.css
104.16.43.62200 OK 124 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/components/commerceLayouts/layout.css
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 124 kB (123995 bytes)
Hash eace2cd1cf97896e0659e64baf2d89a8
8cc67b0691c8711969c70576e82ba2051e22acf6
67ea12b707f24af171971274b1c2f9a181dcd38d5c7bb1004f9fddca3f565689
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/experience/components/commerceLayouts/layout.css HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: text/css
cache-control: public, max-age=2591888
cf-bgj: minify
cf-polished: origSize=15220
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:26 GMT
last-modified: Thu, 07 Dec 2023 02:31:42 GMT
vary: accept-encoding
x-dw-request-base-id: -p1jtT57c2UBAAB_
cf-cache-status: HIT
age: 19223
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bf35f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
container.pepperjam.com/3830592444.js
54.230.111.9200 OK 8.7 kB URL GET HTTP/2 container.pepperjam.com/3830592444.js
IP 54.230.111.9:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoDaddy.com, Inc.
Subject*.pepperjam.com
Fingerprint11:6F:B6:E4:B3:14:F9:D6:6D:F9:23:8A:35:F4:90:01:E5:DC:7F:71
ValiditySun, 29 Jan 2023 22:22:31 GMT - Fri, 01 Mar 2024 22:22:31 GMT
File type ASCII text, with very long lines (7675)
Hash cda0a8b1fb96cd23c5b8431794f284c4
1f35877958ab6fd4f7c001b2d95b6032a8864a15
c0845965bb6f39caab6e9132495f4c6e773db92584cc4a2d8359aaf06f193424
GET /3830592444.js HTTP/1.1
Host: container.pepperjam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 8688
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Aug 2020 18:11:46 GMT
x-amz-version-id: 6UVUv6DaoAzoiZU.lz11SvBaKPguAYbb
accept-ranges: bytes
server: AmazonS3
date: Sat, 09 Dec 2023 01:41:23 GMT
cache-control: max-age=900
etag: "cda0a8b1fb96cd23c5b8431794f284c4"
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DICjXArjBg0gfOcvqsKkQyW912zVDmJ7NQjfsLEbv5xtjq2mGG8lMA==
age: 260
X-Firefox-Spdy: h2
fsast11112.pcapredict.com/js/sensor.js
34.117.233.127200 OK 14 kB URL GET HTTP/2 fsast11112.pcapredict.com/js/sensor.js
IP 34.117.233.127:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subject*.pcapredict.com
Fingerprint44:4F:D5:8A:1B:10:1F:DF:8C:B4:61:DE:CC:20:6E:8A:85:17:A2:B3
ValidityTue, 15 Aug 2023 00:00:00 GMT - Tue, 13 Aug 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (325), with CRLF, LF line terminators
Hash 4855e20ea3c78f16f00ef37ead669122
854b64416b0f94f310c0aef3620d6a5b551280ec
eb861e4c07a341dd630e0a37fbd566eb5c144c3e35114760e01072eea389afa1
GET /js/sensor.js HTTP/1.1
Host: fsast11112.pcapredict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.2
content-length: 14276
content-encoding: gzip
x-robots-tag: noindex
via: 1.1 google
date: Sat, 09 Dec 2023 01:44:06 GMT
cache-control: public, max-age=60
age: 96
content-type: text/javascript;charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/dwb6716c90/images/favicons/favicon-16x16.png
104.16.43.62200 OK 422 B URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/dwb6716c90/images/favicons/favicon-16x16.png
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 68306b8271084c67f3b42ac13ac55cdc
e246c0da5ad6cf1f84fb65117efbaf154af190a0
ebe4354be63d50c6a57414f447ed421d711dfd8dab85db3ea535d47958a57a33
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/dwb6716c90/images/favicons/favicon-16x16.png HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==; ConstructorioID_client_id=66827123-438d-4da9-8c74-1cdad22049d3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: image/webp
content-length: 422
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=930
content-disposition: inline; filename="favicon-16x16.webp"
cross-origin-resource-policy: cross-origin
expires: Mon, 08 Jan 2024 00:27:35 GMT
last-modified: Thu, 07 Dec 2023 02:30:31 GMT
vary: Accept
x-dw-request-base-id: POlo-Xe0c2UBAAB_
cf-cache-status: HIT
age: 4686
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991fa7e015f01-ARN
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/953.js
54.230.111.48200 OK 89 kB URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/953.js
IP 54.230.111.48:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 24a613ae6700fbe516eac5001854449e
df528be2c5b7e1c97e8a3568c99ac835154a5d2b
5744b2a12f81930f50c458ac599791faf37ffb79f2e1040be8878f10d4d59fc4
GET /tag-builds/10446/4.1/js/chunks/953.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Nov 2023 19:15:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:01 GMT
etag: W/"e54a7d4c1a7e11ce61d0411b2b8d9083"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: PowerReviews
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q6rj153SPd8dJR6VmlJAi8rhBU2oLEZKyyE_Pp6EkxZmC7u_0UT9lQ==
age: 973799
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/VolkoSerif-TextRegular.woff2
104.16.43.62200 OK 24 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/VolkoSerif-TextRegular.woff2
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), CFF, length 23788, version 5.0\012- data
Hash df668b2d2103adc6111c9c8451d6bff5
b2a2412ea10d16d4a369f639e898e75e763eaa44
0a59144a09e5696781d04c2939b1481411c752069ca6704c5030b4a0567f5ee1
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/VolkoSerif-TextRegular.woff2 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/fonts.css
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==; ConstructorioID_client_id=66827123-438d-4da9-8c74-1cdad22049d3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: font/woff2
content-length: 23788
x-dw-request-base-id: POkfnj17c2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591866
expires: Sun, 07 Jan 2024 20:23:25 GMT
last-modified: Thu, 07 Dec 2023 02:31:19 GMT
cf-cache-status: HIT
age: 19203
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991fb9e485f01-ARN
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/Wraith%20Types%20-%20WT%20Volkolak%20Sans%20Display%20Regular.otf
104.16.43.62200 OK 41 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/Wraith%20Types%20-%20WT%20Volkolak%20Sans%20Display%20Regular.otf
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type OpenType font data\012- data
Hash 5ba7d4e497cc31db11c8be8f78503700
4e1690e38be5034995f51852540888cdcb820010
cb29a15438251f2393d197f4e6396b575e5dacc086e122332bc7d7a9110baecb
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/Wraith%20Types%20-%20WT%20Volkolak%20Sans%20Display%20Regular.otf HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/fonts.css
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==; ConstructorioID_client_id=66827123-438d-4da9-8c74-1cdad22049d3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: application/x-font-otf
content-length: 41224
x-dw-request-base-id: -p1gtDx7c2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591866
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:31:19 GMT
cf-cache-status: HIT
age: 19203
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991fb8e475f01-ARN
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/global.css
104.16.43.62200 OK 123 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/global.css
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 123 kB (122651 bytes)
Hash ffe732f52a6fe936d6caa23cd36ff181
38f4ffa14ae4ad1dff75b2e1798f1719d1623074
6f9862f3d31b44ebdee741e9973fae385b79ecf843980093ff6e13fec64c227d
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/global.css HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: text/css
cache-control: public, max-age=2591887
cf-bgj: minify
cf-polished: origSize=999108
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:29:59 GMT
vary: accept-encoding
x-dw-request-base-id: POmjnTx7c2UBAAB_
cf-cache-status: HIT
age: 19223
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bf15f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-3ERPGK1885&l=dataLayer&cx=c
142.250.74.72200 OK 93 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-3ERPGK1885&l=dataLayer&cx=c
IP 142.250.74.72:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (7711)
Hash 57d8a66c53e0c86e5c764dcdbd2add6a
1b0e329cb3d2f3027a120d980c589a054ae23872
46ab787d82e7373bac6e34b3904eca4e1b1c7b6756ae66f70e52d44f36558e4b
GET /gtag/js?id=G-3ERPGK1885&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 01:45:42 GMT
expires: Sat, 09 Dec 2023 01:45:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92989
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
collector-px9ipgehjq.px-cloud.net/api/v2/collector
35.190.10.96200 OK 1.1 kB URL POST HTTP/2 collector-px9ipgehjq.px-cloud.net/api/v2/collector
IP 35.190.10.96:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subject*.px-cloud.net
Fingerprint1C:B8:82:2A:F3:7A:B5:C0:1E:05:8E:16:66:5F:A8:52:C5:A0:E0:80
ValidityTue, 15 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (1103)
Hash ea0830c852df1929f685189810126da3
7b8625683b19235db981de17f42195ebab349b81
53a42180a1dd56aad3687221ee512f4ba22325d4d68f1497f8e27e174a4da547
POST /api/v2/collector HTTP/1.1
Host: collector-px9ipgehjq.px-cloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Content-type: application/x-www-form-urlencoded
Content-Length: 823
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: application/json; charset=utf-8
content-length: 1104
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://fsastore.com
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/thirdParty/include.js
104.16.43.62200 OK 14 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/thirdParty/include.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash b6960dc92a3fa879a499dd311aed668a
5b824105fd76b0d80cc3c9b54038eb3ac1f0bd77
8c992ab5c634d556c41b74fc3ac8cef95eddc9a763f48848f27dda518849eb81
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/thirdParty/include.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590733
cf-bgj: minify
cf-polished: origSize=6204
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:31:19 GMT
vary: accept-encoding
x-dw-request-base-id: -p0QtDx7c2UBAAB_
cf-cache-status: HIT
age: 18070
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bef5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore3278751z.btttag.com/btt.js
104.22.58.128200 OK 26 kB URL GET HTTP/2 fsastore3278751z.btttag.com/btt.js
IP 104.22.58.128:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint46:53:28:6B:A7:88:F7:40:54:95:99:19:DE:95:E3:D4:04:1A:92:86
ValidityWed, 03 May 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ffc87b8a311af75fa7528e91bb508c9b
490cf525cffeaf644cf0d7711d6b6d8c5683e204
7f313b32d531327051f1ce0fc08881682fa757ba21b11e47ce8ec461668b254a
GET /btt.js HTTP/1.1
Host: fsastore3278751z.btttag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:43 GMT
content-type: application/javascript
content-length: 25725
timing-allow-origin: *
cache-control: max-age=43200
x-frame-options: SAMEORIGIN
last-modified: Fri, 08 Dec 2023 16:04:53 GMT
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 34850
accept-ranges: bytes
server: cloudflare
cf-ray: 832991fc4e530b02-OSL
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/internal/jscript/dwac-21.7.js
104.16.43.62200 OK 44 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/internal/jscript/dwac-21.7.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 05e35dde072e13a40d337581b21f3843
6ac943f5316bc0ab49b9723b939d7d26a48a5149
bd87f27e681a2b83b61f7fe59de8681632020363b50705e035f061a6fe0dfab9
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/internal/jscript/dwac-21.7.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590701
cf-bgj: minify
cf-polished: origSize=5007
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Fri, 08 Dec 2023 20:23:24 GMT
vary: accept-encoding
x-dw-request-base-id: POmwnTx7c2UBAAB_
cf-cache-status: HIT
age: 18037
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4dc505f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkSendSCA.js
104.16.43.62200 OK 1.1 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkSendSCA.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 8a302eb6bfee4dd9f5d297594968db45
d1b4998f8fa63e283df83390ff4ae943cea8c287
ce704f4b307f3bb90f959741543ba456d24bec6289834711374b552dbc5b435e
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkSendSCA.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2591845
cf-bgj: minify
cf-polished: origSize=2659
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:30:34 GMT
vary: accept-encoding
x-dw-request-base-id: POkenTx7c2UBAAB_
cf-cache-status: HIT
age: 19182
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4cc425f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
cas.zma.gs/6411fe8c6df9f10f76c9df53/ssr/experiences/64c285126df9f10f76001a28/64c285126df9f10f76001a28.html
2.21.240.203200 OK 2.8 kB URL GET HTTP/2 cas.zma.gs/6411fe8c6df9f10f76c9df53/ssr/experiences/64c285126df9f10f76001a28/64c285126df9f10f76001a28.html
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type HTML document, ASCII text, with very long lines (11143)
Hash a12e8f7e514f70a05fc4f1435bf330ca
6dae4c9dd5151ea44f06a2a01ce4a0195fc802a3
c82fa2cbe7fdd7d5437c8c2c6e530b20bfdd3169da55b19612bcd8a9890fd53f
GET /6411fe8c6df9f10f76c9df53/ssr/experiences/64c285126df9f10f76001a28/64c285126df9f10f76001a28.html HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: rySgR+57SgzzBbTUADJrVRKwb5qY0pSCq0yuG0H1DIbayKarhTTfDmSJlQjaVBH6i2rn2LNl80s=
x-amz-request-id: 33TEAGD3PA62AA1S
access-control-allow-methods: PUT, POST, DELETE, HEAD, GET
last-modified: Fri, 17 Nov 2023 01:22:28 GMT
etag: "8c68b9fe1b6b697497614175ec1aa143"
x-amz-server-side-encryption: AES256
content-encoding: br
x-amz-version-id: aJ65fM6VxuaVTV8vnNYhP3ThhhjuLlVA
accept-ranges: bytes
content-type: text/html; charset=utf-8
content-length: 2773
cache-control: max-age=300
expires: Sat, 09 Dec 2023 01:50:43 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
zmags-ssr: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
dx.mountain.com/spx?dxver=4.0.0&shaid=32398&tdr=&plh=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&cb=38954285081435390term=value
34.238.149.65200 OK 5.2 kB URL GET HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=32398&tdr=&plh=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&cb=38954285081435390term=value
IP 34.238.149.65:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type Unicode text, UTF-8 text, with very long lines (19310), with no line terminators
Hash 93b49ad0ccf9609c16e67d76d2a83959
86f19ebf32854a6e1d4f87e57f24851e6458a5bb
1edc6ce030c2c4de97e15bbeb6ee0711a80efdd3000378a1f1731942fdd35fb8
GET /spx?dxver=4.0.0&shaid=32398&tdr=&plh=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&cb=38954285081435390term=value HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Sat, 09 Dec 2023 01:45:43 GMT
x-envoy-upstream-service-time: 4
be: spx-prod
server: istio-envoy
transfer-encoding: chunked
cdn.heapanalytics.com/js/replay/2449-Main-prod-heap/container.js
54.230.111.90200 OK 6.0 kB URL GET HTTP/3 cdn.heapanalytics.com/js/replay/2449-Main-prod-heap/container.js
IP 54.230.111.90:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subjectcdn.heapanalytics.com
FingerprintB9:4F:9B:ED:D3:9F:F8:A6:6B:26:1D:83:87:91:36:65:F4:39:A5:DC
ValidityThu, 29 Jun 2023 00:00:00 GMT - Sat, 27 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (3481)
Hash fb91e78419e0d5b3c5ca504fd6f40ad5
d3e59b4dfc29b07ba62e2e1a9952995326133b52
bcf258a0a2f1c2e3e74fcf9e5364ce471bc60893212d371cf68ef0707bb86b34
