r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2825
Expires: Wed, 07 Dec 2022 00:38:04 GMT
Date: Tue, 06 Dec 2022 23:50:59 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1140
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:50:59 GMT
Last-Modified: Tue, 06 Dec 2022 23:31:59 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.nearlynatural.com/10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5/authenticate?key=c9da742662dd279a569b392f8f95cd69
302 Found 0 B URL HTTP/1.1 www.nearlynatural.com/10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5/authenticate?key=c9da742662dd279a569b392f8f95cd69
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5/authenticate?key=c9da742662dd279a569b392f8f95cd69 HTTP/1.1
Host: www.nearlynatural.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 06 Dec 2022 23:50:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Sorting-Hat-PodId: 82
X-Sorting-Hat-ShopId: 10894606436
X-Frame-Options: DENY
Location: https://www.nearlynatural.com/10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5/authenticate?key=c9da742662dd279a569b392f8f95cd69
X-Shopify-Stage: production
Content-Security-Policy: frame-ancestors 'none'; report-uri /csp-report?source%5Baction%5D=authenticate&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=9ef2a962-c0fa-4563-9865-71c766e7d3e4
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block; report=/xss-report?source%5Baction%5D=authenticate&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=9ef2a962-c0fa-4563-9865-71c766e7d3e4
X-Dc: gcp-europe-north1,gcp-us-central1,gcp-us-central1
X-Request-ID: 9ef2a962-c0fa-4563-9865-71c766e7d3e4
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q7xqfcnhJuWmVSfyQbQSZfnZK5%2BoD86MvV6IZdI%2FlnzAtYSHQ4kirLii43LrTRO99cnTR3b5CyAMoOh5zzgADbE4%2FhcOf9sZ17Z1FklFe%2BXKQrtyCj3G8bii3XvUoIy1vYQD7RlEag%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Server-Timing: cfRequestDuration;dur=328.999996
Server: cloudflare
CF-RAY: 7758ed4a0d89fac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 23:20:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1833
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2845
Expires: Wed, 07 Dec 2022 00:38:24 GMT
Date: Tue, 06 Dec 2022 23:50:59 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: olW577fDk2P2jwanF9EN20/cZazGwoWWk6sw27jamPy+vUrgBtrrl7xycJELqdbqBK7kwUGgSyU=
x-amz-request-id: SC929HZZAR4VENJK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 23:47:17 GMT
age: 222
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 23:50:59 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9d988e0b0cc114c8776d65091b5756d5
286a69674498e0ed7af5ec7c6d8aac31475a5e70
7b7271ea15a760ccdfd1ef9f1967790d4c6e65a709d8f9d941d3b46455733177
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B7271EA15A760CCDFD1EF9F1967790D4C6E65A709D8F9D941D3B46455733177"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21538
Expires: Wed, 07 Dec 2022 05:49:57 GMT
Date: Tue, 06 Dec 2022 23:50:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 23:11:20 GMT
cache-control: public,max-age=3600
age: 2379
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9d988e0b0cc114c8776d65091b5756d5
286a69674498e0ed7af5ec7c6d8aac31475a5e70
7b7271ea15a760ccdfd1ef9f1967790d4c6e65a709d8f9d941d3b46455733177
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B7271EA15A760CCDFD1EF9F1967790D4C6E65A709D8F9D941D3B46455733177"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21538
Expires: Wed, 07 Dec 2022 05:49:57 GMT
Date: Tue, 06 Dec 2022 23:50:59 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1113
Cache-Control: max-age=120864
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:50:59 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 09:25:23 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MX6TJgFBmIrKsHXI8n2S+A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vVs8wMBtkqaBje3A38zNcGOYSEc=
ocsp.pki.goog/s/gts1d4/DkNsdcFOV_Y
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/DkNsdcFOV_Y
IP
Hash e58e13d259ba2e0d1c78d1290936a2f1
233a7909c1c7c04923b9e0b2cf9dd110c1f02fbd
61ded868b4ea15620681fcbc4528d48ae4352de1d1c9b42a816a565ef0bf9a92
POST /s/gts1d4/DkNsdcFOV_Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:00 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30aec170d58f580f2ed4da4b92d72cc7
3b11a98ba9563f7f266e7a935e3b78bd0c0712aa
7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
shopify-gtm-suite.getelevar.com/shops/920b8fe7aebdde46c3642961bd9357fa43c356c0/events.js
200 OK 8.2 kB URL HTTP/2 shopify-gtm-suite.getelevar.com/shops/920b8fe7aebdde46c3642961bd9357fa43c356c0/events.js
IP
File type Unicode text, UTF-8 text, with very long lines (23506), with no line terminators
Hash c8cc3ae0309f19c2979e6ab19aaf60cc
38492b4bcb5df44b04d1648e6078cbf8691fbb35
8c4c1d185f2840db0065e7b40d88b565755038b26d8b79e43171b20064083803
GET /shops/920b8fe7aebdde46c3642961bd9357fa43c356c0/events.js HTTP/1.1
Host: shopify-gtm-suite.getelevar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nearlynatural.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu3aCnHhMI8ZD92W3wian_CCx9SxU3aDxcX31ZjpYOQQkIP7iSZJPx5Vx-OJBc6UhnGbG0MacGbPP5Mu80PXfycX4Ahp4Wb
x-goog-generation: 1669685077155549
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 8238
content-encoding: gzip
x-goog-hash: crc32c=1t3H+Q==, md5=yMw64DCfGcKXnmqxmq9gzA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 8238
vary: Origin
server: UploadServer
date: Mon, 05 Dec 2022 16:18:56 GMT
expires: Tue, 05 Dec 2023 16:18:56 GMT
cache-control: no-transform
last-modified: Tue, 29 Nov 2022 01:24:37 GMT
etag: "c8cc3ae0309f19c2979e6ab19aaf60cc"
content-type: application/javascript
age: 113524