GET /js/replay/2449-Main-prod-heap/container.js HTTP/1.1
Host: cdn.heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 5954
age: 60299
last-modified: Wed, 29 Nov 2023 18:04:15 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: qHJXaorKNE2MXBRTgsmURPMlKXpj70zM
accept-ranges: bytes
server: AmazonS3
date: Fri, 08 Dec 2023 15:35:18 GMT
cache-control: public,max-age=86400
etag: "0a09d21541e2e58e617e66f30b0c2cff"
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1iy2ZyyQBn_08lVboOqGUkQHNwogYH8jl0fXHgBKEasxZk-GpW0lGQ==
cas.zma.gs/static/598609c9/styles.598609c9.css
2.21.240.203200 OK 2.9 kB URL GET HTTP/2 cas.zma.gs/static/598609c9/styles.598609c9.css
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type ASCII text, with very long lines (28061)
Hash 613099dd54aaa7100b286971dbf92bae
857564ab19888b2c21c5758d28950609974c49dc
24a9350b4022da5cd2547a2751ac73c73be34ff2a9d924c0117c60b3a323026f
GET /static/598609c9/styles.598609c9.css HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
accept-ranges: bytes
content-encoding: br
etag: "613099dd54aaa7100b286971dbf92bae"
last-modified: Wed, 06 Dec 2023 10:39:13 GMT
vary: Accept-Encoding
x-amz-id-2: W7HC0dgDoSfYm0CcMLD1XZDRmUX6SOxmywguQWCPHgAsOEk1kKg2VvDEJ8nAMRNdqZIZbPF+58M=
x-amz-meta-zmags-version: 598609c9
x-amz-request-id: F4H6XQBJ1Y9353P2
x-amz-server-side-encryption: AES256
x-amz-version-id: m44YPZScz49XsZjOnMQ4gAhQQvGbn9fZ
content-length: 2935
cache-control: public, max-age=377587
expires: Wed, 13 Dec 2023 10:38:50 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cas.zma.gs/6411fe8c6df9f10f76c9df53/ssr/experiences/64c285126df9f10f76001a28/64c285126df9f10f76001a28_state.json
2.21.240.203200 OK 3.2 kB URL GET HTTP/2 cas.zma.gs/6411fe8c6df9f10f76c9df53/ssr/experiences/64c285126df9f10f76001a28/64c285126df9f10f76001a28_state.json
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type ASCII text, with very long lines (13322), with no line terminators
Hash 16ee3778a8ccbbdb68de215d05e6a703
bdd250fb5fc1162ed602f804544554181dce5bdd
bc9707f3b44040b50de1e86470137bc01847dd7650040b735b7c9a09063a6c33
GET /6411fe8c6df9f10f76c9df53/ssr/experiences/64c285126df9f10f76001a28/64c285126df9f10f76001a28_state.json HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: UvrUG9b98aqB2sFL/CxZgLdSfo1pl7+dSwUy4Tss3uqmk5dgWBKZgUK/WSR9EA5DTxiabPsp9wI=
x-amz-request-id: 207XPGVCNXAR636V
access-control-allow-methods: PUT, POST, DELETE, HEAD, GET
last-modified: Fri, 17 Nov 2023 01:22:28 GMT
etag: "173d8f193bbbda38e75bd5d04a9e72cd"
x-amz-server-side-encryption: AES256
content-encoding: br
x-amz-version-id: BNadNxY7CYahYyPsPwSRrUDwMKMW1ysW
accept-ranges: bytes
content-type: application/json
content-length: 3150
cache-control: max-age=300
expires: Sat, 09 Dec 2023 01:50:43 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
zmags-ssr: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
cas.zma.gs/static/598609c9/commons.598609c9.js
2.21.240.203200 OK 15 kB URL GET HTTP/2 cas.zma.gs/static/598609c9/commons.598609c9.js
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type Unicode text, UTF-8 text, with very long lines (44739), with NEL line terminators
Hash 196c50f9af01324d9a7e33db5864bd4e
70853251a5a7dbc576e252fb3c94d406fec1f4d4
4a85f35062d1577b00faed3fd3ffd9e20c85e18e78bfd7802a60ea5198a4ba07
GET /static/598609c9/commons.598609c9.js HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
accept-ranges: bytes
content-encoding: br
etag: "196c50f9af01324d9a7e33db5864bd4e"
last-modified: Sun, 22 Oct 2023 02:02:34 GMT
vary: Accept-Encoding
x-amz-id-2: kao7aX2DC+QxoZ0mp3KRUOjZY5Jik4068xAbJ/JarxdPU45ZLCS1L4N/va4Ze3kyW9oWrd4eYkE=
x-amz-meta-zmags-version: 598609c9
x-amz-request-id: 6C61R4JV9RFZ0PV4
x-amz-server-side-encryption: AES256
x-amz-version-id: GCSpISQfZelaylv4nEvmbn7KwH7_h.12
content-length: 15043
cache-control: public, max-age=268551
expires: Tue, 12 Dec 2023 04:21:34 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cas.zma.gs/static/598609c9/driver.598609c9.js
2.21.240.203200 OK 31 kB URL GET HTTP/2 cas.zma.gs/static/598609c9/driver.598609c9.js
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type ASCII text, with very long lines (58431)
Hash 4fe48bfe27a4fd339e1861c5a5f8baea
6100befe63da3d63cb2ae1f334846c08c9dabbc6
7654ac52deda2ee078877c715f6745b89a5bc2f4edee64e234dd784ea56f04e5
GET /static/598609c9/driver.598609c9.js HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
accept-ranges: bytes
content-encoding: br
etag: "4fe48bfe27a4fd339e1861c5a5f8baea"
last-modified: Tue, 05 Dec 2023 16:15:38 GMT
vary: Accept-Encoding
x-amz-id-2: znV62ImnGk4AvOsyP/JvMraZSjIRnOaC1liiwAHJQpSOfIenmCtiHzIpB9cjyE3TY7EJo6xyAvA=
x-amz-meta-zmags-version: 598609c9
x-amz-request-id: RF595T6T3QAEHN6B
x-amz-server-side-encryption: AES256
x-amz-version-id: nTLX.EzFT9xLvs1AJovRk9BlXzFqZJn6
content-length: 31280
cache-control: public, max-age=311403
expires: Tue, 12 Dec 2023 16:15:46 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cas.zma.gs/static/598609c9/vendor.598609c9.js
2.21.240.203200 OK 60 kB URL GET HTTP/2 cas.zma.gs/static/598609c9/vendor.598609c9.js
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 523322efa43ecb99b2c1b2b68803da8e
c46f98f81372a85601a55434c73d8d235e02c619
ab8bd151ad1a4906e078fce646798dd6f6bf632e0d7de6c67dad776631a5189a
GET /static/598609c9/vendor.598609c9.js HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
accept-ranges: bytes
content-encoding: br
etag: "523322efa43ecb99b2c1b2b68803da8e"
last-modified: Sun, 22 Oct 2023 09:41:34 GMT
vary: Accept-Encoding
x-amz-id-2: xw7j5E/ApJYGHPog89G2uxbzmAshdLhZXRlzAZPqEJ5Lf90+acN49Skgux47ycUCkm4LyVKipYo=
x-amz-meta-zmags-version: 598609c9
x-amz-request-id: JS707TMXXRNJ4985
x-amz-server-side-encryption: AES256
x-amz-version-id: 5ELOLELpWGjnZXEiingAI7vF8hBWBfcQ
content-length: 59955
cache-control: public, max-age=296329
expires: Tue, 12 Dec 2023 12:04:32 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cas.zma.gs/static/598609c9/gsap.598609c9.js
2.21.240.203200 OK 20 kB URL GET HTTP/2 cas.zma.gs/static/598609c9/gsap.598609c9.js
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type ASCII text, with very long lines (41682)
Hash 124867b561e96ea96385250c628403cb
e2a964e1d030d108cb8796ff367b7365304232bf
5427fa8abf9887cd0765f0407e7247a9c1e6937aac474511dd98d9c5f38eed1e
GET /static/598609c9/gsap.598609c9.js HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
accept-ranges: bytes
content-encoding: br
etag: "124867b561e96ea96385250c628403cb"
last-modified: Sun, 22 Oct 2023 02:32:54 GMT
vary: Accept-Encoding
x-amz-id-2: v7tx6Z+0kDA0rr4owFNE4Ak4NAo63Zndk5A9xHvPBWB+s3x1G6zfUKAeuzi7VTfqdVeBYmvJPzA=
x-amz-meta-zmags-version: 598609c9
x-amz-request-id: 2C0BBNXHT0ARPAF4
x-amz-server-side-encryption: AES256
x-amz-version-id: 2919dYU3eFRvCxEp8lcVdtBprcvfVMcD
content-length: 20316
cache-control: public, max-age=270967
expires: Tue, 12 Dec 2023 05:01:50 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cas.zma.gs/static/598609c9/reactPlayer.598609c9.js
2.21.240.203200 OK 4.7 kB URL GET HTTP/2 cas.zma.gs/static/598609c9/reactPlayer.598609c9.js
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type Unicode text, UTF-8 text, with very long lines (17672), with no line terminators
Hash c8b1ca83d5fe0c4197c82cc088846c44
653173e6a4cadd6aee7121034e7f200dd4189064
0266a1820b03317d931f2b3578471d5a61e37ee7fd87cc86734144aea959a7c5
GET /static/598609c9/reactPlayer.598609c9.js HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
accept-ranges: bytes
content-encoding: br
etag: "c8b1ca83d5fe0c4197c82cc088846c44"
last-modified: Tue, 24 Oct 2023 01:48:04 GMT
vary: Accept-Encoding
x-amz-id-2: 654kdXVwO32x5fUr9tdQy8v73PYYOr+8XuQsgkZVtPY/i5bG6qPYTsPmPbeUhYUJT4WAkitNLuE=
x-amz-meta-zmags-version: 598609c9
x-amz-request-id: 4RMQ52HP6YY7RS0F
x-amz-server-side-encryption: AES256
x-amz-version-id: j1hmSp53w_97Ds16VV4o5z_waXjpGs.7
content-length: 4736
cache-control: public, max-age=440960
expires: Thu, 14 Dec 2023 04:15:03 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cas.zma.gs/static/598609c9/manifest.598609c9.js
2.21.240.203200 OK 656 B URL GET HTTP/2 cas.zma.gs/static/598609c9/manifest.598609c9.js
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type ASCII text, with very long lines (1481), with no line terminators
Hash b3dc84e0b2f67b0deaacfe1f1c231848
2ecf05f9602f93bb58ff40b25099ee578b7c14fe
61fd69d291abe573f1e3c12d70bd5fbf3162f9988f92d6b20dafa0bd7bf9b215
GET /static/598609c9/manifest.598609c9.js HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
accept-ranges: bytes
content-encoding: br
etag: "b3dc84e0b2f67b0deaacfe1f1c231848"
last-modified: Sun, 26 Nov 2023 14:01:19 GMT
vary: Accept-Encoding
x-amz-id-2: SH3YVzR94g/yXgkvp4jTV/6A6rlmtJ98xKMKz2Sy1JrEQ9iKOhZa9b2ky632VhWlfKLyRad+bMo=
x-amz-meta-zmags-version: 598609c9
x-amz-request-id: K88VJ91A53BNMXBG
x-amz-server-side-encryption: AES256
x-amz-version-id: ONNWubIPi03A05Ly85gmYIJGdknLG.oJ
content-length: 656
cache-control: public, max-age=70053
expires: Sat, 09 Dec 2023 21:13:16 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
cas.zma.gs/static/598609c9/client.598609c9.js
2.21.240.203200 OK 37 kB URL GET HTTP/2 cas.zma.gs/static/598609c9/client.598609c9.js
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash cf4f77651752a12981fb641e097e3937
3b7986fc569e92498bd2edc5a8cda1772ebabb5b
a940159a1e4cfdd4ba8046ba08a11ab0a4d8461a666084b93213443433c38191
GET /static/598609c9/client.598609c9.js HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
accept-ranges: bytes
content-encoding: br
etag: "cf4f77651752a12981fb641e097e3937"
last-modified: Tue, 05 Dec 2023 22:54:40 GMT
vary: Accept-Encoding
x-amz-id-2: V6uKL+LzwERs7sRjAAn2290l9F0qzaQMYHeBzfAAqUbIZuNVqol7eUjd1aES7Q4KvVXeM8WsqW8=
x-amz-meta-zmags-version: 598609c9
x-amz-request-id: H8RM9TNQDG05FADD
x-amz-server-side-encryption: AES256
x-amz-version-id: _3OzbRHC4k6m4uEeJCN7k.VFfNxUK1He
content-length: 37004
cache-control: public, max-age=335326
expires: Tue, 12 Dec 2023 22:54:29 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
fsastore.com/on/demandware.store/Sites-FSASTORE-Site/default/__Analytics-Start?url=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&res=1280x1024&cookie=1&ref=&title=Savings%20Center%20%7C%20FSA%20Store&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.22305667613447955&cmpn=&tz=US/Pacific&pcc=USD&pct=&pcat=&dw_dnt=0
104.16.43.62200 OK 35 B URL GET HTTP/2 fsastore.com/on/demandware.store/Sites-FSASTORE-Site/default/__Analytics-Start?url=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&res=1280x1024&cookie=1&ref=&title=Savings%20Center%20%7C%20FSA%20Store&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.22305667613447955&cmpn=&tz=US/Pacific&pcc=USD&pct=&pcat=&dw_dnt=0
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /on/demandware.store/Sites-FSASTORE-Site/default/__Analytics-Start?url=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&res=1280x1024&cookie=1&ref=&title=Savings%20Center%20%7C%20FSA%20Store&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.22305667613447955&cmpn=&tz=US/Pacific&pcc=USD&pct=&pcat=&dw_dnt=0 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==; ConstructorioID_client_id=66827123-438d-4da9-8c74-1cdad22049d3; _gcl_au=1.1.1793793767.1702086350; _px3=0a0e10492f0415b98bd0dd76a4c26aa87fcfcc90e52801b829b1c26cecfc1e31:ZPm1CBqYmfTLJwDNYRD0KcoCN8MNAJUrCGonTxIvI7B0oXCzX+YkaZTSilPtonGzHzlkdEvdPlZ/krQrQ2y4Fg==:1000:yS2YJbqL93T2/Hoaqnbu8qKAkEd1xqbYEARmBXa0lSTSbak/tl9SHBdJC8O74IXWvJL57GWtAqzcGKGGIIbPui6RCPrpk/IFrYxhdT7tUW2RdqY50AllEwQ+Wbs29GsHgJWfxhGK5R6plNM2+h/3gipo6R5vQfH5aLPorVqucga7uBUsnGNIFGnaOZzzVFuXBXSmusCkD9jJGAaTd2sQv7pUHS93ePIvy7Bqv3ddWBY=; _pxvid=a8ecf8fa-9634-11ee-a66d-80d631a343f0; pxcts=aa0aa0e8-9634-11ee-84a4-b9e5f254fc1b; _ga_3ERPGK1885=GS1.1.1702086350.1.0.1702086350.60.0.0; _ga=GA1.1.1878084184.1702086350; lastRskxRun=1702086350505; rskxRunCookie=0; rCookie=jaibd79t4f4dkabufrzk3lpxe9ley; _hp2_ses_props.4104330493=%7B%22z%22%3A0%2C%22us%22%3A%22Payflex%22%2C%22um%22%3A%22tpa%20email%20ins%20banner%20squ5%20intro%22%2C%22ua%22%3A%22TPA%20Partner%22%2C%22ts%22%3A1702086350591%2C%22d%22%3A%22fsastore.com%22%2C%22h%22%3A%22%2Fsavings-center.html%22%2C%22t%22%3A%22Savings%20Center%20%7C%20FSA%20Store%22%2C%22q%22%3A%22%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner%22%7D; _hp2_id.4104330493=%7B%22userId%22%3A%225803538733284113%22%2C%22pageviewId%22%3A%221170803233213643%22%2C%22sessionId%22%3A%225839996879261482%22%2C%22identity%22%3Anull%2C%22trackerVersion%22%3A%224.0%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:44 GMT
content-type: image/gif
content-length: 35
accept-ranges: bytes
x-dw-request-base-id: -p1YaMfGc2UBAAB_
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832992012fc95f01-ARN
X-Firefox-Spdy: h2
44.212.189.233/is
44.212.189.233200 OK 32 B IP 44.212.189.233:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subject44.212.189.233
Fingerprint22:CB:0C:58:DC:72:D7:0A:ED:D2:00:94:C4:93:F9:1A:08:49:49:CB
ValidityWed, 15 Feb 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash ffe9d8bfecbf8b560e6e474083cd00d5
a0ddb0dfb107466cc751299e021245afadcf91b6
b855fc73b9d5a9e807b4384170c1bb861361780ba2b4ecb1e03bb7f294689265
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /is HTTP/1.1
Host: 44.212.189.233
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 09 Dec 2023 01:45:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
client-api.auryc.com/releasesettings?lib=Web
34.66.73.214200 OK 0 B URL OPTIONS HTTP/2 client-api.auryc.com/releasesettings?lib=Web
IP 34.66.73.214:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subject*.auryc.com
FingerprintDD:6D:11:19:EB:4E:85:AA:A8:B9:E9:B6:41:A8:1C:AB:54:36:70:A4
ValidityTue, 26 Sep 2023 02:06:43 GMT - Mon, 25 Dec 2023 02:06:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /releasesettings?lib=Web HTTP/1.1
Host: client-api.auryc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-authorized-identity,x-authorized-token
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: https://fsastore.com
access-control-allow-methods: OPTIONS,HEAD,GET,PUT,POST,DELETE,PATCH
access-control-allow-headers: x-authorized-identity, x-authorized-token
access-control-allow-credentials: true
content-length: 0
date: Sat, 09 Dec 2023 01:45:43 GMT
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2
collector-px9ipgehjq.px-cloud.net/api/v2/collector
35.190.10.96200 OK 600 B URL POST HTTP/2 collector-px9ipgehjq.px-cloud.net/api/v2/collector
IP 35.190.10.96:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subject*.px-cloud.net
Fingerprint1C:B8:82:2A:F3:7A:B5:C0:1E:05:8E:16:66:5F:A8:52:C5:A0:E0:80
ValidityTue, 15 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (599)
Hash 268fcdbfacd05032e3ec74ca83a1a0e0
0e2fe35942791486a28b9a8ec05ecd194e6567c6
7e01a43811be0432e416f7c8daf1a309c5453b3a88aad8d3ac9240d8789b0cf2
POST /api/v2/collector HTTP/1.1
Host: collector-px9ipgehjq.px-cloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Content-type: application/x-www-form-urlencoded
Content-Length: 7562
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:43 GMT
content-type: application/json; charset=utf-8
content-length: 600
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://fsastore.com
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/classic/latest/web-widget-chat-sdk-1bfc6fa.js
104.18.72.113200 OK 52 kB URL GET HTTP/2 static.zdassets.com/web_widget/classic/latest/web-widget-chat-sdk-1bfc6fa.js
IP 104.18.72.113:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectzdassets.com
Fingerprint5F:75:10:F4:97:EA:C8:48:F9:4F:E6:19:19:A3:13:24:44:C1:E7:3C
ValidityMon, 23 Oct 2023 13:35:25 GMT - Sun, 21 Jan 2024 13:35:24 GMT
File type ASCII text, with very long lines (65307)
Hash b8284a4b45e40625c2b90a641ebe4a68
8285ea200e6679b92b07818033ee54199ccc13d5
965cba95c928e95003ce37271090406eaa7d5c2d955230a785b2b3be8a9a17f5
GET /web_widget/classic/latest/web-widget-chat-sdk-1bfc6fa.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:44 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 1eGND/GjxrlQxia9pWdTTwHT8UuCrrKDdbJzZuma1/VkfAY1PcOzD5FH1w1FjTJn2c8rVgJg5Po=
x-amz-request-id: 0X24BSPSV39D8D28
x-amz-replication-status: COMPLETED
last-modified: Tue, 05 Dec 2023 00:24:10 GMT
etag: W/"b8284a4b45e40625c2b90a641ebe4a68"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 00:24:09 GMT
x-amz-version-id: TdcYv88Lf5u9m3AG8eAA2HBmnexgob8V
cf-cache-status: HIT
age: 341810
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S1gkVf9%2FkwDkJ9kC5JWkXAWt35FcqKo%2FQu%2BL9NN2uie7B%2BoDcj7hRh3Hn%2F0Ozl7i3pWytWw%2FC33rVrbYTBGv%2Fnn93vtJ%2FSW9GK%2BUEouIQqD6uRbgbmwKAB%2FlaYS%2FA7LQQbh2gS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 83299202eed7568d-OSL
content-encoding: br
X-Firefox-Spdy: h2
img.riskified.com/img/image-l.gif?t=17020863506030.38696637772540676&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
52.54.172.171200 OK 35 B URL GET HTTP/2 img.riskified.com/img/image-l.gif?t=17020863506030.38696637772540676&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
IP 52.54.172.171:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerDigiCert Inc
Subjectimg.riskified.com
FingerprintA8:F3:27:00:4D:86:1C:D5:98:ED:EC:D0:76:3E:FE:26:DF:75:2B:DC
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File type GIF image data, version 87a, 1 x 1\012- data
Hash cfea9e094d58b54abf242e795f0b913f
cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
GET /img/image-l.gif?t=17020863506030.38696637772540676&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348 HTTP/1.1
Host: img.riskified.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sat, 09 Dec 2023 01:45:44 GMT
content-type: image/gif
content-length: 35
last-modified: Thu, 29 Sep 2022 08:50:09 GMT
etag: "63355c41-23"
accept-ranges: bytes
X-Firefox-Spdy: h2
heapanalytics.com/api/add_user_properties_v3?a=4104330493&u=5803538733284113&v=1170803233213643&s=5839996879261482&b=web&tv=4.0&_Notifications%20Permission=prompt&st=1702086350594&ei=218&et=variation
3.84.71.183200 OK 37 B URL GET HTTP/2 heapanalytics.com/api/add_user_properties_v3?a=4104330493&u=5803538733284113&v=1170803233213643&s=5839996879261482&b=web&tv=4.0&_Notifications%20Permission=prompt&st=1702086350594&ei=218&et=variation
IP 3.84.71.183:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subjectheapanalytics.com
Fingerprint9B:86:A5:40:F4:3B:FB:A9:5E:3B:2A:BD:9D:DB:4F:5D:67:B4:EA:9F
ValidityThu, 09 Nov 2023 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /api/add_user_properties_v3?a=4104330493&u=5803538733284113&v=1170803233213643&s=5839996879261482&b=web&tv=4.0&_Notifications%20Permission=prompt&st=1702086350594&ei=218&et=variation HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:44 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-4iFqfptz9csCeTUceM5hwzR1zqc"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cdn.heapanalytics.com/js/replay/libs/latest/auryc.lib.js
54.230.111.90200 OK 190 kB URL GET HTTP/3 cdn.heapanalytics.com/js/replay/libs/latest/auryc.lib.js
IP 54.230.111.90:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subjectcdn.heapanalytics.com
FingerprintB9:4F:9B:ED:D3:9F:F8:A6:6B:26:1D:83:87:91:36:65:F4:39:A5:DC
ValidityThu, 29 Jun 2023 00:00:00 GMT - Sat, 27 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65409)
Size 190 kB (189723 bytes)
Hash b41defe7ffb4834b0f80c6f07d4438f0
754dcd9442b6cf5043985cbcf3976798f367e037
26f5265a75315027b379a714b7f31a91c9a3a5e01bc32c8218fd1bec41318a27
GET /js/replay/libs/latest/auryc.lib.js HTTP/1.1
Host: cdn.heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 189723
age: 49642
last-modified: Fri, 17 Nov 2023 19:34:53 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: UsxucXCNC1AssPLigpqTyde1PD99H7TV
accept-ranges: bytes
server: AmazonS3
date: Fri, 08 Dec 2023 13:04:03 GMT
cache-control: max-age=86400
etag: "38145595252f4b939230d00d6da60c54"
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: eUBpHa4sQwvskXoM6Ps1Fx-WQnOc0FrlKOtOBP6lSE9uJmq0cJ1fpg==
bat.bing.com/bat.js
204.79.197.200200 OK 13 kB IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
File type Unicode text, UTF-8 text, with very long lines (46103), with no line terminators
Hash 7f75f159026f3a2c8cccda487b43157b
021cf5c854db063cd79bf0394c24eb994e095640
5e319852607809336b2534ffeb96f6933f26994dd040f535302c84f59cc0a214
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13175
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 10 Nov 2023 20:09:55 GMT
accept-ranges: bytes
etag: "80abcdf1114da1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8F563A4FF815429BA19B2DBEA9AABC1F Ref B: OSL30EDGE0413 Ref C: 2023-12-09T01:45:44Z
date: Sat, 09 Dec 2023 01:45:44 GMT
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-3ERPGK1885&cid=1878084184.1702086350>m=45je3bt0v885625877z8844299441&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=48007650
142.250.74.163200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-3ERPGK1885&cid=1878084184.1702086350>m=45je3bt0v885625877z8844299441&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=48007650
IP 142.250.74.163:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintDB:33:6A:DD:DA:72:55:0D:55:09:60:6E:D1:5B:40:D8:2B:9B:4F:3C
ValidityMon, 20 Nov 2023 08:12:16 GMT - Mon, 12 Feb 2024 08:12:15 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-3ERPGK1885&cid=1878084184.1702086350>m=45je3bt0v885625877z8844299441&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=48007650 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 09 Dec 2023 01:45:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
client-api.auryc.com/releasesettings?lib=Web
34.66.73.214200 OK 63 B URL OPTIONS HTTP/2 client-api.auryc.com/releasesettings?lib=Web
IP 34.66.73.214:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subject*.auryc.com
FingerprintDD:6D:11:19:EB:4E:85:AA:A8:B9:E9:B6:41:A8:1C:AB:54:36:70:A4
ValidityTue, 26 Sep 2023 02:06:43 GMT - Mon, 25 Dec 2023 02:06:42 GMT
File type gzip compressed data\012- data
Hash a03280e21c74cf964ced16d28f2981b8
b6f1b1e2b9bbf8a742b4e24c0660ed8aaa869b16
8394b8db93843140f01b2f601a3ef97422f47f69d8b6a8edc4b278f8f688cfef
GET /releasesettings?lib=Web HTTP/1.1
Host: client-api.auryc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
x-authorized-identity: 2449-Main-prod-heap
x-authorized-token: ff2775bd5a89aab33daeb3ae4b0230fb
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
vary: accept-encoding,origin,access-control-request-headers,access-control-request-method,accept-encoding
access-control-allow-credentials: true
access-control-allow-origin: https://fsastore.com
content-encoding: gzip
content-type: application/json
date: Sat, 09 Dec 2023 01:45:43 GMT
x-envoy-upstream-service-time: 3
server: istio-envoy
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkActivityTracking.js
104.16.43.62200 OK 1.2 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkActivityTracking.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 9c29eb357651fa0ac284f5b74bde790c
b1da4954b6ea3a7409f7bf56755d201ed8fb0f66
a38aeb3c0251aebd4c55024f47a01c3dcff8511f64527e001ccc3937abe47fa0
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkActivityTracking.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2591902
cf-bgj: minify
cf-polished: origSize=2948
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:30:34 GMT
vary: accept-encoding
x-dw-request-base-id: -p3Qszx7c2UBAAB_
cf-cache-status: HIT
age: 19239
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4cc415f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
widget-mediator.zopim.com/s/W/ws/vGWGtIha9rGwtSnx/c/1702086351126
52.58.87.58 0 B URL widget-mediator.zopim.com/s/W/ws/vGWGtIha9rGwtSnx/c/1702086351126
IP 52.58.87.58:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/vGWGtIha9rGwtSnx/c/1702086351126 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://fsastore.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4hhh5mHIjRJBxCoInwwllg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 09 Dec 2023 01:45:44 GMT
Connection: upgrade
Set-Cookie: AWSALB=ppZAi6UGAKSGau7mCcSyj9k0Z+YspqyxKLOrtMhxUMT/Fm61riktBYHM+C7j2CaAYm4i/AHYfghHF5S6Bm3090ISjpUn03KBXC9nE2m86FJrkRXxqQ3HQmEXzOf6; Expires=Sat, 16 Dec 2023 01:45:44 GMT; Path=/
AWSALBCORS=ppZAi6UGAKSGau7mCcSyj9k0Z+YspqyxKLOrtMhxUMT/Fm61riktBYHM+C7j2CaAYm4i/AHYfghHF5S6Bm3090ISjpUn03KBXC9nE2m86FJrkRXxqQ3HQmEXzOf6; Expires=Sat, 16 Dec 2023 01:45:44 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: UMO6KZgxTCCbec2+3D/iUXr6bUw=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
client-api.auryc.com/siteconfig?lib=web
34.66.73.214200 OK 0 B URL GET HTTP/2 client-api.auryc.com/siteconfig?lib=web
IP 34.66.73.214:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subject*.auryc.com
FingerprintDD:6D:11:19:EB:4E:85:AA:A8:B9:E9:B6:41:A8:1C:AB:54:36:70:A4
ValidityTue, 26 Sep 2023 02:06:43 GMT - Mon, 25 Dec 2023 02:06:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /siteconfig?lib=web HTTP/1.1
Host: client-api.auryc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-authorized-identity,x-authorized-token
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: https://fsastore.com
access-control-allow-methods: OPTIONS,HEAD,GET,PUT,POST,DELETE,PATCH
access-control-allow-headers: content-type, x-authorized-identity, x-authorized-token
access-control-allow-credentials: true
content-length: 0
date: Sat, 09 Dec 2023 01:45:44 GMT
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkClickTracking.js
104.16.43.62200 OK 225 B URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkClickTracking.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 7e1642c8dda7001ce4c12b0306e48834
c183ccbd29bafda37aeb5977de3836047242bb3a
6da6c24efe8cdc1e44a6f813f16c7385a88885ed55a34546c4f5efe5d279f823
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkClickTracking.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2591903
cf-bgj: minify
cf-polished: origSize=512
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:30:34 GMT
x-dw-request-base-id: POkWnTx7c2UBAAB_
cf-cache-status: HIT
age: 19240
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4cc3c5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
img.riskified.com/img/image-l.gif?t=17020863515720.25569449524648435&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
52.54.172.171200 OK 35 B URL GET HTTP/2 img.riskified.com/img/image-l.gif?t=17020863515720.25569449524648435&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
IP 52.54.172.171:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerDigiCert Inc
Subjectimg.riskified.com
FingerprintA8:F3:27:00:4D:86:1C:D5:98:ED:EC:D0:76:3E:FE:26:DF:75:2B:DC
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File type GIF image data, version 87a, 1 x 1\012- data
Hash cfea9e094d58b54abf242e795f0b913f
cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
GET /img/image-l.gif?t=17020863515720.25569449524648435&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348 HTTP/1.1
Host: img.riskified.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.3
date: Sat, 09 Dec 2023 01:45:44 GMT
content-type: image/gif
content-length: 35
last-modified: Thu, 29 Sep 2022 08:50:09 GMT
etag: "63355c41-23"
accept-ranges: bytes
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=4029727&tm=gtm002&Ver=2&mid=7ec3e79a-5fff-43cc-95b5-5c1332331308&sid=af082920963411ee894ad5ce05de4799&vid=af081a30963411ee8ba8e11f613d4245&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Savings%20Center%20%7C%20FSA%20Store&kw=FSA%20Store&p=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&r=<=3667&evt=pageLoad&sv=1&rn=179885
204.79.197.200204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=4029727&tm=gtm002&Ver=2&mid=7ec3e79a-5fff-43cc-95b5-5c1332331308&sid=af082920963411ee894ad5ce05de4799&vid=af081a30963411ee8ba8e11f613d4245&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Savings%20Center%20%7C%20FSA%20Store&kw=FSA%20Store&p=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&r=<=3667&evt=pageLoad&sv=1&rn=179885
IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=4029727&tm=gtm002&Ver=2&mid=7ec3e79a-5fff-43cc-95b5-5c1332331308&sid=af082920963411ee894ad5ce05de4799&vid=af081a30963411ee8ba8e11f613d4245&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Savings%20Center%20%7C%20FSA%20Store&kw=FSA%20Store&p=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&r=<=3667&evt=pageLoad&sv=1&rn=179885 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=05ABAEE43DA460AB316ABD063CF361DA; domain=.bing.com; expires=Thu, 02-Jan-2025 01:45:44 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 336C91A9B93048D89F1D955D2EB1C7B2 Ref B: OSL30EDGE0413 Ref C: 2023-12-09T01:45:44Z
date: Sat, 09 Dec 2023 01:45:44 GMT
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/classic/latest/web-widget-main-1bfc6fa.js
104.18.72.113200 OK 272 kB URL GET HTTP/2 static.zdassets.com/web_widget/classic/latest/web-widget-main-1bfc6fa.js
IP 104.18.72.113:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectzdassets.com
Fingerprint5F:75:10:F4:97:EA:C8:48:F9:4F:E6:19:19:A3:13:24:44:C1:E7:3C
ValidityMon, 23 Oct 2023 13:35:25 GMT - Sun, 21 Jan 2024 13:35:24 GMT
File type ASCII text, with very long lines (65307)
Size 272 kB (272344 bytes)
Hash 6f8511a72c96db8b22e6373718b842ed
5a59ae2a0777845f7be473e9cea2e3f4fbda1ff6
87aa0db99819433799e0809f0e7b490be1940f744e701321b7f31e09a7da63a2
GET /web_widget/classic/latest/web-widget-main-1bfc6fa.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:43 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 7evMpu1FzCSOSxEashLOwzI/FQHstFYheFyyBQUHTcZowzbPq0SDA9z6AMI+bQiRx12V92xeG8o=
x-amz-request-id: DGAT20P9SD0RMGR1
x-amz-replication-status: COMPLETED
last-modified: Tue, 05 Dec 2023 00:24:10 GMT
etag: W/"6f8511a72c96db8b22e6373718b842ed"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 00:24:09 GMT
x-amz-version-id: PAflfXOdiQDrMRVYun69YoketTkl1xNU
cf-cache-status: HIT
age: 341809
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CxP%2BWlH%2BWvRH%2BrEi1YVM2RDd%2FTAK7chCLaL9z%2FCEG2wOyd0g%2F7utmWcfeYMYmOAxSCZ1nB3IkTmN8raiNV2f6fa7vuapXgLiIUY2YQZT2qiR32Xzd8DKLGD2M0Fc4pR6vuMI8Y0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 832991ff8d52568d-OSL
content-encoding: br
X-Firefox-Spdy: h2
px.mountain.com/st?ga_tracking_id=UA-17228920-1&ga_client_id=&shpt=Savings%20Center%20%7C%20FSA%20Store&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17228920-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Savings%20Center%20%7C%20FSA%20Store%22%2C%22dcm_cid%22%3A%221702086350.1%22%2C%22ga_utm_campaign%22%3A%22TPA%20Partner%22%2C%22ga_utm_source%22%3A%22Payflex%22%2C%22ga_utm_medium%22%3A%22tpa%20email%20ins%20banner%20squ5%20intro%22%2C%22mntnis%22%3A%22jDcT9HUNflL9%2BOLPsAamUdwFET%2BJz3Gg%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1702086350.1&available_ga=%5B%7B%22id%22%3A%22G-3ERPGK1885%22%2C%22sess_id%22%3A%221702086350%22%7D%2C%7B%22id%22%3A%22UA-17228920-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17228920-1&dxver=4.0.0&shaid=32398&plh=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&cb=38954285081435390term%3Dvalue&shcq=0&shcv=0.00&shadditional=sh_conversion%3DSHBLOCK%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue%2Ccriteo%3Dtrue