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/DkNsdcFOV_Y
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/DkNsdcFOV_Y
IP
Hash e58e13d259ba2e0d1c78d1290936a2f1
233a7909c1c7c04923b9e0b2cf9dd110c1f02fbd
61ded868b4ea15620681fcbc4528d48ae4352de1d1c9b42a816a565ef0bf9a92
POST /s/gts1d4/DkNsdcFOV_Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:01 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-5235WJV
200 OK 103 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5235WJV
IP
File type ASCII text, with very long lines (35937)
Size 103 kB (102896 bytes)
Hash 3e3e5937727800b4e3c6afa30686f646
2a6318fec367105fb1c7cf037806a5132f351167
d7174b19a89f52386df667317cd388d0e813434eff6ff26a381bcb4747645cff
GET /gtm.js?id=GTM-5235WJV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nearlynatural.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Dec 2022 23:51:01 GMT
expires: Tue, 06 Dec 2022 23:51:01 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 102896
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6764
Expires: Wed, 07 Dec 2022 01:43:45 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6764
Expires: Wed, 07 Dec 2022 01:43:45 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6764
Expires: Wed, 07 Dec 2022 01:43:45 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6764
Expires: Wed, 07 Dec 2022 01:43:45 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6764
Expires: Wed, 07 Dec 2022 01:43:45 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
cdn.shopify.com/s/files/1/0108/9460/6436/files/NearlyNatural_Logo-loop2.png?78273
200 OK 3.8 kB URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/files/NearlyNatural_Logo-loop2.png?78273
IP
File type PNG image data, 148 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 913fdadffbbd031b583875f6e704aa1e
8a01a6e34e7f920920b23932afac79c55796da65
7665f92e7e5f92285dd5f2b4efc83a2d86b727a11480e7028a03e04dceccb12f
GET /s/files/1/0108/9460/6436/files/NearlyNatural_Logo-loop2.png?78273 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:01 GMT
content-type: image/png
content-length: 3830
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0108/9460/6436/files/NearlyNatural_Logo-loop2.png>; rel="canonical"
source-length: 3722
source-type: image/png
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: e96d28e2-7790-4c33-b3fa-2ad2a765add2
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
cf-cache-status: HIT
age: 28709
last-modified: Tue, 06 Dec 2022 15:52:32 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hdEetl6LK5IuA143L6JzIQf5spcv9j%2F5J2Ukw69yhq1XI%2F1pe7DTEo8YdIcHrpzHQmrIbdIDd5EdHMRpWYrHTE3FMwTK%2FV9HIZWegVPtnF%2FJ%2Fo52X5WxMEyfAL8d4CoORg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=327.782, imageryFetch;dur=61.687, imageryProcess;dur=264.765;desc="image", cfRequestDuration;dur=13.000011
server: cloudflare
cf-ray: 7758ed595d2eb4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6764
Expires: Wed, 07 Dec 2022 01:43:45 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2621
Expires: Wed, 07 Dec 2022 00:34:42 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2621
Expires: Wed, 07 Dec 2022 00:34:42 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2621
Expires: Wed, 07 Dec 2022 00:34:42 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2621
Expires: Wed, 07 Dec 2022 00:34:42 GMT
Date: Tue, 06 Dec 2022 23:51:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a7ee62c5e846e8ad4808f4724f15146d
6d55b299f906908309f91eaf0a720ad65866db04
0d8f51d6f7f3bad4bb9d9c3000999739147f6dd718b290b0dca71a4cba85cb38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6846
x-amzn-requestid: 53452103-6559-460c-ac40-4685e6816aa4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGx4E-mIAMFatg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a5-5327ec9a2f247cc91654df80;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Znjnq24wuXoi43Bfc9aPdcUHhMh-a00hSCXUHFpHq3sTtQQoUYe6Uw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:29:49 GMT
age: 58872
etag: "6d55b299f906908309f91eaf0a720ad65866db04"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-54-fiddle-leaf-artificial-tree-real-touch-nearly-natural-489016_small.jpg?v=1584104177
200 OK 2.4 kB URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-54-fiddle-leaf-artificial-tree-real-touch-nearly-natural-489016_small.jpg?v=1584104177
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e6f5161659baf47940f4c6ebd94badea
acd9aff2b4026dd825918ced8905ff60fe30a5aa
e19f28fafd4f9286f783fbb28785a558f59b02104c60df49cd2a22c8cb10dddf
GET /s/files/1/0108/9460/6436/products/artificial-54-fiddle-leaf-artificial-tree-real-touch-nearly-natural-489016_small.jpg?v=1584104177 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:01 GMT
content-type: image/webp
content-length: 2440
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-54-fiddle-leaf-artificial-tree-real-touch-nearly-natural-489016_small.jpg>; rel="canonical"
source-length: 218335
source-type: image/jpeg
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 574ff9b5-6652-479e-8ecd-0eaea9890e35
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,us-central1
last-modified: Tue, 06 Dec 2022 00:29:32 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o3MZ0gnJdKeLxxrlHcff%2BBL1FEUVg7lKgFQ8JkxYYXezpjxLhFG1NYOPYHAXCuURcirgpiQ7mOOUiWETYCPqmnx8ANMe8dZTTbBtvhzecywDwp98hE7666c31leJ3OTFNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=243.540, imageryFetch;dur=68.563, imageryProcess;dur=173.746;desc="image", cfRequestDuration;dur=123.999834
server: cloudflare
cf-ray: 7758ed595d30b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4884ce2731d3033b12e4792c1bbf453e
63b6efc98cb04228d82ac28fceb97bb1cf8d82fb
8c37704d0e1fd16239e28cbdb88c5ac6a2e9cfb70f8457bfab127202f89d3788
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14896
x-amzn-requestid: 58d94b15-dce0-44c0-96b1-917f1206a39e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnA4RFkeoAMFfGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c4834-7c1667b53795d5c11a3bfdda;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:11:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gKrU6wAuRsrr4_VwxjHIsTHjAB_L3xy6VQPRFBTUrK4vd7ycP3kyig==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:46:26 GMT
age: 57875
etag: "63b6efc98cb04228d82ac28fceb97bb1cf8d82fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9257f2e3b9bd1b3aa262b0f4bf57968
4bcdd6ecd63834aa1010faf19457a97f37ae99fa
9afd592279c51b533b3bf72a860cf4a8f2bc6cf01b07d1ab6f11f0ff302e0ef6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7392
x-amzn-requestid: f4b6890a-7a8f-48f8-b2af-365cb5f681e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwREFiXoAMFSMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-009e524f30c72d0629c877bb;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C0-H0LUbxaxMEXoDf6PXEFAvVTj2D9K2M7eshRo39QzAAWSk2ubepA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 03:29:42 GMT
age: 73279
etag: "4bcdd6ecd63834aa1010faf19457a97f37ae99fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b6f4dd03deb6114fec01808b034a711c
c74d29bba44dbb09158da4b9e1b490112c7db915
ddc6721d8a42821c458cf6d5c64ebd10ca0002c95a275be1732cd9ade7bf1b6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10567
x-amzn-requestid: b9b16cdf-bfa2-4e3c-b00f-1704dd3473d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgIC6EgLoAMF3hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638986df-3945eea57676d3f91f8f2b3c;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 05:02:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: u9h1d9n-qSPVu7VuzNsUYljKkP7Q1gT6tHrF7DVJIxwyvFcbD2Dg1g==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 03:29:29 GMT
age: 73292
etag: "c74d29bba44dbb09158da4b9e1b490112c7db915"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.attn.tv/checkout/checkout.js
200 OK 18 kB URL HTTP/2 cdn.attn.tv/checkout/checkout.js
IP
Hash 75471e3b67070ba3052e814e2e530a3d
85dd447b2d657be0ebe52ea62ec39edba4df8edd
16791129d25274db932155114dcdefd935f3e2ea7dc82c67f906abb922a785cd
GET /checkout/checkout.js HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 23 Nov 2020 18:50:08 GMT
x-amz-version-id: 12RHvzVpePJPM_R9tiRSIgubYkdVseR4
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Dec 2022 23:51:00 GMT
cache-control: public, max-age=300
etag: W/"25e629cff471f51e0cfba3eb956a5063"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WwcrpzkWU5hWIUqOz7HFh4Ns7HqW3avFwE7dikW7hwbVAoKmI9wryA==
age: 159
X-Firefox-Spdy: h2
cdn.shopify.com/app/services/10894606436/assets/124581314643/checkout_stylesheet/v2-ltr-2021-01-25-fae89129e14e1d1356f2f99f330d146d-78273
200 OK 43 kB URL HTTP/2 cdn.shopify.com/app/services/10894606436/assets/124581314643/checkout_stylesheet/v2-ltr-2021-01-25-fae89129e14e1d1356f2f99f330d146d-78273
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 343000397a15f3cc0661203d36b99444
d4f3457d43b071572e5465915ea688c48989fbb6
bd14ed1e2675a4c241096619e174a0a1e529946356e10993dac8be75dbc7afea
GET /app/services/10894606436/assets/124581314643/checkout_stylesheet/v2-ltr-2021-01-25-fae89129e14e1d1356f2f99f330d146d-78273 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:01 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=31556952, public
link: <https://cdn.shopify.com/app/services/10894606436/assets/124581314643/checkout_stylesheet/v2-ltr-2021-01-25-fae89129e14e1d1356f2f99f330d146d-78273>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 5323e45b-0777-405d-b079-dd4d774220a1
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
cf-cache-status: HIT
age: 28702
last-modified: Tue, 06 Dec 2022 15:52:39 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7mOunQ4T6yDAo8Ybeb0qPlk%2Fybq9PDb1nb8dfOmeRJFvnrb6TR6m0Wfdauv4EXiMopaOg%2FT85yIsulPk9cH4%2BNjHgqrKFnYp6QYjXft5L6iqqhQRHIbiJcgD3Ma8c5zHzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=5602.091, imageryFetch;dur=5415.380, cfRequestDuration;dur=56.000233
server: cloudflare
cf-ray: 7758ed595d2bb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-82-olive-artificial-tree-nearly-natural-824108_small.jpg?v=1584165421
200 OK 1.9 kB URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-82-olive-artificial-tree-nearly-natural-824108_small.jpg?v=1584165421
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ec6ef0cc3bc652b88655a5ec798bb257
b920a30b2a631ef07b1ac1d340ffc74e307254c1
a7f647a8d79721d80cad249de0aa1c75c6086753bb5c001ccbb6881df2df3935
GET /s/files/1/0108/9460/6436/products/artificial-82-olive-artificial-tree-nearly-natural-824108_small.jpg?v=1584165421 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:01 GMT
content-type: image/webp
content-length: 1942
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0108/9460/6436/products/artificial-82-olive-artificial-tree-nearly-natural-824108_small.jpg>; rel="canonical"
source-length: 154113
source-type: image/jpeg
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 98a76e72-11be-47c1-aa94-ee06d3750bca
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Sun, 23 Oct 2022 05:02:29 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y9zUM1l26jaZEZ9kBdMFvbLkbX99TH5V44mp%2BRJh53lftNuB2337o8JGoD5udMvyjLySFcYw3mzkoxBH15%2BTt6wtzH8%2BhWcLZQuPWWzViRGBEYfFSqEf8jpp3LcUU9Dxrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=234.800, imageryFetch;dur=77.326, imageryProcess;dur=156.674;desc="image", cfRequestDuration;dur=129.999876
server: cloudflare