52.37.218.4200 OK 1.4 kB URL GET HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-17228920-1&ga_client_id=&shpt=Savings%20Center%20%7C%20FSA%20Store&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17228920-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Savings%20Center%20%7C%20FSA%20Store%22%2C%22dcm_cid%22%3A%221702086350.1%22%2C%22ga_utm_campaign%22%3A%22TPA%20Partner%22%2C%22ga_utm_source%22%3A%22Payflex%22%2C%22ga_utm_medium%22%3A%22tpa%20email%20ins%20banner%20squ5%20intro%22%2C%22mntnis%22%3A%22jDcT9HUNflL9%2BOLPsAamUdwFET%2BJz3Gg%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1702086350.1&available_ga=%5B%7B%22id%22%3A%22G-3ERPGK1885%22%2C%22sess_id%22%3A%221702086350%22%7D%2C%7B%22id%22%3A%22UA-17228920-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17228920-1&dxver=4.0.0&shaid=32398&plh=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&cb=38954285081435390term%3Dvalue&shcq=0&shcv=0.00&shadditional=sh_conversion%3DSHBLOCK%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue%2Ccriteo%3Dtrue
IP 52.37.218.4:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with very long lines (2632)
Hash 3655c43c2aef8e4607be54397d7b2294
41779ba1042f4fda4268ace524f239741564e2e7
38779006a16ff0ee6f4a52e10f215d9bd089bd7bdfafcbd53de8009b9deeee21
GET /st?ga_tracking_id=UA-17228920-1&ga_client_id=&shpt=Savings%20Center%20%7C%20FSA%20Store&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17228920-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Savings%20Center%20%7C%20FSA%20Store%22%2C%22dcm_cid%22%3A%221702086350.1%22%2C%22ga_utm_campaign%22%3A%22TPA%20Partner%22%2C%22ga_utm_source%22%3A%22Payflex%22%2C%22ga_utm_medium%22%3A%22tpa%20email%20ins%20banner%20squ5%20intro%22%2C%22mntnis%22%3A%22jDcT9HUNflL9%2BOLPsAamUdwFET%2BJz3Gg%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1702086350.1&available_ga=%5B%7B%22id%22%3A%22G-3ERPGK1885%22%2C%22sess_id%22%3A%221702086350%22%7D%2C%7B%22id%22%3A%22UA-17228920-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17228920-1&dxver=4.0.0&shaid=32398&plh=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&cb=38954285081435390term%3Dvalue&shcq=0&shcv=0.00&shadditional=sh_conversion%3DSHBLOCK%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue%2Ccriteo%3Dtrue HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 09 Dec 2023 01:45:45 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=ab37ca23-9634-11ee-b6e0-012e305617ca;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
transfer-encoding: chunked
heapanalytics.com/h?a=4104330493&u=5803538733284113&v=1170803233213643&s=5839996879261482&b=web&tv=4.0&z=0&h=%2Fsavings-center.html&q=%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&d=fsastore.com&t=Savings%20Center%20%7C%20FSA%20Store&us=Payflex&um=tpa%20email%20ins%20banner%20squ5%20intro&ua=TPA%20Partner&k=Mini%20Cart%20Total%20%24&k=%240.00&k=Mini%20Cart%20%24%20Amount&k=%240.00&k=Screen%20Dimensions&k=1280%20x%201024&k=Screen%20Pixel%20Ratio&k=1&k=Is%20Rx%3F&k=false&k=Swap&k=false&k=ecomm_pagetype&k=other&k=pageType%20(no%20index)&k=content&k=PageType&k=content&k=Registered&k=false&ts=1702086350591&srp=auryc%3A2449-Main-prod-heap%252F428aea3d6fe025dd6fda395e4a0ca738%252F1702086350591&sch=1024&scw=1280&st=1702086351926&ei=218&et=variation
3.84.71.183200 OK 37 B URL GET HTTP/2 heapanalytics.com/h?a=4104330493&u=5803538733284113&v=1170803233213643&s=5839996879261482&b=web&tv=4.0&z=0&h=%2Fsavings-center.html&q=%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&d=fsastore.com&t=Savings%20Center%20%7C%20FSA%20Store&us=Payflex&um=tpa%20email%20ins%20banner%20squ5%20intro&ua=TPA%20Partner&k=Mini%20Cart%20Total%20%24&k=%240.00&k=Mini%20Cart%20%24%20Amount&k=%240.00&k=Screen%20Dimensions&k=1280%20x%201024&k=Screen%20Pixel%20Ratio&k=1&k=Is%20Rx%3F&k=false&k=Swap&k=false&k=ecomm_pagetype&k=other&k=pageType%20(no%20index)&k=content&k=PageType&k=content&k=Registered&k=false&ts=1702086350591&srp=auryc%3A2449-Main-prod-heap%252F428aea3d6fe025dd6fda395e4a0ca738%252F1702086350591&sch=1024&scw=1280&st=1702086351926&ei=218&et=variation
IP 3.84.71.183:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subjectheapanalytics.com
Fingerprint9B:86:A5:40:F4:3B:FB:A9:5E:3B:2A:BD:9D:DB:4F:5D:67:B4:EA:9F
ValidityThu, 09 Nov 2023 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /h?a=4104330493&u=5803538733284113&v=1170803233213643&s=5839996879261482&b=web&tv=4.0&z=0&h=%2Fsavings-center.html&q=%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&d=fsastore.com&t=Savings%20Center%20%7C%20FSA%20Store&us=Payflex&um=tpa%20email%20ins%20banner%20squ5%20intro&ua=TPA%20Partner&k=Mini%20Cart%20Total%20%24&k=%240.00&k=Mini%20Cart%20%24%20Amount&k=%240.00&k=Screen%20Dimensions&k=1280%20x%201024&k=Screen%20Pixel%20Ratio&k=1&k=Is%20Rx%3F&k=false&k=Swap&k=false&k=ecomm_pagetype&k=other&k=pageType%20(no%20index)&k=content&k=PageType&k=content&k=Registered&k=false&ts=1702086350591&srp=auryc%3A2449-Main-prod-heap%252F428aea3d6fe025dd6fda395e4a0ca738%252F1702086350591&sch=1024&scw=1280&st=1702086351926&ei=218&et=variation HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:45 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-4iFqfptz9csCeTUceM5hwzR1zqc"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
heapanalytics.com/h?a=4104330493&u=5803538733284113&v=1170803233213643&s=5839996879261482&b=web&tv=4.0&sp=z&sp=0&sp=us&sp=Payflex&sp=um&sp=tpa%20email%20ins%20banner%20squ5%20intro&sp=ua&sp=TPA%20Partner&sp=ts&sp=1702086350591&sp=d&sp=fsastore.com&sp=h&sp=%2Fsavings-center.html&sp=t&sp=Savings%20Center%20%7C%20FSA%20Store&sp=q&sp=%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&pp=d&pp=fsastore.com&pp=q&pp=%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&pp=h&pp=%2Fsavings-center.html&pp=t&pp=Savings%20Center%20%7C%20FSA%20Store&pp=ts&pp=1702086350591&id0=7510934003200283&k0=Mini%20Cart%20Total%20%24&k0=%240.00&k0=Mini%20Cart%20%24%20Amount&k0=%240.00&k0=Screen%20Dimensions&k0=1280%20x%201024&k0=Screen%20Pixel%20Ratio&k0=1&k0=Is%20Rx%3F&k0=false&k0=Swap&k0=false&k0=ecomm_pagetype&k0=other&k0=pageType%20(no%20index)&k0=content&k0=PageType&k0=content&k0=Registered&k0=false&k0=GTM%20-%20Any%20Page%20-%20pageType&k0=content&t0=GTM%20-%20Any%20Page%20-%20Viewed&ts0=1702086350320&srp0=auryc%3A2449-Main-prod-heap%252F428aea3d6fe025dd6fda395e4a0ca738%252F1702086350320&id1=8835483626249686&k1=Mini%20Cart%20Total%20%24&k1=%240.00&k1=Mini%20Cart%20%24%20Amount&k1=%240.00&k1=Screen%20Dimensions&k1=1280%20x%201024&k1=Screen%20Pixel%20Ratio&k1=1&k1=Is%20Rx%3F&k1=false&k1=Swap&k1=false&k1=ecomm_pagetype&k1=other&k1=pageType%20(no%20index)&k1=content&k1=PageType&k1=content&k1=Registered&k1=false&k1=Load%20Time&k1=3.657&t1=Page%20Load&ts1=1702086350925&srp1=auryc%3A2449-Main-prod-heap%252F428aea3d6fe025dd6fda395e4a0ca738%252F1702086350925&st=1702086351928&ei=218&et=variation
3.84.71.183200 OK 37 B URL GET HTTP/2 heapanalytics.com/h?a=4104330493&u=5803538733284113&v=1170803233213643&s=5839996879261482&b=web&tv=4.0&sp=z&sp=0&sp=us&sp=Payflex&sp=um&sp=tpa%20email%20ins%20banner%20squ5%20intro&sp=ua&sp=TPA%20Partner&sp=ts&sp=1702086350591&sp=d&sp=fsastore.com&sp=h&sp=%2Fsavings-center.html&sp=t&sp=Savings%20Center%20%7C%20FSA%20Store&sp=q&sp=%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&pp=d&pp=fsastore.com&pp=q&pp=%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&pp=h&pp=%2Fsavings-center.html&pp=t&pp=Savings%20Center%20%7C%20FSA%20Store&pp=ts&pp=1702086350591&id0=7510934003200283&k0=Mini%20Cart%20Total%20%24&k0=%240.00&k0=Mini%20Cart%20%24%20Amount&k0=%240.00&k0=Screen%20Dimensions&k0=1280%20x%201024&k0=Screen%20Pixel%20Ratio&k0=1&k0=Is%20Rx%3F&k0=false&k0=Swap&k0=false&k0=ecomm_pagetype&k0=other&k0=pageType%20(no%20index)&k0=content&k0=PageType&k0=content&k0=Registered&k0=false&k0=GTM%20-%20Any%20Page%20-%20pageType&k0=content&t0=GTM%20-%20Any%20Page%20-%20Viewed&ts0=1702086350320&srp0=auryc%3A2449-Main-prod-heap%252F428aea3d6fe025dd6fda395e4a0ca738%252F1702086350320&id1=8835483626249686&k1=Mini%20Cart%20Total%20%24&k1=%240.00&k1=Mini%20Cart%20%24%20Amount&k1=%240.00&k1=Screen%20Dimensions&k1=1280%20x%201024&k1=Screen%20Pixel%20Ratio&k1=1&k1=Is%20Rx%3F&k1=false&k1=Swap&k1=false&k1=ecomm_pagetype&k1=other&k1=pageType%20(no%20index)&k1=content&k1=PageType&k1=content&k1=Registered&k1=false&k1=Load%20Time&k1=3.657&t1=Page%20Load&ts1=1702086350925&srp1=auryc%3A2449-Main-prod-heap%252F428aea3d6fe025dd6fda395e4a0ca738%252F1702086350925&st=1702086351928&ei=218&et=variation
IP 3.84.71.183:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subjectheapanalytics.com
Fingerprint9B:86:A5:40:F4:3B:FB:A9:5E:3B:2A:BD:9D:DB:4F:5D:67:B4:EA:9F
ValidityThu, 09 Nov 2023 00:00:00 GMT - Sun, 08 Dec 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /h?a=4104330493&u=5803538733284113&v=1170803233213643&s=5839996879261482&b=web&tv=4.0&sp=z&sp=0&sp=us&sp=Payflex&sp=um&sp=tpa%20email%20ins%20banner%20squ5%20intro&sp=ua&sp=TPA%20Partner&sp=ts&sp=1702086350591&sp=d&sp=fsastore.com&sp=h&sp=%2Fsavings-center.html&sp=t&sp=Savings%20Center%20%7C%20FSA%20Store&sp=q&sp=%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&pp=d&pp=fsastore.com&pp=q&pp=%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&pp=h&pp=%2Fsavings-center.html&pp=t&pp=Savings%20Center%20%7C%20FSA%20Store&pp=ts&pp=1702086350591&id0=7510934003200283&k0=Mini%20Cart%20Total%20%24&k0=%240.00&k0=Mini%20Cart%20%24%20Amount&k0=%240.00&k0=Screen%20Dimensions&k0=1280%20x%201024&k0=Screen%20Pixel%20Ratio&k0=1&k0=Is%20Rx%3F&k0=false&k0=Swap&k0=false&k0=ecomm_pagetype&k0=other&k0=pageType%20(no%20index)&k0=content&k0=PageType&k0=content&k0=Registered&k0=false&k0=GTM%20-%20Any%20Page%20-%20pageType&k0=content&t0=GTM%20-%20Any%20Page%20-%20Viewed&ts0=1702086350320&srp0=auryc%3A2449-Main-prod-heap%252F428aea3d6fe025dd6fda395e4a0ca738%252F1702086350320&id1=8835483626249686&k1=Mini%20Cart%20Total%20%24&k1=%240.00&k1=Mini%20Cart%20%24%20Amount&k1=%240.00&k1=Screen%20Dimensions&k1=1280%20x%201024&k1=Screen%20Pixel%20Ratio&k1=1&k1=Is%20Rx%3F&k1=false&k1=Swap&k1=false&k1=ecomm_pagetype&k1=other&k1=pageType%20(no%20index)&k1=content&k1=PageType&k1=content&k1=Registered&k1=false&k1=Load%20Time&k1=3.657&t1=Page%20Load&ts1=1702086350925&srp1=auryc%3A2449-Main-prod-heap%252F428aea3d6fe025dd6fda395e4a0ca738%252F1702086350925&st=1702086351928&ei=218&et=variation HTTP/1.1
Host: heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:45 GMT
content-type: image/gif
content-length: 37
server: nginx
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
pragma: no-cache
etag: W/"25-4iFqfptz9csCeTUceM5hwzR1zqc"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
cdn.heapanalytics.com/js/replay/libs/latest/auryc.worker.js
54.230.111.90200 OK 27 kB URL GET HTTP/3 cdn.heapanalytics.com/js/replay/libs/latest/auryc.worker.js
IP 54.230.111.90:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subjectcdn.heapanalytics.com
FingerprintB9:4F:9B:ED:D3:9F:F8:A6:6B:26:1D:83:87:91:36:65:F4:39:A5:DC
ValidityThu, 29 Jun 2023 00:00:00 GMT - Sat, 27 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65409)
Hash a84fd6c4872f694a30da69034b3d9037
37b819e86fcca44914d18dedef6e8742c7aa4a7e
12f49011f6efd56c7ca8c72bc159baf0e8c51a1fc9d6c9efad6715e36f19935c
GET /js/replay/libs/latest/auryc.worker.js HTTP/1.1
Host: cdn.heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fsastore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 26618
age: 52757
last-modified: Fri, 17 Nov 2023 19:34:52 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: l4sMURylun8LTEi8.tiz.7KT_VwF0Bo1
accept-ranges: bytes
server: AmazonS3
date: Fri, 08 Dec 2023 11:28:22 GMT
cache-control: max-age=86400
etag: "efee9a85bbc434726908136e4f740dd9"
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kf42xBDtniHpeM38UpR9V14J1sy8IkmWfjKjMdttKM2NLa4VIlcHAQ==
static.zdassets.com/web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3
104.18.72.113206 Partial Content 20 kB URL GET HTTP/2 static.zdassets.com/web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3
IP 104.18.72.113:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectzdassets.com
Fingerprint5F:75:10:F4:97:EA:C8:48:F9:4F:E6:19:19:A3:13:24:44:C1:E7:3C
ValidityMon, 23 Oct 2023 13:35:25 GMT - Sun, 21 Jan 2024 13:35:24 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data
Hash f11ce9e8f40a392830217253fe75d6de
89ba57fcc360da34756c127acba15a8b23267fc6
05069cc62b394b6ecc2daf3c51b4b2ba7f6cc8735988e8234487234af47eceee
GET /web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 09 Dec 2023 01:45:45 GMT
content-type: audio/mpeg; charset=utf-8
content-length: 19698
x-amz-id-2: u4rjVl6bznOFELXxWcdEy4cxf3HS8QD5+1jVYrU8pTGZTnnUMyhwdvSjilQjVnwTrzYblOccmBE=
x-amz-request-id: HT3YBWDSMX7GGWKJ
x-amz-replication-status: COMPLETED
last-modified: Tue, 26 Sep 2023 06:59:46 GMT
etag: "f11ce9e8f40a392830217253fe75d6de"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 25 Sep 2024 06:59:45 GMT
x-amz-version-id: 7mQmj5CjPPHXphZWB9MwFHsB8G6GZRZR
cf-cache-status: HIT
age: 1101719
content-range: bytes 0-19697/19698
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oneEtaqO%2BetzEVHOa9pdyY8AkR3niOvPu%2FnTDOOGAqlQOtVxFcfwABgopPB3cXEo%2F627SBK%2FiccXQlOD9VXIKifuvvfydCpH7hCKHL0RXPXFWA9d8NY85OMg95As2eanYuUFD1o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 83299209d8e3568d-OSL
X-Firefox-Spdy: h2
cdn.heapanalytics.com/js/replay/libs/latest/auryc.worker.js
54.230.111.90200 OK 27 kB URL GET HTTP/3 cdn.heapanalytics.com/js/replay/libs/latest/auryc.worker.js
IP 54.230.111.90:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subjectcdn.heapanalytics.com
FingerprintB9:4F:9B:ED:D3:9F:F8:A6:6B:26:1D:83:87:91:36:65:F4:39:A5:DC
ValidityThu, 29 Jun 2023 00:00:00 GMT - Sat, 27 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65409)
Hash a84fd6c4872f694a30da69034b3d9037
37b819e86fcca44914d18dedef6e8742c7aa4a7e
12f49011f6efd56c7ca8c72bc159baf0e8c51a1fc9d6c9efad6715e36f19935c
GET /js/replay/libs/latest/auryc.worker.js HTTP/1.1
Host: cdn.heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fsastore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 26618
age: 52757
last-modified: Fri, 17 Nov 2023 19:34:52 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: l4sMURylun8LTEi8.tiz.7KT_VwF0Bo1
accept-ranges: bytes
server: AmazonS3
date: Fri, 08 Dec 2023 11:28:22 GMT
cache-control: max-age=86400
etag: "efee9a85bbc434726908136e4f740dd9"
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nufmSw99h00HS6NSPcuhDHFZEjLk0oDtutDIfQn56H1_S6TAWBGZoA==
img.riskified.com/img/image-l.gif?t=17020863521000.7421635511696113&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
52.54.172.171200 OK 35 B URL GET HTTP/2 img.riskified.com/img/image-l.gif?t=17020863521000.7421635511696113&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
IP 52.54.172.171:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerDigiCert Inc
Subjectimg.riskified.com
FingerprintA8:F3:27:00:4D:86:1C:D5:98:ED:EC:D0:76:3E:FE:26:DF:75:2B:DC