cf-ray: 7758ed595d2fb4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0108/9460/6436/t/359/assets/idme-checkout-style.css?78273
404 Not Found 1.4 kB URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/t/359/assets/idme-checkout-style.css?78273
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1195)
Hash 534b3962f8e203e607670a03f9db6b80
d061c1962373eb86f3493ca6173b4426d9f2ab10
614a3b9ac3e19c5a5fb6f44de4fbeb5792f7d48838254f88f980a15b09a6c967
GET /s/files/1/0108/9460/6436/t/359/assets/idme-checkout-style.css?78273 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Tue, 06 Dec 2022 23:51:01 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=30
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 7a7233db-1f63-4e62-9a07-e89411bdfe7f
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nNfe9DggAJFaPK%2BQ%2BMTMQC9hxw%2BbG7IaiyV2LVe7Zqeb34Y2kpyS6SDVZ%2BxUOcQgaICVx8wfII7hJSHezoux50FKt1OxJZHRuUuwl5y2oL7wEZCTmZx%2F5TnidW3ssrtW%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=19.151, imageryFetch;dur=19.045, cfRequestDuration;dur=130.000114
server: cloudflare
cf-ray: 7758ed595d40b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 4fd42bd2ba4c50d407680ca736ef1f0e
85348fe1d8a51fd63df585339d188045beec40a9
3e5dc6cd7a0d88e24b6786bf71f0ed0b712932153e3e62dbcbe437015e35d60d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4731
Cache-Control: max-age=162654
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:03 GMT
Etag: "638f9b4a-2d7"
Expires: Thu, 08 Dec 2022 21:01:57 GMT
Last-Modified: Tue, 06 Dec 2022 19:43:06 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727
cdn.shopify.com/app/services/10894606436/javascripts/checkout_countries/124581314643/en-US/countries-8fe113900ad925b49ea96dba32a9a624fa79acf9-0.js?version=2021-01-25
200 OK 31 kB URL HTTP/2 cdn.shopify.com/app/services/10894606436/javascripts/checkout_countries/124581314643/en-US/countries-8fe113900ad925b49ea96dba32a9a624fa79acf9-0.js?version=2021-01-25
IP
File type Unicode text, UTF-8 text, with very long lines (62586)
Hash 45d2d877b884a31ce80ab8ac58ea58be
dd7d4cdd402a65a3f8fb7d35573c48aeae32cfbe
31b15b7339185701b4c70e638875d2cf88bf6c96daca8dc0ca7e6c6401dfc399
GET /app/services/10894606436/javascripts/checkout_countries/124581314643/en-US/countries-8fe113900ad925b49ea96dba32a9a624fa79acf9-0.js?version=2021-01-25 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:03 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: no-cache
content-language: en-US
link: <https://cdn.shopify.com/app/services/10894606436/javascripts/checkout_countries/124581314643/en-US/countries-8fe113900ad925b49ea96dba32a9a624fa79acf9-0.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: a4c132ed-c113-4598-9bba-dd36d68766c0
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,us-east1
last-modified: Tue, 06 Dec 2022 23:43:50 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2EOZkwU051U9c7msHCuDuAiMfAram6itANCYEYJRkYQT%2F7ivXRU%2FTUFlfgpyE7x%2BjNCbW6Tw0s5nAZkDaAAk3fwDxY3p5TF0C1MvCnSgva332cVNPJpXMocmwaWz0ucsxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=1804.668, imageryFetch;dur=1804.400, cfRequestDuration;dur=2023.000002
server: cloudflare
cf-ray: 7758ed5958ac0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 4fd42bd2ba4c50d407680ca736ef1f0e
85348fe1d8a51fd63df585339d188045beec40a9
3e5dc6cd7a0d88e24b6786bf71f0ed0b712932153e3e62dbcbe437015e35d60d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4731
Cache-Control: max-age=162654
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:03 GMT
Etag: "638f9b4a-2d7"
Expires: Thu, 08 Dec 2022 21:01:57 GMT
Last-Modified: Tue, 06 Dec 2022 19:43:06 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 280 B IP
Hash 52bdbc803bd36b5f60acaf9f41b8bac9
a6a7a7c3856f3fd4c5058d6ca9703ac15b9923d9
5c1f00843590261fde8080762031c9de8255ad2611e901716d109217e439487d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5582
Cache-Control: max-age=110905
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:03 GMT
Etag: "638ecdd2-118"
Expires: Thu, 08 Dec 2022 06:39:28 GMT
Last-Modified: Tue, 06 Dec 2022 05:06:26 GMT
Server: ECS (amb/6BC3)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash f0b1680e47157c7eed020d868726c5e0
dde51b10e37a754e6fa3fa7462d3882ece7040d0
88c51fed2e4aa5073c1f6d8a37e710a0beb5d384cc1d9cfa885b58582b5b343b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 317
Cache-Control: max-age=125852
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:03 GMT
Etag: "638f1cc6-117"
Expires: Thu, 08 Dec 2022 10:48:35 GMT
Last-Modified: Tue, 06 Dec 2022 10:43:18 GMT
Server: ECS (amb/6B9B)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 6.2 kB IP
Hash ab9779174c2871a8e93a2c0959380eb9
7488c1929d93e42d0d814b2a1ce1900635a92f43
9e00d82264efbb7ade257624c38996ffaf532331e144aeb40009a1d48376beae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/js?client=gme-shopifyinc1&language=en-US
200 OK 53 kB URL HTTP/2 maps.googleapis.com/maps/api/js?client=gme-shopifyinc1&language=en-US
IP
File type ASCII text, with very long lines (2469)
Hash 7b020a92fe60412cf211b58fe016a07f
1bbe7461bdfd362f14feb40b938570a151ae83ee
dce577e40dfd2944f8acf71dc584bd157a8a151d201ed63f06cd3853ae628b88
GET /maps/api/js?client=gme-shopifyinc1&language=en-US HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53398
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=11
date: Tue, 06 Dec 2022 23:36:26 GMT
expires: Wed, 07 Dec 2022 00:06:26 GMT
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
age: 878
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
checkout.shopify.com/10894606436/sandbox/google_maps?locale=en-US
200 OK 2.8 kB URL HTTP/2 checkout.shopify.com/10894606436/sandbox/google_maps?locale=en-US