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File type GIF image data, version 87a, 1 x 1\012- data
Hash cfea9e094d58b54abf242e795f0b913f
cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
GET /img/image-l.gif?t=17020863521000.7421635511696113&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348 HTTP/1.1
Host: img.riskified.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.3
date: Sat, 09 Dec 2023 01:45:45 GMT
content-type: image/gif
content-length: 35
last-modified: Thu, 29 Sep 2022 08:50:09 GMT
etag: "63355c41-23"
accept-ranges: bytes
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwecc4e114/images/footer/youtube-fsa.svg
104.16.43.62200 OK 360 B URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwecc4e114/images/footer/youtube-fsa.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (452)
Hash 4c3aa6949f58ccfac785490fee03a87a
aefff3bf73919ee147dc4cfb0062a3c2ed85f427
1f650eadb56727430f8efc52db81020e827f431b738b34bb229d2fc63192891f
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwecc4e114/images/footer/youtube-fsa.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: -p2hOS8RYGUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Sun, 24 Dec 2023 02:57:51 GMT
last-modified: Tue, 27 Oct 2020 20:43:43 GMT
cf-cache-status: HIT
age: 1291670
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4bc315f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
cas.zma.gs/config/config.json?cb=1702086352133&cid=6411fe8c6df9f10f76c9df53&pg=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner
2.21.240.203200 OK 2 B URL GET HTTP/2 cas.zma.gs/config/config.json?cb=1702086352133&cid=6411fe8c6df9f10f76c9df53&pg=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /config/config.json?cb=1702086352133&cid=6411fe8c6df9f10f76c9df53&pg=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 0bhRsYApzjsHEfyH/WBM53s3kDTsMFzgzIuK1oe1+R9XVIpKhPeBgcOrJESFIhC+XKQ31ssqk+8=
x-amz-request-id: 616W034P5KNSVPTW
access-control-allow-origin: *
access-control-allow-methods: PUT, POST, DELETE, HEAD, GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 16 Mar 2023 13:59:03 GMT
etag: "99914b932bd37a50b983c5e7c90ae93b"
x-amz-server-side-encryption: AES256
x-amz-version-id: A7VPaENXnE.NQ77qz07u1ZPjjF.vuiNO
accept-ranges: bytes
content-type: application/json
content-length: 2
expires: Sat, 09 Dec 2023 01:45:45 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 09 Dec 2023 01:45:45 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw04be0e86/images/footer/faq-fsa.svg
104.16.43.62200 OK 651 B URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw04be0e86/images/footer/faq-fsa.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 3d1da54380772bc7a98a1a617750239d
d33cc4808a1f2efa7754ca3dca6b7a7594a3060a
c86e6ef124b64923f3bbd49a54c872302b2ac8c6a788ed9daff07c68b8bb9879
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw04be0e86/images/footer/faq-fsa.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: -p2kOS8RYGUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Sun, 24 Dec 2023 02:57:51 GMT
last-modified: Tue, 27 Oct 2020 20:43:43 GMT
cf-cache-status: HIT
age: 1291670
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f48c1a5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
c.riskified.com/v2/client_infos
52.0.154.193201 Created 0 B URL POST HTTP/2 c.riskified.com/v2/client_infos
IP 52.0.154.193:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subject*.riskified.com
Fingerprint49:4E:C5:F0:BC:C7:CE:8C:54:12:16:92:A2:BC:CD:FD:33:AE:A4:07
ValidityTue, 21 Mar 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v2/client_infos HTTP/1.1
Host: c.riskified.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Content-Type: application/json; charset=utf-8
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Content-Length: 3183
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
date: Sat, 09 Dec 2023 01:45:45 GMT
content-length: 0
trace-id: 9b430c4e67a23608307c5e7e8a56a5e3
access-control-allow-origin: *
timing-allow-origin: *
access-control-request-method: *
access-control-allow-methods: PUT, OPTIONS, GET, DELETE, POST
access-control-allow-headers: Content-Type,Access-Control-Allow-Headers,Access-Control-Allow-Origin,x-csrf-token,X_CI_HMAC_SHA256
strict-transport-security: max-age=15768000; includeSubDomains; preload
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Sites/default/dwa4fad223/images/ringIcon.svg
104.16.43.62200 OK 634 B URL GET HTTP/2 fsastore.com/on/demandware.static/-/Sites/default/dwa4fad223/images/ringIcon.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash ff0e117321487d773f3ba82df948afa6
03d65fd64f05ea933d89efcf66a9d1bac35923f4
5b510caa6886e89b74ae80928ae1f05ccf4c2a6e6eb4b0ea250c4dd0f7d37290
GET /on/demandware.static/-/Sites/default/dwa4fad223/images/ringIcon.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: POl6qX6BTmUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2566669
expires: Sun, 10 Dec 2023 19:16:14 GMT
last-modified: Mon, 11 Sep 2023 20:46:01 GMT
cf-cache-status: HIT
age: 2417235
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f47c0d5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
gs.mountain.com/gs
34.212.4.35200 OK 144 B IP 34.212.4.35:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with no line terminators
Hash f131627148fe282cec261b5b4fe568ea
9708907b7b76c66b130f60c0a1961294f6decd27
c76576c42bd767c0abb8351a684c233052b956c1b6aa5f9e5e62eb5ccc2c9bf8
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Cookie: guid=ab37ca23-9634-11ee-b6e0-012e305617ca
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 09 Dec 2023 01:45:45 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
px.mountain.com/st?ga_tracking_id=UA-17228920-1&ga_client_id=&shpt=Savings%20Center%20%7C%20FSA%20Store&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17228920-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Savings%20Center%20%7C%20FSA%20Store%22%2C%22dcm_cid%22%3A%221702086350.1%22%2C%22ga_utm_campaign%22%3A%22TPA%20Partner%22%2C%22ga_utm_source%22%3A%22Payflex%22%2C%22ga_utm_medium%22%3A%22tpa%20email%20ins%20banner%20squ5%20intro%22%2C%22mntnis%22%3A%22jDcT9HUNflL9%2BOLPsAamUdwFET%2BJz3Gg%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1702086350.1&available_ga=%5B%7B%22id%22%3A%22G-3ERPGK1885%22%2C%22sess_id%22%3A%221702086350%22%7D%2C%7B%22id%22%3A%22UA-17228920-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17228920-1&dxver=4.0.0&shaid=32398&plh=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&shcq=0&shcv=0.00&shadditional=sh_conversion%3DSHBLOCK%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue%2Ccriteo%3Dtrue&cb=1702086345009307&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1702086345913
35.85.106.161200 OK 1.5 kB URL GET HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-17228920-1&ga_client_id=&shpt=Savings%20Center%20%7C%20FSA%20Store&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17228920-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Savings%20Center%20%7C%20FSA%20Store%22%2C%22dcm_cid%22%3A%221702086350.1%22%2C%22ga_utm_campaign%22%3A%22TPA%20Partner%22%2C%22ga_utm_source%22%3A%22Payflex%22%2C%22ga_utm_medium%22%3A%22tpa%20email%20ins%20banner%20squ5%20intro%22%2C%22mntnis%22%3A%22jDcT9HUNflL9%2BOLPsAamUdwFET%2BJz3Gg%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1702086350.1&available_ga=%5B%7B%22id%22%3A%22G-3ERPGK1885%22%2C%22sess_id%22%3A%221702086350%22%7D%2C%7B%22id%22%3A%22UA-17228920-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17228920-1&dxver=4.0.0&shaid=32398&plh=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&shcq=0&shcv=0.00&shadditional=sh_conversion%3DSHBLOCK%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue%2Ccriteo%3Dtrue&cb=1702086345009307&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1702086345913
IP 35.85.106.161:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with very long lines (6019), with no line terminators
Hash a7ce9cdf7d79f046cf4d6f65fa20327a
96df36665056a40b03acf7c1d33e2b20ee5ab1a5
7b032de3aa8ad07c8b7f23d155568785ecc12549758f690b2641c1ebdd0276ec
GET /st?ga_tracking_id=UA-17228920-1&ga_client_id=&shpt=Savings%20Center%20%7C%20FSA%20Store&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17228920-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Savings%20Center%20%7C%20FSA%20Store%22%2C%22dcm_cid%22%3A%221702086350.1%22%2C%22ga_utm_campaign%22%3A%22TPA%20Partner%22%2C%22ga_utm_source%22%3A%22Payflex%22%2C%22ga_utm_medium%22%3A%22tpa%20email%20ins%20banner%20squ5%20intro%22%2C%22mntnis%22%3A%22jDcT9HUNflL9%2BOLPsAamUdwFET%2BJz3Gg%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1702086350.1&available_ga=%5B%7B%22id%22%3A%22G-3ERPGK1885%22%2C%22sess_id%22%3A%221702086350%22%7D%2C%7B%22id%22%3A%22UA-17228920-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17228920-1&dxver=4.0.0&shaid=32398&plh=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&shcq=0&shcv=0.00&shadditional=sh_conversion%3DSHBLOCK%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue%2Ccriteo%3Dtrue&cb=1702086345009307&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1702086345913 HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Cookie: guid=ab37ca23-9634-11ee-b6e0-012e305617ca
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 09 Dec 2023 01:45:46 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: tt="H4sIAAAAAAAAAKtW8guKNzYytrSIN7IwtlCyMtBRKlOyMtJRQhY0NDcwMrAwMzYxMzM31UHSYm5pDNRSCwAA9pQHRgAAAA==";Domain=px.mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
rt="MzIzOTg6MTcwMjA4NjM0Ng==";Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=ab37ca23-9634-11ee-b6e0-012e305617ca;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 19
server: istio-envoy
connection: close
transfer-encoding: chunked
d.btttag.com/analytics.rcv?pgNm=savings-center.html&trSeg=env-fsastore.com&navStart=1702086346111
104.22.58.128200 OK 0 B URL POST HTTP/2 d.btttag.com/analytics.rcv?pgNm=savings-center.html&trSeg=env-fsastore.com&navStart=1702086346111
IP 104.22.58.128:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint46:53:28:6B:A7:88:F7:40:54:95:99:19:DE:95:E3:D4:04:1A:92:86
ValidityWed, 03 May 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /analytics.rcv?pgNm=savings-center.html&trSeg=env-fsastore.com&navStart=1702086346111 HTTP/1.1
Host: d.btttag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 2584
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:47 GMT
content-type: text/html;charset=UTF-8
content-length: 0
access-control-allow-origin: https://fsastore.com
access-control-allow-credentials: true
access-control-max-age: 86400
access-control-allow-methods: xhr,GET, POST, OPTIONS
access-control-allow-headers: xhr,content-type,Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control
timing-allow-origin: *
x-content-type-options: nosniff
accept-ranges: bytes
age: 180000
pragma: no-cache
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate, no-transform
set-cookie: collection=1; expires=Sat, 09-Dec-2023 02:10:47 GMT; Max-Age=1500; path=/; SameSite=None; domain=btttag.com; secure
enabled=1; expires=Sat, 09-Dec-2023 02:10:47 GMT; Max-Age=1500; path=/; SameSite=None; domain=btttag.com; secure
sessionID=770412307907481430; expires=Sat, 09-Dec-2023 02:10:47 GMT; Max-Age=1500; path=/; SameSite=None; domain=btttag.com; secure
fsastore3278751z-txnName=env-fsastore.com; expires=Sat, 09-Dec-2023 02:10:47 GMT; Max-Age=1500; path=/; SameSite=None; domain=btttag.com; secure
fsastore3278751z-BrowserVersion=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; domain=btttag.com; secure
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains
last-modified: Fri, 06 Oct 2023 06:00:00 GMT
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 832992159b2e0b02-OSL
X-Firefox-Spdy: h2
collector-px9ipgehjq.px-cloud.net/api/v2/collector/beacon
35.190.10.96 0 B URL collector-px9ipgehjq.px-cloud.net/api/v2/collector/beacon
IP 35.190.10.96:0
Certificate IssuerSectigo Limited
Subject*.px-cloud.net
Fingerprint1C:B8:82:2A:F3:7A:B5:C0:1E:05:8E:16:66:5F:A8:52:C5:A0:E0:80
ValidityTue, 15 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/collector/beacon HTTP/1.1
Host: collector-px9ipgehjq.px-cloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 1074
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 01:45:58 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://fsastore.com
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/fontawesome-webfont.woff2?v=4.7.0
104.16.43.62200 OK 77 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/global.css
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: font/woff2
content-length: 77160
x-dw-request-base-id: POlCnj17c2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591882
expires: Sun, 07 Jan 2024 20:23:25 GMT
last-modified: Thu, 07 Dec 2023 02:30:47 GMT
cf-cache-status: HIT
age: 19219
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f7fd605f01-ARN
X-Firefox-Spdy: h2
cdn.izooto.com/scripts/sak/iz_setcid.html?v=1
104.18.216.65200 OK 3.7 kB URL GET HTTP/2 cdn.izooto.com/scripts/sak/iz_setcid.html?v=1
IP 104.18.216.65:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE6:21:70:71:4E:32:8D:7E:16:2C:F9:84:AE:DC:B2:3D:C7:94:DD:EB
ValiditySun, 14 May 2023 00:00:00 GMT - Mon, 13 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (3865), with no line terminators
Hash 861e9ad283ac9e3c4bd94762fd4ad74c
71dfd9a1b4afe7e35d898898e8889c0958ed719b
1e24af6a15f6997bfc2d88ba4dba67b5314c7d9b8bdd02690fa65fa19532cfca
GET /scripts/sak/iz_setcid.html?v=1 HTTP/1.1
Host: cdn.izooto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: text/html
last-modified: Tue, 07 Feb 2023 10:27:13 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
access-control-allow-origin: *
cf-cache-status: HIT
age: 1364802
expires: Tue, 09 Jan 2024 01:45:42 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 832991fa98c256ca-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.heapanalytics.com/js/heap-4104330493.js
54.230.111.90200 OK 134 kB URL GET HTTP/2 cdn.heapanalytics.com/js/heap-4104330493.js
IP 54.230.111.90:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subjectcdn.heapanalytics.com
FingerprintB9:4F:9B:ED:D3:9F:F8:A6:6B:26:1D:83:87:91:36:65:F4:39:A5:DC
ValidityThu, 29 Jun 2023 00:00:00 GMT - Sat, 27 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65502)
Size 134 kB (133612 bytes)
Hash 4ada309af356a4e1dfa1187b21c84ae8
9b2d5a9dfd62c74cdeb2cfb8f82737956a1b90d9
1889ff4d516dcacec0bcefb39f0c90672ce6eb5693f094928dd02b65d465def8
GET /js/heap-4104330493.js HTTP/1.1
Host: cdn.heapanalytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sat, 09 Dec 2023 01:45:09 GMT
server: nginx
x-powered-by: Express
etag: W/"209ec-my1anf1ix0zess+4+Cc3lWobkNk"
cache-control: public, max-age=120
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: m--XnmAriH6z5RqooFGVFQFseFlo6_EJimOpHdHmH7OlY-NQpw2rZA==
age: 34
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/constructor/autocomplete-ui.css
104.16.43.62200 OK 653 B URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/constructor/autocomplete-ui.css
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (653), with no line terminators
Hash 85f6b8b213828e28c6fee33a8ee54ab6
9d3f7a44578f8150a88c3ef73c3af5c715d111cf
e543cfab6965b043e4a55fe0a85264e2c8bf436a44987ad7cf0799d19a50778a
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/constructor/autocomplete-ui.css HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: text/css