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash c28eaca223bf9508594a728c65270d5c
1152b803197408752bad64341102ec559c7eb348
f0e8e5864e80c3f0bbfe9d2e229c7ce8add69b1124d6041eed3fc29392e2d00e
GET /10894606436/sandbox/google_maps?locale=en-US HTTP/1.1
Host: checkout.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:03 GMT
content-type: text/html; charset=utf-8
x-sorting-hat-podid: 82
x-sorting-hat-shopid: 10894606436
vary: Accept-Encoding
x-shopid: 10894606436
x-shardid: 82
x-robots-tag: none
referrer-policy: origin-when-cross-origin
content-language: en-US
cache-control: no-cache
strict-transport-security: max-age=315569520; includeSubdomains
x-shopify-stage: production
content-security-policy: frame-ancestors *; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=google_maps&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Fsandbox&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=0617750d-f407-4a8f-b7c3-e64871ef8e8e
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block; report=/xss-report?source%5Baction%5D=google_maps&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Fsandbox&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=0617750d-f407-4a8f-b7c3-e64871ef8e8e
x-dc: gcp-europe-north1,gcp-us-central1,gcp-us-central1
set-cookie: _orig_referrer=https%3A%2F%2Fwww.nearlynatural.com%2F; Expires=Tue, 20-Dec-22 23:51:03 GMT; Domain=shopify.com; Path=/; HttpOnly; SameSite=Lax
_landing_page=%2F10894606436%2Fsandbox%2Fgoogle_maps%3Flocale%3Den-US; Expires=Tue, 20-Dec-22 23:51:03 GMT; Domain=shopify.com; Path=/; HttpOnly; SameSite=Lax
_y=01187a94-3130-47f9-960e-b867b2a22712; Expires=Wed, 06-Dec-23 23:51:03 GMT; Domain=shopify.com; Path=/; SameSite=Lax
_s=295746a8-a373-4f67-b425-e3dcc5dcb475; Expires=Wed, 07-Dec-22 00:21:03 GMT; Domain=shopify.com; Path=/; SameSite=Lax
_shopify_y=01187a94-3130-47f9-960e-b867b2a22712; Expires=Wed, 06-Dec-23 23:51:03 GMT; Domain=shopify.com; Path=/; SameSite=Lax
_shopify_s=295746a8-a373-4f67-b425-e3dcc5dcb475; Expires=Wed, 07-Dec-22 00:21:03 GMT; Domain=shopify.com; Path=/; SameSite=Lax
x-request-id: 0617750d-f407-4a8f-b7c3-e64871ef8e8e
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lpljns5jTSMfdHZj8qxnNN4wXUrMjE2u%2Bksd4YZiLLJIiodfvfe%2FvzJSDMiIBJZGdrA98jmXZX%2BkxF3IAJuh7sffpl2nbq2mf2FtkZVshoO4ssEWN3ZEZMDRETXmhYET%2B%2BNwPiri"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: cfRequestDuration;dur=289.000034
server: cloudflare
cf-ray: 7758ed6718d10b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq
200 OK 1.1 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2334)
Hash c82f2ced67d1acfc729e1d0197ff979a
c4c1decd4e63dee947bec0d5392bbf337eac03bc
64d475f85ab2776bc78014af986b7e80374b00f74310148fe6da294426b47763
GET /i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202212062351045BF6DFCF4F410014B1C0
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf607dfbcf050c6f97af8ed112e7c40d9696afb6595c60f83f5f5cc6e4661f1a98644cd41ed02652be6f6f7ab112a1eb55d7c4439347deb37e0218e461186d45e45c3220bae6b5bf9a04c1a0d7b5ff6825c7
content-encoding: gzip
content-length: 1148
x-origin-response-time: 8,104.112.235.143
x-akamai-request-id: 68cc5d7.26233e
expires: Tue, 06 Dec 2022 23:51:04 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Dec 2022 23:51:04 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
set-cookie: _ttp=2IYu6k8zV6cfYFAu3wITRElyD3h; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a104-112-235-143.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=101, origin; dur=8, inner; dur=6
x-parent-response-time: 109,23.36.79.13
X-Firefox-Spdy: h2
events.attentivemobile.com/e?v=4.16.17_1cf027a286&pd=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&u=2a715587cad5405892d9aa6cb31cc960&c=nearlynatural&ceid=M0e<=1670370663638&tag=modern&cs=1243139538&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1670370663643
200 OK 0 B URL HTTP/2 events.attentivemobile.com/e?v=4.16.17_1cf027a286&pd=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&u=2a715587cad5405892d9aa6cb31cc960&c=nearlynatural&ceid=M0e<=1670370663638&tag=modern&cs=1243139538&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1670370663643
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /e?v=4.16.17_1cf027a286&pd=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&u=2a715587cad5405892d9aa6cb31cc960&c=nearlynatural&ceid=M0e<=1670370663638&tag=modern&cs=1243139538&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1670370663643 HTTP/1.1
Host: events.attentivemobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:04 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
x-envoy-upstream-service-time: 8
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7758ed69d83eb505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 19 kB IP
Hash 4c7eaca22765639868affbeeacf0d65f
1eeb4c0846cc0bfdbd015389647b19dc8753c591
c13e71525781c5865e700e6a4652f0a798403547925a38c4dad685814d8d43db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5583
Cache-Control: max-age=110905
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Etag: "638ecdd2-118"
Expires: Thu, 08 Dec 2022 06:39:29 GMT
Last-Modified: Tue, 06 Dec 2022 05:06:26 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280
analytics.tiktok.com/i18n/pixel/static/main.MTk2NTc4NGU0Mg.js
200 OK 67 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MTk2NTc4NGU0Mg.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21716)
Hash d6f025b937f3059c3428f537657b0592
a8374902ca3105212ec0dd1c5fb1081c374000d9
84e3fb7b12b95701232cac4fac8a9871979483e7f9001de66ddbb6574fdb4830
GET /i18n/pixel/static/main.MTk2NTc4NGU0Mg.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Cookie: _ttp=2IYu6k8zV6cfYFAu3wITRElyD3h
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20221206132935A0FF80217C200C49E059