cache-control: public, max-age=2591886
cf-bgj: minify
cf-polished: origSize=1207
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:31:10 GMT
vary: accept-encoding
x-dw-request-base-id: -p0ItDx7c2UBAAB_
cf-cache-status: HIT
age: 19223
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f42bd65f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/css/styles.css
54.230.111.48200 OK 438 kB URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/css/styles.css
IP 54.230.111.48:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Size 438 kB (437682 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag-builds/10446/4.1/css/styles.css HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Sat, 25 Nov 2023 19:12:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:01 GMT
etag: W/"15e97ca1a1a2fe412607271287bcd257"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: PowerReviews
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U0ZJA-eG8eFf2QPneBuSpN--r2CJD65BJtAb9SsRfpQgCfhiWu7l9w==
age: 1146784
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw9aec9f5e/images/footer/call-fsa.svg
104.16.43.62200 OK 1.2 kB URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw9aec9f5e/images/footer/call-fsa.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1185), with no line terminators
Hash a04629542eba33f3c5b669223a49608a
9e31b25fcbf763c8f8601d19c63d21f97f77084e
3e08e884f7b69e0af606eb22cab6d991fe1f134804fb2d7f550befe0c41cf74d
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw9aec9f5e/images/footer/call-fsa.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: -p0i96EpQmUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591602
expires: Sun, 31 Dec 2023 11:57:28 GMT
last-modified: Tue, 27 Oct 2020 20:43:43 GMT
cf-cache-status: HIT
age: 640528
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f48c195f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-M7ZX4P3
142.250.74.72200 OK 476 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-M7ZX4P3
IP 142.250.74.72:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (40336)
Size 476 kB (475587 bytes)
Hash 8a9456de7cf391482ef94d0e5bf57ec3
012c8424ea97583daf1f7a2f5beefbc64a599397
9478aabfc4cdcb325c0438e076879ba0d212d9cc6b07413653c0c0d6a5ad5274
GET /gtm.js?id=GTM-M7ZX4P3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Dec 2023 01:45:42 GMT
expires: Sat, 09 Dec 2023 01:45:42 GMT
cache-control: private, max-age=900
last-modified: Sat, 09 Dec 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 120280
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/engine.js
54.230.111.48200 OK 141 kB URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/engine.js
IP 54.230.111.48:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (38883)
Size 141 kB (141133 bytes)
Hash da17f8785083d222a583c97e79eb45d7
5d08266609677c3e1c75fb6000afd24777ca5283
699a9b286c2a4a272841e49cfdc075c18472f926e57996bc650163d0ba52c7eb
GET /tag-builds/10446/4.1/js/chunks/engine.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 25 Nov 2023 19:12:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:02 GMT
etag: W/"da17f8785083d222a583c97e79eb45d7"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: PowerReviews
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2YfFr4cq65q4o22iI0fH6_L0mWLEwUF3BUI0CPYUwETgk1oF5JEKdw==
age: 1146784
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/classic/latest/web-widget-chat-incoming-message-notification-1bfc6fa.js
104.18.72.113200 OK 236 B URL GET HTTP/2 static.zdassets.com/web_widget/classic/latest/web-widget-chat-incoming-message-notification-1bfc6fa.js
IP 104.18.72.113:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectzdassets.com
Fingerprint5F:75:10:F4:97:EA:C8:48:F9:4F:E6:19:19:A3:13:24:44:C1:E7:3C
ValidityMon, 23 Oct 2023 13:35:25 GMT - Sun, 21 Jan 2024 13:35:24 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 22a5acf27bb842f36bad907e5eab9d27
834424a0805a056b46506d5e2dd1013cc46c6ec5
4115d64c5d796d81a67b09af1ee3e5427a1e4f67419850a8292fe0f77072502b
GET /web_widget/classic/latest/web-widget-chat-incoming-message-notification-1bfc6fa.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:45 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: jj3IJP8SG1qYvE4k5/yGOQQcVY1t9fS2FwFAUdl7K5931Xd3flm5WF8IJiZ/yy12ah/e+h8TsYA=
x-amz-request-id: A4N17FH4T4Q3T2FA
x-amz-replication-status: COMPLETED
last-modified: Tue, 05 Dec 2023 00:24:10 GMT
etag: W/"77bb07ca171e3ff2b72a7dafa7822bc8"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 00:24:09 GMT
x-amz-version-id: vFeMRdO_ves3AqXqcJa51X.kBsGbKmeW
cf-cache-status: HIT
age: 341810
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9ouB42AnuyFKNIjwalflolBIVhtD2Sh6Ug%2BJFHigoPMgHUbLhQpjYpMXu%2B%2BEAG%2F5RohDNiE94R49N87f8tsdm0DrlGaKfMBpse%2FhOtBBZjYn7nZIBcNNTZppwYmz5qUhmm2NzQE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 8329920958b7568d-OSL
content-encoding: br
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/constructor/autocomplete-ui-config.js
104.16.43.62200 OK 289 B URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/constructor/autocomplete-ui-config.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 761b60d4dc0fce4c9a5307b5a6d8d0c7
34ed2e2afd395adda8e823184065fa9ee6f6d9b5
caee4028a22fe406b6e5d2d3a50fce377c5c6a53612653cbc41c07ae3a206149
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/constructor/autocomplete-ui-config.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590735
cf-bgj: minify
cf-polished: origSize=640
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:31:10 GMT
x-dw-request-base-id: POlYnTx7c2UBAAB_
cf-cache-status: HIT
age: 18072
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f42bdc5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
cas.zma.gs/6411fe8c6df9f10f76c9df53/ssr/experiences/64c285126df9f10f76001a28/init.js
2.21.240.203200 OK 59 kB URL GET HTTP/2 cas.zma.gs/6411fe8c6df9f10f76c9df53/ssr/experiences/64c285126df9f10f76001a28/init.js
IP 2.21.240.203:443
ASN #20940 Akamai International B.V.
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectcreator-test.zmags.com
Fingerprint07:43:6B:84:6A:DB:15:97:74:04:37:71:46:CE:77:EE:59:33:2E:59
ValidityTue, 05 Dec 2023 14:46:43 GMT - Mon, 04 Mar 2024 14:46:42 GMT
File type ASCII text, with very long lines (551)
Hash 90b449fc2ab5cdbce718448d6138c709
d9c9167f4415773603f579784567566022634701
fe1a272e03c73e1ed870898c4e960447a89a40dbdd0f045ac12d378106257c40
GET /6411fe8c6df9f10f76c9df53/ssr/experiences/64c285126df9f10f76001a28/init.js HTTP/1.1
Host: cas.zma.gs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
content-encoding: br
etag: "2ef54e72cb7281bb59c5da574380bdd6"
last-modified: Thu, 07 Dec 2023 22:30:28 GMT
x-amz-id-2: tVD7rC8OxAdywsDHg7BDvDHfgxtDt5TcynFep96hKqaegwTvoQuJwNdrbnU8UoDvf2t1wUVvwFrlB0f3EJqhiIag9PD8EIEA
x-amz-request-id: YFQYNMGDH8FFR3M4
x-amz-server-side-encryption: AES256
x-amz-version-id: 50qgA8qB8Or37saWSqy2pFBuuypp.0vV
content-length: 11465
cache-control: max-age=300
expires: Sat, 09 Dec 2023 01:50:43 GMT
date: Sat, 09 Dec 2023 01:45:43 GMT
strict-transport-security: max-age=15768000
zmags-ssr: true, true
access-control-allow-origin: *
X-Firefox-Spdy: h2
ui.powerreviews.com/stable/4.1/ui.js
54.230.111.48200 OK 42 kB URL GET HTTP/2 ui.powerreviews.com/stable/4.1/ui.js
IP 54.230.111.48:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stable/4.1/ui.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 25 Nov 2023 19:12:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:19 GMT
etag: W/"10a366f0f8508711e1d6fa3a8a1d5831"
x-amz-server-side-encryption: AES256
cache-control: max-age=1800,s-maxage=1209600
server: PowerReviews
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jwXxL4bZgkMycggYuI2_iIaOlNyf0osYtNQ9_n9jVgHj2ecu929-Cw==
age: 1146784
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-1bfc6fa.js
104.18.72.113200 OK 26 kB URL GET HTTP/2 static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-1bfc6fa.js
IP 104.18.72.113:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectzdassets.com
Fingerprint5F:75:10:F4:97:EA:C8:48:F9:4F:E6:19:19:A3:13:24:44:C1:E7:3C
ValidityMon, 23 Oct 2023 13:35:25 GMT - Sun, 21 Jan 2024 13:35:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-1bfc6fa.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:44 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: KPhHQZ5iIGydSOF/FRCx8eCn3ImV7hM3qo3KWavgH4MUbCLy67WRA+HVKMqLOfRNXjGgWGdXoIE=
x-amz-request-id: 1BPFGS4SBCJ216KA
x-amz-replication-status: COMPLETED
last-modified: Tue, 05 Dec 2023 00:24:12 GMT
etag: W/"6eb45e96a7cbb4b8ca10897f3cf09981"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 00:24:11 GMT
x-amz-version-id: Xo1h7j84vGmG9Gk_pCcj7jCQD2BwGUUO
cf-cache-status: HIT
age: 341797
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8wTOqULfou7D1vp%2BPJRnxhGZbjQPcOaPqqKRMHTbLgFbihEfNfZRHlmRXTbMl0H8A%2B53Ey6GOY%2Bt7b7nJTweqPw9Pelwlh3ydl2R3CTtt2R7jjkkeRhIEHnhk6GBivHdnI821JQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 832992023e9b568d-OSL
content-encoding: br
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/campaignBanner.js
104.16.43.62200 OK 427 B URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/campaignBanner.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (449), with no line terminators
Hash 9f094f4c00bc8f4e1f94fc8e54f4a72a
1cf20dbcd8003f4d2ac3c210131d6e499ecb5471
2287a650dc5a2a53c03449719003d9598112854680cc84a76e63aeca7a99f1a3
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/campaignBanner.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590721
cf-bgj: minify
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:25 GMT
last-modified: Thu, 07 Dec 2023 02:30:21 GMT
x-dw-request-base-id: POlpnj17c2UBAAB_
cf-cache-status: HIT
age: 18057
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bed5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
img.riskified.com/img/image-l.gif?t=17020863514100.49666241193590166&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
52.54.172.171200 OK 35 B URL GET HTTP/2 img.riskified.com/img/image-l.gif?t=17020863514100.49666241193590166&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
IP 52.54.172.171:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerDigiCert Inc
Subjectimg.riskified.com
FingerprintA8:F3:27:00:4D:86:1C:D5:98:ED:EC:D0:76:3E:FE:26:DF:75:2B:DC
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File type GIF image data, version 87a, 1 x 1\012- data
Hash cfea9e094d58b54abf242e795f0b913f
cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
GET /img/image-l.gif?t=17020863514100.49666241193590166&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348 HTTP/1.1
Host: img.riskified.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sat, 09 Dec 2023 01:45:44 GMT
content-type: image/gif
content-length: 35
last-modified: Thu, 29 Sep 2022 08:50:09 GMT
etag: "63355c41-23"
accept-ranges: bytes
X-Firefox-Spdy: h2
widget-mediator.zopim.com/s/W/ws/vGWGtIha9rGwtSnx/c/1702086351126
52.58.87.58101 Switching Protocols 0 B URL GET HTTP/1.1 widget-mediator.zopim.com/s/W/ws/vGWGtIha9rGwtSnx/c/1702086351126
IP 52.58.87.58:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subject*.zopim.com
Fingerprint3D:9B:0C:BE:81:D4:7E:DE:86:28:44:DB:EC:B7:0B:A0:77:16:4D:BC
ValiditySun, 08 Oct 2023 00:00:00 GMT - Wed, 06 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/vGWGtIha9rGwtSnx/c/1702086351126 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://fsastore.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4hhh5mHIjRJBxCoInwwllg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 09 Dec 2023 01:45:44 GMT
Connection: upgrade
Set-Cookie: AWSALB=ppZAi6UGAKSGau7mCcSyj9k0Z+YspqyxKLOrtMhxUMT/Fm61riktBYHM+C7j2CaAYm4i/AHYfghHF5S6Bm3090ISjpUn03KBXC9nE2m86FJrkRXxqQ3HQmEXzOf6; Expires=Sat, 16 Dec 2023 01:45:44 GMT; Path=/
AWSALBCORS=ppZAi6UGAKSGau7mCcSyj9k0Z+YspqyxKLOrtMhxUMT/Fm61riktBYHM+C7j2CaAYm4i/AHYfghHF5S6Bm3090ISjpUn03KBXC9nE2m86FJrkRXxqQ3HQmEXzOf6; Expires=Sat, 16 Dec 2023 01:45:44 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: UMO6KZgxTCCbec2+3D/iUXr6bUw=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
104.16.43.62200 OK 109 kB URL User Request GET HTTP/2 fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
IP 104.16.43.62:443
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
Size 109 kB (108647 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: text/html;charset=UTF-8
set-cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; Path=/; Secure; SameSite=None
sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; Path=/; Secure; SameSite=None
TPA=555292~1733622340950~437559|~~|~~; Expires=Sun, 08 Dec 2024 01:45:40 GMT; Path=/; Secure; SameSite=None
dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; Version=1; Comment="Demandware anonymous cookie for site Sites-FSASTORE-Site"; Max-Age=15552000; Expires=Thu, 06 Jun 2024 01:45:40 GMT; Path=/; Secure; SameSite=None
_pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; Expires=Sun, 08 Dec 2024 07:34:52 GMT; Path=/; Secure; SameSite=None
__cq_dnt=0; Path=/; Secure; SameSite=None
dw_dnt=0; Path=/; Secure; SameSite=None
UtmSourceCookie=payflex; Expires=Mon, 08 Jan 2024 01:45:41 GMT; Path=/; Secure; SameSite=None
dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==; path=/; HttpOnly; Secure; SameSite=None
x-content-type-options: nosniff
x-dw-request-base-id: -p2ApwSec2UBAAB_
x-frame-options: sameorigin
referrer-policy: strict-origin-when-cross-origin
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
vary: accept-encoding
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991eca9e25f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/internal/jscript/dwanalytics-22.2.js
104.16.43.62200 OK 6.6 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/internal/jscript/dwanalytics-22.2.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (6837), with no line terminators
Hash 4a42334db801296430f0264c9136cbfe
8c671f99d13609abe725938624c3810239f4b3bf
b5a39e159d4bbd70dfa89d5fe8a68e845619d6d0d73d081f721af63df2541a70
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/internal/jscript/dwanalytics-22.2.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590702
cf-bgj: minify
cf-polished: origSize=6582
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Fri, 08 Dec 2023 20:23:24 GMT
vary: accept-encoding
x-dw-request-base-id: POmlnTx7c2UBAAB_
cf-cache-status: HIT
age: 18038
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4dc4a5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
beacon.riskified.com/?shop=fsastore.com_hec&sid=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=
52.0.154.193200 OK 50 kB URL GET HTTP/2 beacon.riskified.com/?shop=fsastore.com_hec&sid=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=
IP 52.0.154.193:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subject*.riskified.com
Fingerprint49:4E:C5:F0:BC:C7:CE:8C:54:12:16:92:A2:BC:CD:FD:33:AE:A4:07
ValidityTue, 21 Mar 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type exported SGML document, ASCII text, with very long lines (49128)
Hash 38d006925d7b13bee83717fcbeb2560c
480de13273611118c7f18121ad2b87a33693ede6
f5d71bd94ef8f0f2964b0b6276589d18368eb50504dab24f46be14dc49566b77
GET /?shop=fsastore.com_hec&sid=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk= HTTP/1.1
Host: beacon.riskified.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:43 GMT