x-tt-trace-host: 016bcd940420b348c5c39f801ae137e23e2599eefa8a6aea376d30d6f7b040924aaa5177c52aef4a5c3392470b23e52d0aa506bc240c5cb99d867c9e63e159e834b3881935c3c0799808285d75caa41ed1
content-encoding: gzip
date: Tue, 06 Dec 2022 23:51:04 GMT
content-length: 67008
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 262440
X-Firefox-Spdy: h2
cdn.shopify.com/shopifycloud/shopify/assets/checkout/esnext/sandboxed_services-00fe4e1da267cb8ce9e2e0b5f9d3a6f92c7c7fd06aad1d2a09b91e58075b3f20.js
200 OK 69 kB URL HTTP/2 cdn.shopify.com/shopifycloud/shopify/assets/checkout/esnext/sandboxed_services-00fe4e1da267cb8ce9e2e0b5f9d3a6f92c7c7fd06aad1d2a09b91e58075b3f20.js
IP
File type ASCII text, with very long lines (32768)
Hash 40f54da4344ea936e9e6f70efec69197
ad004cdfffe8e7b3b5f884cf3212f5880d5eaac9
9b6b54a415db50d8b6e21d4c1eded35c95f2655d6ae34f5a2e2557bc0200269b
GET /shopifycloud/shopify/assets/checkout/esnext/sandboxed_services-00fe4e1da267cb8ce9e2e0b5f9d3a6f92c7c7fd06aad1d2a09b91e58075b3f20.js HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://checkout.shopify.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:03 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/checkout/esnext/sandboxed_services-00fe4e1da267cb8ce9e2e0b5f9d3a6f92c7c7fd06aad1d2a09b91e58075b3f20.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: c440c1f8-4f18-42db-94a6-5a1f76e3a501
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Fri, 26 Aug 2022 05:10:36 GMT
cf-cache-status: HIT
age: 8880026
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VL9Li0tfsC5silOUHa2dYEnyVsdpi4OZz9t5vDYU%2F1z9zprK7i4UgflYLJ7qFvyZ0OTgGJyw9fX%2FP8CvScml4c1yypLZ0WYdd8TKz6fQBYhlMNWbToQ0sz0ykTg6QwqTmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=46.589, imageryFetch;dur=46.429, cfRequestDuration;dur=9.999990
server: cloudflare
cf-ray: 7758ed6908ee0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.attn.tv/tag/4-latest/unified-tag.js?v=4-latest_263507365a
200 OK 33 kB URL HTTP/2 cdn.attn.tv/tag/4-latest/unified-tag.js?v=4-latest_263507365a
IP
Hash 29bad04ee3828d4c86ced4d6adda1ce6
47d628ff6d567e5fe51fc14ca8fc1e2a9d0c770b
a4411e85753b6ce17400c628a805e427f5bf8d82c17098e55926bd97ad1efbdf
GET /tag/4-latest/unified-tag.js?v=4-latest_263507365a HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Tue, 06 Dec 2022 19:47:59 GMT
x-amz-version-id: KFn4_yzxVNykuDd78HPTSQLlHMLmQ3CL
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Dec 2022 23:47:42 GMT
cache-control: public, max-age=300
etag: W/"b58bfe1c5908b84b0f5a16ef46e1e10b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: haiK8DngKkw4e7lWFjnbG6lYXatkkKup16tbUv8dZ0popjIncKgPZA==
age: 202
X-Firefox-Spdy: h2
cdn.attn.tv/growth-tag-assets/client-configs/nearlynatural.attn.tv.js
200 OK 0 B URL HTTP/2 cdn.attn.tv/growth-tag-assets/client-configs/nearlynatural.attn.tv.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /growth-tag-assets/client-configs/nearlynatural.attn.tv.js HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 0
last-modified: Mon, 17 Dec 2018 20:59:49 GMT
content-encoding:
x-amz-version-id: kGJjc2HxNgGNuk_7UqP1h9o.liqWLb8I
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Dec 2022 20:14:15 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6utU57H-vmcT4e586vjVNMago2lOUcqQx-f-V4fY_gZl1ZH11wgezQ==
age: 13081
X-Firefox-Spdy: h2
cdn.shopify.com/shopifycloud/shopify/assets/shop_qr-1f53501e8ad08edc204b781136461a901672e8838b9408142dbd5469245aed63.js
200 OK 7.6 kB URL HTTP/2 cdn.shopify.com/shopifycloud/shopify/assets/shop_qr-1f53501e8ad08edc204b781136461a901672e8838b9408142dbd5469245aed63.js
IP
File type ASCII text, with very long lines (19843), with no line terminators
Hash 2d1e822670bab8959e58b2c089fc51ff
f2464460f4347c0d9f6c4502fbbf9d111969dcbd
4a3596a25bd0ef9e12d02794d56fc856cb52f0cc8a69c84714d9294b6dde6fcc
GET /shopifycloud/shopify/assets/shop_qr-1f53501e8ad08edc204b781136461a901672e8838b9408142dbd5469245aed63.js HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:01 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/shop_qr-1f53501e8ad08edc204b781136461a901672e8838b9408142dbd5469245aed63.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: a6e74d1f-75da-4c5e-ba38-202c014f936c
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Fri, 14 Oct 2022 12:56:02 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xzj3Sn32RkjKoASJQTsF54aCpikdjaAKlKOtQui%2FeFE0u%2F4vMapvt%2Blb0%2Bmi2uWOPZNIztLjQVmFhJjx2DRo1d6vgYh1k0xfBYelvhKrBwA2WwhebxfDzqb6jt7mV6iDLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=28.554, imageryFetch;dur=28.388, cfRequestDuration;dur=130.000114
server: cloudflare
cf-ray: 7758ed5958af0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
maps.gstatic.com/mapfiles/openhand_8_8.cur
200 OK 326 B URL HTTP/2 maps.gstatic.com/mapfiles/openhand_8_8.cur
IP
File type MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8\012- data
Hash feff9159f56cb2069041d660b484eb07
0d0a08cf25a258511957f357b89d3908f3c5e6e3
7342f390b12f636d14e25f698fc5e38cf6240994dc0c07fefbbb4e78ec4d03c7
GET /mapfiles/openhand_8_8.cur HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/bmp
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 326
date: Tue, 06 Dec 2022 23:51:04 GMT
expires: Tue, 06 Dec 2022 23:51:04 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_7373d.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_7373d.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 905f25a6763488baff0582a11e6d4650
cbf906634f07d5e983cb8f5f30195d24a219ca41
73bf06623dd0515ca31a2f3c352cf6efce03e0ff7e7bf3ae990a19745787deda
GET /i18n/pixel/static/identify_7373d.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Cookie: _ttp=2IYu6jxaza2nHaEGeiQ4eRGnbgG
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20221206132745F774E1DED7BF563B9D05
x-tt-trace-host: 017bcdfb1f342efa6ce7e8ef248837e909b29e38c81383d97aa45a1f344cf919c8a599ec6c025c616e50bcaf3d3e28b0e81315201e77a8c36d9dceb999beae4aa6616a7661fd70d5a724b0816ae855e12b
content-encoding: gzip
content-length: 30877
date: Tue, 06 Dec 2022 23:51:04 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 2625af
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 216b57247770e43296f083ef19e6f927
6e95f95cbb049db2784bb1de73dbfe1092a7eeaa
dc39a42fdcb92d1739ea502535a91e2e18d856bd92e5daf7c81f691a65808243
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Dec 2022 23:51:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 06 Dec 2022 22:26:38 GMT
Expires: Wed, 07 Dec 2022 22:26:38 GMT
ETag: "6e95f95cbb049db2784bb1de73dbfe1092a7eeaa"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash f0b1680e47157c7eed020d868726c5e0
dde51b10e37a754e6fa3fa7462d3882ece7040d0
88c51fed2e4aa5073c1f6d8a37e710a0beb5d384cc1d9cfa885b58582b5b343b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2856
Cache-Control: max-age=128390
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Etag: "638f1cc6-117"
Expires: Thu, 08 Dec 2022 11:30:54 GMT
Last-Modified: Tue, 06 Dec 2022 10:43:18 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://checkout.shopify.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 533830
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
nearlynatural.attn.tv/unrenderedCreative?v=4.16.17&r=&id=2a715587cad5405892d9aa6cb31cc960&pv=1&l=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms
204 No Content 0 B URL HTTP/2 nearlynatural.attn.tv/unrenderedCreative?v=4.16.17&r=&id=2a715587cad5405892d9aa6cb31cc960&pv=1&l=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /unrenderedCreative?v=4.16.17&r=&id=2a715587cad5405892d9aa6cb31cc960&pv=1&l=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms HTTP/1.1
Host: nearlynatural.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.nearlynatural.com
Content-Length: 29
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 06 Dec 2022 23:51:04 GMT
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
x-envoy-upstream-service-time: 12
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7758ed6cd949b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 937
Origin: https://www.nearlynatural.com
Connection: keep-alive
Cookie: _ttp=2IYu6jxaza2nHaEGeiQ4eRGnbgG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20221206235104C28C46BD25DDFF1A4442
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6091d2ba70cbdaa374c438cfb528c66f2f9c299147ff6c7582a77d8e9065a9983b4d3ae32f74b9e6e86284c77edb3e1a0c357991f26df224fe24cd19c038ab9df6952099be38f39804b399123779e95ce6
x-origin-response-time: 16,104.96.220.55
x-akamai-request-id: 677de273.262613
expires: Tue, 06 Dec 2022 23:51:04 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Dec 2022 23:51:04 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-cache-remote: TCP_MISS from a104-96-220-55.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=101, origin; dur=16, inner; dur=11
x-parent-response-time: 114,23.36.79.13
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq
200 OK 29 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq
IP
ASN #20940 Akamai International B.V.
Hash 00d3e72d0b70b2ec94c416775eea7c71
6184aaf9467c153e43546fd6b26287bf9538325b
a7c158c5721e30a82664f7db1ab35a271362713894ebd3ce4b78ce4deffe5491
GET /i18n/pixel/events.js?sdkid=C07E9LNN571TE177PC10&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 2022120623510480217F6CF3A51B142CB6
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf607dfbcf050c6f97af8ed112e7c40d969620b86638f2115876ffa7c9bc3fbb18e9ee4678017a0633c158573d2f69854b0d1992fd37f6a012bc06649a04d9e965a1ab9ff9bca3103f3a9f53c88b4c7bfbee
content-encoding: gzip
content-length: 1147
x-origin-response-time: 7,104.112.235.142
x-akamai-request-id: 99ae4bb.2623f9
expires: Tue, 06 Dec 2022 23:51:04 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Dec 2022 23:51:04 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
set-cookie: _ttp=2IYu6jxaza2nHaEGeiQ4eRGnbgG; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a104-112-235-142.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=98, origin; dur=7, inner; dur=5
x-parent-response-time: 105,23.36.79.13
X-Firefox-Spdy: h2
nearlynatural.attn.tv/d/?attn_vid=2a715587cad5405892d9aa6cb31cc960
200 OK 26 kB URL HTTP/2 nearlynatural.attn.tv/d/?attn_vid=2a715587cad5405892d9aa6cb31cc960
IP
Hash 3c31dbdafe55f1504995ead425aaf1aa
899ed99da84394fdec07fa5dce0433e93194a615
3fc90f5584ca9a7f357de833af780d2715af1ecf54e0a51181afa7c639a614c4
GET /d/?attn_vid=2a715587cad5405892d9aa6cb31cc960 HTTP/1.1
Host: nearlynatural.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:04 GMT
content-type: application/json
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: *
x-envoy-upstream-service-time: 5
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7758ed69ef8cb524-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 937
Origin: https://www.nearlynatural.com
Connection: keep-alive
Cookie: _ttp=2IYu6jxaza2nHaEGeiQ4eRGnbgG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2022120623510425A035F47D9A0414C695
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf607dfbcf050c6f97af8ed112e7c40d9696c2011b7d883864c14af71ddaf9dfc43eb4e0b3828f1332b4c9c2847306ac76243ce320bd5e0479021239ea9e30fd50bd36b4ae4219ea8160d0f491121d4b9e21
x-origin-response-time: 54,104.112.235.157
x-akamai-request-id: 9a9adfc2.26260e
expires: Tue, 06 Dec 2022 23:51:04 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Dec 2022 23:51:04 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-cache-remote: TCP_MISS from a104-112-235-157.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=105, origin; dur=54, inner; dur=15