content-type: application/javascript; charset=UTF-8
trace-id: 6ae9c9ccec71bdba4cf310cfc32aed41
access-control-allow-origin: *
timing-allow-origin: *
access-control-request-method: *
access-control-allow-methods: PUT, OPTIONS, GET, DELETE, POST
access-control-allow-headers: Content-Type,Access-Control-Allow-Headers,Access-Control-Allow-Origin,x-csrf-token,X_CI_HMAC_SHA256
cache-control: max-age=600
content-encoding: gzip
x-sourcemap: sm/ZnNhc3RvcmUuY29tX2hlYw==/ZGdDNzVEb3gzYXNpUU5VdWlSYjRqRlp1b0hZN2k0OXJ4bGs9
strict-transport-security: max-age=15768000; includeSubDomains; preload
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/fonts.css
104.16.43.62200 OK 3.1 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/fonts.css
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3160), with no line terminators
Hash 37f6d06d2ed17ec85c450645f500a762
abfc1fcb73bd7d06ba4e73a483038bf60083dcfd
6b825acdb0b802b6db89f1ed3819fcb913e02552b12930f982c7fe2bb3aaf232
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/fonts.css HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: text/css
cache-control: public, max-age=2591887
cf-bgj: minify
cf-polished: origSize=3392
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:30:45 GMT
vary: accept-encoding
x-dw-request-base-id: POmgnTx7c2UBAAB_
cf-cache-status: HIT
age: 19223
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bf05f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
img.riskified.com/img/image-l.gif?t=17020863511590.6520473330671412&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
52.54.172.171200 OK 35 B URL GET HTTP/2 img.riskified.com/img/image-l.gif?t=17020863511590.6520473330671412&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348
IP 52.54.172.171:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerDigiCert Inc
Subjectimg.riskified.com
FingerprintA8:F3:27:00:4D:86:1C:D5:98:ED:EC:D0:76:3E:FE:26:DF:75:2B:DC
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File type GIF image data, version 87a, 1 x 1\012- data
Hash cfea9e094d58b54abf242e795f0b913f
cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
GET /img/image-l.gif?t=17020863511590.6520473330671412&c=jaibd79t4f4dkabufrzk3lpxe9ley&p=ka6858&a=dgC75Dox3asiQNUuiRb4jFZuoHY7i49rxlk=&o=fsastore.com_hec&rt=1702086343348 HTTP/1.1
Host: img.riskified.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sat, 09 Dec 2023 01:45:44 GMT
content-type: image/gif
content-length: 35
last-modified: Thu, 29 Sep 2022 08:50:09 GMT
etag: "63355c41-23"
accept-ranges: bytes
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkJS.js
104.16.43.62200 OK 513 B URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkJS.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (516), with no line terminators
Hash d8723d473e39b3aa7888341a8bafa6d1
3c79f5c9e75a5b44190f4d4498fbf228a3a555a0
be77d2a0b93b9d6d9151d94d667139b5555d93855f40db70890d9eea2f40284f
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkJS.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2591885
cf-bgj: minify
cf-polished: origSize=601
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:30:34 GMT
x-dw-request-base-id: POklnTx7c2UBAAB_
cf-cache-status: HIT
age: 19221
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4bc325f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/471b3c5d-bf07-4a04-af89-77cee1e02153
104.18.72.113200 OK 1.0 kB URL GET HTTP/2 ekr.zdassets.com/compose/471b3c5d-bf07-4a04-af89-77cee1e02153
IP 104.18.72.113:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectzdassets.com
Fingerprint5F:75:10:F4:97:EA:C8:48:F9:4F:E6:19:19:A3:13:24:44:C1:E7:3C
ValidityMon, 23 Oct 2023 13:35:25 GMT - Sun, 21 Jan 2024 13:35:24 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1139), with no line terminators
Hash a109561c76040b060ad775b45f5fd06f
ee4bceec87f4011ffbea1a3c0642e3bab0722f98
11e9534e5113bbda88b6cba40fb4a5950029b4eb70dafbc75eb4822cbe64a721
GET /compose/471b3c5d-bf07-4a04-af89-77cee1e02153 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
vary: Accept, Origin, Accept-Encoding
cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600
etag: W/"b9e77262f84ad487e55f8c311211fa19"
x-request-id: 8308f90c3994ec8c-SEA, 8308f90c3994ec8c-SEA
x-runtime: 0.013629
x-zendesk-zorg: yes
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sS2k2967wRjnNodglETng%2BLTSahZSWX6oVv4zrAjkLJUCCRike%2B9X9lcs%2BKyFpyknUd1NrfM6SbYtd7rei9c0N2AgbI%2BR%2FaBXyEza4An1LfZFnTNjnHaJ6WxYJCOoRS12kk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 832991f94f750b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw6dc6c702/images/footer/instagram-fsa.svg
104.16.43.62200 OK 793 B URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw6dc6c702/images/footer/instagram-fsa.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (810), with no line terminators
Hash 244ca4c45066ec6a8c368d78f11125da
572bc8545dbc1726ee3fa32c8212333bd62f0d54
529076adf4aada0edc571c4ad9bf5c36e6a460a9a3f01edf0a46302d0e09ea62
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw6dc6c702/images/footer/instagram-fsa.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: -p0vU83XVmUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2584160
expires: Sun, 17 Dec 2023 03:02:37 GMT
last-modified: Tue, 27 Oct 2020 20:43:43 GMT
cf-cache-status: HIT
age: 1888343
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4ac2e5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwed3c1cfc/images/footer/chat-fsa.svg
104.16.43.62200 OK 1.5 kB URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwed3c1cfc/images/footer/chat-fsa.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1526), with no line terminators
Hash 3b5fd0c15ee26ef6dbfc57140d29c434
a5a59039953577c839ed1aad2c378da3ab64ecd6
0f65e960a12107dc5f4b641a04c469746895928a09bfe5111167a9990f34d574
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwed3c1cfc/images/footer/chat-fsa.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: -p0kQUyLaWUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Sun, 31 Dec 2023 07:29:16 GMT
last-modified: Tue, 27 Oct 2020 20:43:43 GMT
cf-cache-status: HIT
age: 670584
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f48c1e5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/575.js
54.230.111.48200 OK 169 B URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/575.js
IP 54.230.111.48:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 93a6760f6e55ecf77d1ef8506582085b
bf075e360e3bb0607ce89110ed80cbd48a013c0c
c0b03338a3dd5a0d5fd1c00b8fcccd74b52d84274e3cfad0ddccbf6980579490
GET /tag-builds/10446/4.1/js/chunks/575.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 169
date: Thu, 09 Nov 2023 17:04:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:01 GMT
etag: "569ab611b182c1a5bff0cf1a1c827a18"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: PowerReviews
vary: Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SglqjHhkyonExCCUGIGIOSwXBJJlSz7-yFReJVkrQeROuRPp6z0eyw==
age: 2536867
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/576.js
54.230.111.48200 OK 169 B URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/576.js
IP 54.230.111.48:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 1135900b736af8372833eb303446be64
d130fbd55420b2d8a87d9f2711705513f266b657
4777f1c3444ce9e5cd0b61489f410f475ef22d62ca3e3ec83ed4f4a927351a6c
GET /tag-builds/10446/4.1/js/chunks/576.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 169
date: Thu, 09 Nov 2023 17:04:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:01 GMT
etag: "e4b6c241c0df6a368bb13aebdb2308ab"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: PowerReviews
vary: Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FMaDtVUrCtQBcEIO84hY_gYIl5Tx1moom6L7UxsEsFylQ2X-kkYmkw==
age: 2536867
X-Firefox-Spdy: h2
cdn.izooto.com/scripts/sdk/izooto.js
104.18.216.65200 OK 325 kB URL GET HTTP/2 cdn.izooto.com/scripts/sdk/izooto.js
IP 104.18.216.65:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE6:21:70:71:4E:32:8D:7E:16:2C:F9:84:AE:DC:B2:3D:C7:94:DD:EB
ValiditySun, 14 May 2023 00:00:00 GMT - Mon, 13 May 2024 23:59:59 GMT
Size 325 kB (324943 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/sdk/izooto.js HTTP/1.1
Host: cdn.izooto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
etag: W/"6571a728-4f54f"
last-modified: Thu, 07 Dec 2023 11:06:16 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 139144
expires: Mon, 25 Dec 2023 01:45:42 GMT
cache-control: public, max-age=1382400
server: cloudflare
cf-ray: 832991f79fbe56ca-OSL
content-encoding: br
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwd8a47093/images/footer/twitter-fsa.svg
104.16.43.62200 OK 746 B URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwd8a47093/images/footer/twitter-fsa.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (763), with no line terminators
Hash 25991aa2eea744fedc5b44a69ad3d9a5
9475bd0a6ae72c811af8ca77c1f65cde7295d450
20e29d94e15adb128422ad769cd34ac668b21009f20ffac5e08ede1d64393e66
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwd8a47093/images/footer/twitter-fsa.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: -p2lOS8RYGUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Sun, 24 Dec 2023 02:57:51 GMT
last-modified: Tue, 27 Oct 2020 20:43:43 GMT
cf-cache-status: HIT
age: 1291670
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4ac2d5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/pxhandle?src=9IPgehJq%2Finit.js
104.16.43.62200 OK 168 kB URL GET HTTP/2 fsastore.com/pxhandle?src=9IPgehJq%2Finit.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65402)
Size 168 kB (168191 bytes)
Hash 0ef0e09ae4d0d5df6a40188258c96013
a7bd18d2b17d547bf20ea01c0487e032d2026c0c
b889e218e54dbe6d7797c007cbb546f7f4f71a16740c17088ef4491f94c945d0
GET /pxhandle?src=9IPgehJq%2Finit.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: application/javascript;charset=utf-8
accept-ranges: bytes
x-dw-request-base-id: -p1rZ8bGc2UBAAB_
referrer-policy: strict-origin-when-cross-origin
content-security-policy: frame-ancestors 'self'
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
set-cookie: __cq_dnt=0; Path=/; Secure; SameSite=None
dw_dnt=0; Path=/; Secure; SameSite=None
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f73d375f01-ARN
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/dw24e3b1d1/images/favicons/android-chrome-512x512.png
104.16.43.62200 OK 11 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/dw24e3b1d1/images/favicons/android-chrome-512x512.png
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 89b4cb183d98e7922bb0364720e2d3b9
3892ce29cdb7eca57e792007054458e65ef4053b
58bf4b4142e400498d555c3a7e4bad6281dbecf265fbe90be82c3b41b160c9ab
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/dw24e3b1d1/images/favicons/android-chrome-512x512.png HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==; ConstructorioID_client_id=66827123-438d-4da9-8c74-1cdad22049d3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: image/webp
content-length: 10654
cache-control: public, max-age=2589718
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=25175
content-disposition: inline; filename="android-chrome-512x512.webp"
cross-origin-resource-policy: cross-origin
expires: Mon, 08 Jan 2024 01:06:37 GMT
last-modified: Thu, 07 Dec 2023 02:30:31 GMT
vary: Accept
x-dw-request-base-id: POlbwJ29c2UBAAB_
cf-cache-status: HIT
age: 63
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991fa7e005f01-ARN
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/main.js
104.16.43.62200 OK 569 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/main.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
Size 569 kB (569129 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/main.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590722
cf-bgj: minify
cf-polished: origSize=569132
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:29:59 GMT
vary: accept-encoding
x-dw-request-base-id: -p1EtDx7c2UBAAB_
cf-cache-status: HIT
age: 18058
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bec5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-3ERPGK1885>m=45je3bt0v885625877z8844299441&_p=1702086348732&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1878084184.1702086350&ul=en-us&sr=1280x1024&_s=1&sid=1702086350&sct=1&seg=0&dl=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&dt=Savings%20Center%20%7C%20FSA%20Store&en=page_view&_fv=1&_nsi=1&_ss=1&up.pageType_up=content&up.registered_up=Unregistered&up.customerLoyalty_up=false&tfd=4288
216.239.34.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-3ERPGK1885>m=45je3bt0v885625877z8844299441&_p=1702086348732&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1878084184.1702086350&ul=en-us&sr=1280x1024&_s=1&sid=1702086350&sct=1&seg=0&dl=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&dt=Savings%20Center%20%7C%20FSA%20Store&en=page_view&_fv=1&_nsi=1&_ss=1&up.pageType_up=content&up.registered_up=Unregistered&up.customerLoyalty_up=false&tfd=4288
IP 216.239.34.36:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-3ERPGK1885>m=45je3bt0v885625877z8844299441&_p=1702086348732&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1878084184.1702086350&ul=en-us&sr=1280x1024&_s=1&sid=1702086350&sct=1&seg=0&dl=https%3A%2F%2Ffsastore.com%2Fsavings-center.html%3FAFID%3D555292%26ParentId%3D%26GroupName%3DTPA%26CID%3D437559%26utm_source%3DPayflex%26utm_medium%3Dtpa%2Bemail%2Bins%2Bbanner%2Bsqu5%2Bintro%26utm_campaign%3DTPA%2BPartner&dt=Savings%20Center%20%7C%20FSA%20Store&en=page_view&_fv=1&_nsi=1&_ss=1&up.pageType_up=content&up.registered_up=Unregistered&up.customerLoyalty_up=false&tfd=4288 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://fsastore.com
date: Sat, 09 Dec 2023 01:45:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/loqatehelper.js
104.16.43.62200 OK 966 B URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/loqatehelper.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (966), with no line terminators
Hash 7ebe9ecc055d256ca3071cae128014cf
d3a20ec5ce95987c78706bf999b5f1019cc78144
32828674e1555208c5d1bfcf69756dfde7d6373eea7c15540f4be6c79f7ebba5
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/loqatehelper.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590723
cf-bgj: minify
cf-polished: origSize=1299
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:30:34 GMT
vary: accept-encoding
x-dw-request-base-id: -p0AtDx7c2UBAAB_
cf-cache-status: HIT
age: 18059
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f43bdf5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=471b3c5d-bf07-4a04-af89-77cee1e02153
104.18.72.113200 OK 10 kB URL GET HTTP/2 static.zdassets.com/ekr/snippet.js?key=471b3c5d-bf07-4a04-af89-77cee1e02153
IP 104.18.72.113:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subjectzdassets.com
Fingerprint5F:75:10:F4:97:EA:C8:48:F9:4F:E6:19:19:A3:13:24:44:C1:E7:3C
ValidityMon, 23 Oct 2023 13:35:25 GMT - Sun, 21 Jan 2024 13:35:24 GMT
File type ASCII text, with very long lines (10187), with no line terminators
Hash 42d94c325a0b012e41f9c3907853625a
567dbe8e0b61115deb7c33947f706d4e51c3ab49
9f22f6e9d4852f8be0706b62fbd0eba20f6cb56171def5e387b2d95fcd07df01
GET /ekr/snippet.js?key=471b3c5d-bf07-4a04-af89-77cee1e02153 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
x-amz-id-2: OdnBjVcC5xsQvyjtpPVBe21NpgZXl51NRJfLydbGvh5Gu9AdfuYJ4+/g1Hhtqo28e16NzYJZ+wk=
x-amz-request-id: SJN8N1JDMTD43WG0
x-amz-replication-status: COMPLETED
last-modified: Wed, 09 Aug 2023 01:01:02 GMT
etag: W/"42d94c325a0b012e41f9c3907853625a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: hKEbdq289Xo7bHrM.yPFOdJ37r5nFwfe
cf-cache-status: HIT
age: 30
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y0jevCylY6D1QrQsLn4lqxjiyx4Wf84LQRMC%2FKKZ6ohWX3w9lpj%2BfaDTdiHEyXxpX9pH7B8gzzQEHHwB7V1qLvqUS%2Ftcl4YOGHgReK%2FRRWHoNouEeYhL488OlJ9tnbtwyGwEB%2BY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 832991f4f8be568d-OSL
content-encoding: br
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/VolkoGrot-Medium.woff2
104.16.43.62200 OK 24 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/VolkoGrot-Medium.woff2
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), CFF, length 23872, version 5.0\012- data
Hash 656a447b924c747001775897add8ca8e
a5c4db389c4b8ae54491b5ab73a8561b52c1fe69
04ccb6346a6b2328c2bf9ddb4f30bcfafda60db05c7c14a026508fbd4c42f455
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/VolkoGrot-Medium.woff2 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/fonts.css
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: font/woff2
content-length: 23872
x-dw-request-base-id: POm9nTx7c2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591881
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:31:18 GMT
cf-cache-status: HIT
age: 19219
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f7ed5b5f01-ARN
X-Firefox-Spdy: h2
cdn.izooto.com/scripts/778ebb05e1055f1d827cefa557d79d940d28ac53.js
104.18.216.65200 OK 3.5 kB URL GET HTTP/2 cdn.izooto.com/scripts/778ebb05e1055f1d827cefa557d79d940d28ac53.js
IP 104.18.216.65:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE6:21:70:71:4E:32:8D:7E:16:2C:F9:84:AE:DC:B2:3D:C7:94:DD:EB
ValiditySun, 14 May 2023 00:00:00 GMT - Mon, 13 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (3759), with no line terminators
Hash 7c82d25c6395f5f611b7774dce843112
9cdfaafa19661a735e5736fce9f87c1887db3170
41e969e0b3ceaf55bedb743f845c9499ae2a3293252352c36e8ca450e56262cd
GET /scripts/778ebb05e1055f1d827cefa557d79d940d28ac53.js HTTP/1.1
Host: cdn.izooto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
etag: W/"65691411-dba"
last-modified: Thu, 30 Nov 2023 23:00:33 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 567456
expires: Sun, 10 Dec 2023 01:45:41 GMT
cache-control: public, max-age=86400
server: cloudflare
cf-ray: 832991f4aecb56ca-OSL
content-encoding: br
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwd37066e3/images/partner-lp/byte/byte-icon-01.svg
104.16.43.62200 OK 1.3 kB URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwd37066e3/images/partner-lp/byte/byte-icon-01.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document, ASCII text, with very long lines (1291), with no line terminators
Hash 27f407861f3d77fab7191df6c44ddbc0
2feef3caf3d849dad622cda0801312ec4ee8c1d0
5bb1f9822c19676f79f05b1b3cd26324b07187b563f10fcc5c6dcb2523a5e74b
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwd37066e3/images/partner-lp/byte/byte-icon-01.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: POm4jJcZaWUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2562892
expires: Sat, 30 Dec 2023 23:24:07 GMT
last-modified: Wed, 20 Jul 2022 20:59:10 GMT
cf-cache-status: HIT
age: 670586
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f47c135f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/loqatecustom.js
104.16.43.62200 OK 2.3 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/loqatecustom.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (2350), with no line terminators
Hash 1ca95d7947bdb21f70206b878ccebf24
100469fe409fcaca657e270b9af694d2c7dda739
fc7cfb8c3a8cbe8c74d0b77f4f13d4d6392ae6209696e99c001568ae81e69f66
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/loqatecustom.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590722
cf-bgj: minify
cf-polished: origSize=3291
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:30:34 GMT
vary: accept-encoding
x-dw-request-base-id: -p0NtDx7c2UBAAB_
cf-cache-status: HIT
age: 18058
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f44bea5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/constructor/autocomplete-ui.min.js
104.16.43.62200 OK 271 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/constructor/autocomplete-ui.min.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (37554)
Size 271 kB (271213 bytes)
Hash 9687956c47702e5a82f28166ec61194f
15d4a6e79f916bcaef69e4c59a792517ba8409c3
f5dfccdf66176f7dcda1e5d0e00afc99c701cbd766c81a697ce04afb87eb47a9
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/constructor/autocomplete-ui.min.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
x-dw-request-base-id: -p3WNpK7c2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2589197
expires: Mon, 08 Jan 2024 00:57:54 GMT
last-modified: Thu, 07 Dec 2023 02:31:10 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: HIT
age: 64
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f42bdd5f01-ARN
X-Firefox-Spdy: h2
mt.auryc.com/v1/event
34.66.73.214204 No Content 0 B IP 34.66.73.214:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subject*.auryc.com
FingerprintDD:6D:11:19:EB:4E:85:AA:A8:B9:E9:B6:41:A8:1C:AB:54:36:70:A4
ValidityTue, 26 Sep 2023 02:06:43 GMT - Mon, 25 Dec 2023 02:06:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/event HTTP/1.1
Host: mt.auryc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type,x-authorized-identity
Referer: https://fsastore.com/
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Authorized-Identity,X-Authorized-Token,X-Message-Type,Payload-Type,Dnt
access-control-allow-methods: GET,POST,PUT,PATCH,DELETE,HEAD,OPTIONS
access-control-allow-origin: *
access-control-max-age: 43200
date: Sat, 09 Dec 2023 01:45:45 GMT
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/constructor/base-autocomplete-ui.css
104.16.43.62200 OK 4.1 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/constructor/base-autocomplete-ui.css
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (4117), with no line terminators
Hash 70f278911d7664ebbea84a7d8ef97d4e
cc686a5477208eba4cb17081e0d4a02e635d4bdc
fa1314ac7c5b98fe38aaf3fb49c00293e59ece84d12163b2976a199fe169b2c8
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/constructor/base-autocomplete-ui.css HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: text/css
cache-control: public, max-age=2591887
cf-bgj: minify
cf-polished: origSize=5284
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:31:10 GMT
vary: accept-encoding
x-dw-request-base-id: POmVnTx7c2UBAAB_
cf-cache-status: HIT
age: 19223
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f42bd55f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/VolkoGrot-Light.woff2
104.16.43.62200 OK 23 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/VolkoGrot-Light.woff2
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), CFF, length 23372, version 5.0\012- data
Hash 79a66f0b18472f2b5513d39d3997f1c7
35709584ce149508b113ac52940b4886bae427e6
1e4e4dc1a3962fa7e3c9e09411c6c6d107bf4792e5a1862e97d3c72f580fcfcd
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/fonts/Valkolak/VolkoGrot-Light.woff2 HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/css/fonts.css
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:42 GMT
content-type: font/woff2
content-length: 23372
x-dw-request-base-id: POlBnj17c2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591882
expires: Sun, 07 Jan 2024 20:23:25 GMT
last-modified: Thu, 07 Dec 2023 02:31:18 GMT
cf-cache-status: HIT
age: 19219
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f7ed5a5f01-ARN
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwc9186ca6/images/footer/contact-fsa.svg
104.16.43.62200 OK 1.3 kB URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwc9186ca6/images/footer/contact-fsa.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1326), with no line terminators
Hash 3e76d7e9fd45781cb73d2b0e28ad2465
be99d94a097e4cf7882ad641da21de8f65a4002b
8a16cf9b2454bb0148275e70c61c1f5b6b6714d3e37881129111d40d7b52d67c
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwc9186ca6/images/footer/contact-fsa.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: POmxLwePX2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2567999
expires: Sat, 23 Dec 2023 17:42:31 GMT
last-modified: Tue, 27 Oct 2020 20:43:43 GMT
cf-cache-status: HIT
age: 1300989
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f48c1d5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/thirdParty/lazySizes.js
104.16.43.62200 OK 7.9 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/thirdParty/lazySizes.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (8067), with no line terminators
Hash d11361f56b724475e7c265dd93cf9f3d
45a24dcbbd4ad41a59e01435a6a002d7559c730f
aeb59275c84d1ecee02da1360bdba01560c9d9736bd9fb6c8c26b71aa3caa61a
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/thirdParty/lazySizes.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590734
cf-bgj: minify
cf-polished: origSize=7889
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:31:19 GMT
vary: accept-encoding
x-dw-request-base-id: -p0ztDx7c2UBAAB_
cf-cache-status: HIT
age: 18070
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45bee5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
mt.auryc.com/v1/event
34.66.73.214202 Accepted 21 B IP 34.66.73.214:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerLet's Encrypt
Subject*.auryc.com
FingerprintDD:6D:11:19:EB:4E:85:AA:A8:B9:E9:B6:41:A8:1C:AB:54:36:70:A4
ValidityTue, 26 Sep 2023 02:06:43 GMT - Mon, 25 Dec 2023 02:06:42 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 82c416194aafa970b78173512357f77b
2321e1ac65c03a539e6d5220a6abfbf33bba46f0
027f9d82e61ecceb791e2c57e459113e616434d60c543bfd1ce589c302f60e8b
POST /v1/event HTTP/1.1
Host: mt.auryc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
Content-Type: application/x-protobuf;charset=utf-8
X-Authorized-Identity: 2449-Main-prod-heap
Authorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiIyNDQ5LU1haW4tcHJvZC1oZWFwIiwiaWF0IjoxNzAxOTY2MzUxfQ.KxIXYPjR4A7bJ7PhrgaVtV5c9SJ2eYSsXDVNwgn_E28
Content-Length: 42200
Origin: https://fsastore.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 202 Accepted
access-control-allow-origin: *
content-type: application/json; charset=utf-8
x-ratelimit-limit: 1048576
x-ratelimit-remaining: 1048575
x-ratelimit-reset: 1702086405
date: Sat, 09 Dec 2023 01:45:45 GMT
content-length: 21
x-envoy-upstream-service-time: 1
server: istio-envoy
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/react/reactMain.js
104.16.43.62200 OK 404 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/react/reactMain.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
Size 404 kB (404162 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/react/reactMain.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2590735
cf-bgj: minify
cf-polished: origSize=404165
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:30:50 GMT
vary: accept-encoding
x-dw-request-base-id: POlSnTx7c2UBAAB_
cf-cache-status: HIT
age: 18072
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f45beb5f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw30a48766/images/footer/linked-in-fsa.svg
104.16.43.62200 OK 490 B URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw30a48766/images/footer/linked-in-fsa.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (507), with no line terminators
Hash 1cf0d06b3d17d24c54d69fb467f75e8b
29f4d29ac9f8c15d482edd7f2d8147f4f895e08c
24eea19990b93247684dfe16394054227fff0db1a092d262d4a54d8b7578ee3f
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dw30a48766/images/footer/linked-in-fsa.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: -p2lMW4FaGUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Sat, 30 Dec 2023 03:45:50 GMT
last-modified: Tue, 27 Oct 2020 20:43:43 GMT
cf-cache-status: HIT
age: 770391
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f48c205f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwb6a5add7/images/footer/facebook-fsa.svg
104.16.43.62200 OK 399 B URL GET HTTP/2 fsastore.com/on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwb6a5add7/images/footer/facebook-fsa.svg
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (416), with no line terminators
Hash 777baee07a5cfd654a1d7d0dc89e52c7
17e2975df6ef65f51cafd692d85124ae8771fd46
77be0e378d1195f67f5bf68d72590f97a6dbe8012868a45255d283c9c341ecf3
GET /on/demandware.static/-/Library-Sites-fsaStoreLibrary/default/dwb6a5add7/images/footer/facebook-fsa.svg HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: image/svg+xml
x-dw-request-base-id: POmHGREmX2UBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2531810
expires: Sat, 23 Dec 2023 10:14:41 GMT
last-modified: Tue, 27 Oct 2020 20:43:43 GMT
cf-cache-status: HIT
age: 1291670
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f48c215f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkSubPoints.js
104.16.43.62200 OK 2.8 kB URL GET HTTP/2 fsastore.com/on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkSubPoints.js
IP 104.16.43.62:443
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerSectigo Limited
Subjectfsastore.com
FingerprintF2:1F:EA:18:AD:A3:ED:B9:E0:67:C0:3F:4C:7E:61:95:E6:0C:84:52
ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (2877), with no line terminators
Hash d41415808171805dcfe1c43b6e67598b
8b18fdf160c86096afe358381271d3f8fdd147ad
b1ff786d1b6b82b9df854d4a3c9b14f4e725245e8d8260cdd1cdbecd0d8723b7
GET /on/demandware.static/Sites-FSASTORE-Site/-/default/v1702067003740/js/ltkSubPoints.js HTTP/1.1
Host: fsastore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
DNT: 1
Connection: keep-alive
Cookie: dwac_670c7ee154c7f97ddc03a44609=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE%3D|dw-only|||USD|false|US%2FPacific|true; sid=LWniiE4TdQ0zVc5qajGczZ1Xb-16KMqZzaE; TPA=555292~1733622340950~437559|~~|~~; dwanonymous_ebbcc7333cbd3ff1706f9e3d8e0d105f=afba2Doqidlltd0erHqjQ8aMcO; _pxhd=6420722ea542b00a95d51e000232be7ebf9d4c796be85c08da6b34bdf1f665c1:a8ecf8fa-9634-11ee-a66d-80d631a343f0; __cq_dnt=0; dw_dnt=0; UtmSourceCookie=payflex; dwsid=GC1ZgGCebwfHGSJIzWqV5qgT1OVUpdCTOe3mj9iMEmaGXI99XR77leyR9y0C5BuFoan503cxlYhd-O5wzWASIQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:45:41 GMT
content-type: application/javascript
cache-control: public, max-age=2591885
cf-bgj: minify
cf-polished: origSize=4897
cross-origin-resource-policy: cross-origin
expires: Sun, 07 Jan 2024 20:23:24 GMT
last-modified: Thu, 07 Dec 2023 02:30:34 GMT
vary: accept-encoding
x-dw-request-base-id: POknnTx7c2UBAAB_
cf-cache-status: HIT
age: 19222
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 832991f4cc495f01-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
bat.bing.com/p/action/4029727.js
204.79.197.200204 No Content 0 B URL GET HTTP/2 bat.bing.com/p/action/4029727.js
IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://fsastore.com/savings-center.html?AFID=555292&ParentId=&GroupName=TPA&CID=437559&utm_source=Payflex&utm_medium=tpa+email+ins+banner+squ5+intro&utm_campaign=TPA+Partner
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/4029727.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fsastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9C7463D00E384E8B82DCE6C5FC701A1A Ref B: OSL30EDGE0413 Ref C: 2023-12-09T01:45:44Z
date: Sat, 09 Dec 2023 01:45:44 GMT
X-Firefox-Spdy: h2