x-parent-response-time: 156,23.36.79.13
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 971
Origin: https://www.nearlynatural.com
Connection: keep-alive
Cookie: _ttp=2IYu6jxaza2nHaEGeiQ4eRGnbgG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2022120623510455D8DE41CC99DE140B1F
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf607dfbcf050c6f97af8ed112e7c40d9696c2011b7d883864c14af71ddaf9dfc43e54ba6e499fa590517838563878e743ccd371abc37866d04e4a2b36b8872d95af02d2cf0ff2aac16671bacf8b84ffda57
x-origin-response-time: 75,104.112.235.157
x-akamai-request-id: 9a9adffa.262607
expires: Tue, 06 Dec 2022 23:51:04 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Dec 2022 23:51:04 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-cache-remote: TCP_MISS from a104-112-235-157.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=108, origin; dur=75, inner; dur=64
x-parent-response-time: 179,23.36.79.13
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 937
Origin: https://www.nearlynatural.com
Connection: keep-alive
Cookie: _ttp=2IYu6jxaza2nHaEGeiQ4eRGnbgG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20221206235104FC2E854EB94D21153180
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6091d2ba70cbdaa374c438cfb528c66f2ffdc55ad123893c2126d0c92dd25719d2fcd8a021d1bdc8e322be2536ffd9afc706eb07c65ef54041bb2b575552d307f0c2bf790a5b6786fec64efa053263f738
x-origin-response-time: 34,104.96.220.85
x-akamai-request-id: 64012481.262639
expires: Tue, 06 Dec 2022 23:51:04 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Dec 2022 23:51:04 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-cache-remote: TCP_MISS from a104-96-220-85.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=118, origin; dur=34, inner; dur=16
x-parent-response-time: 148,23.36.79.13
X-Firefox-Spdy: h2
d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
200 OK 2.3 kB URL HTTP/2 d3rr3d0n31t48m.cloudfront.net/widget/widget_async.js
IP
Hash b8f8af955cc43cdb980e51ea7098ff1a
f9c3ed87cc9480e6bbe6c5ce7a60290a3644f3b1
3e141d430a8ab70b349672725151d727d86b29ebc067e4a014b05df3ae63242c
GET /widget/widget_async.js HTTP/1.1
Host: d3rr3d0n31t48m.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nearlynatural.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 905
last-modified: Tue, 15 Nov 2022 21:39:30 GMT
content-encoding: gzip
x-amz-meta-mtime: 1668548367.69
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Dec 2022 23:11:23 GMT
cache-control: max-age=3600, public
etag: "8f9a4e574f11ca1ea10db98fd6687660"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hPQOF265DdgU_WTIMZj31KsSNaMnFRL4kMOSeMc2kJTRo_Jw8mSdzA==
age: 2381
X-Firefox-Spdy: h2
cdn-widgetsrepository.yotpo.com/v1/loader/Qa2_Txh_GUAHRQInnnDTPA
200 OK 21 kB URL HTTP/2 cdn-widgetsrepository.yotpo.com/v1/loader/Qa2_Txh_GUAHRQInnnDTPA
IP
Hash 7dc52a577325b3c6abac6025a6224373
a77d169da2f195efb094917668f75c83eff93d06
aa9de03e79152b64c318f9bd9dae85f3ba0a5a79ae6bea0e7bad5fda15cbb792
GET /v1/loader/Qa2_Txh_GUAHRQInnnDTPA HTTP/1.1
Host: cdn-widgetsrepository.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-encoding: gzip
x-ratelimit-remaining-minute: 4999
x-ratelimit-limit-minute: 5000
ratelimit-remaining: 4999
ratelimit-limit: 5000
ratelimit-reset: 56
correlation-id: 00b8114e-a6f8-4709-b5f3-26543f484a7c
x-kong-upstream-latency: 164
x-kong-proxy-latency: 3
content-length: 20873
date: Tue, 06 Dec 2022 23:51:04 GMT
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5006b8e985c5838b7fd2f2b558a65bc4
183ff15e0faedf346305fd6fe1c70c9c7a1eef4a
fcbfec9f5fd0e10d44778c1df64d8612281cd39881cdfd0aa8ca30d13655655a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn-widgetsrepository.yotpo.com/v1/loader/Qa2_Txh_GUAHRQInnnDTPA
200 OK 21 kB URL HTTP/2 cdn-widgetsrepository.yotpo.com/v1/loader/Qa2_Txh_GUAHRQInnnDTPA
IP
Hash afc890d061abaab3350869f397e74ee9
c9fb3ee7546d3f69cdaf8358c6f1cf59b701c85f
9e06ba8c4a9f2f9b7feed5d38242a820b3b7af9a43e8af3809ac74d10bbd77d7
GET /v1/loader/Qa2_Txh_GUAHRQInnnDTPA HTTP/1.1
Host: cdn-widgetsrepository.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-encoding: gzip
x-ratelimit-remaining-minute: 4999
x-ratelimit-limit-minute: 5000
ratelimit-remaining: 4999
ratelimit-limit: 5000
ratelimit-reset: 52
correlation-id: 08d676b2-6c3b-4c5b-a4cc-8112cecc5c30
x-kong-upstream-latency: 115
x-kong-proxy-latency: 3
content-length: 20881
date: Tue, 06 Dec 2022 23:51:04 GMT
vary: Accept-Encoding
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81a7e0ed8b45460991a7d9b719423d48
fa4824b64d5484b955cecebbeea06710ced4fba5
2fb356139722003d5c83566b936968a5ce9ba3756f69ace50a53bea6c1b9f7eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d44205a852cedc47da2373b3542f2ca0
884e5d2d7ef372a86e7edc3f8c1dc63a3b4fbe82
f2adb5b3e4b05ad953d43f483497243ae66c148f2af8f39473ddc6fcf2623bb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5880
Cache-Control: max-age=138970
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Etag: "638f3a4a-1d7"
Expires: Thu, 08 Dec 2022 14:27:14 GMT
Last-Modified: Tue, 06 Dec 2022 12:49:14 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 00:06:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 06 Dec 2022 22:46:55 GMT
expires: Wed, 07 Dec 2022 00:46:55 GMT
cache-control: public, max-age=7200
age: 3849
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 00:06:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663378&cv=11&fst=1670370663378&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&auid=425545270.1670370661&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
200 OK 949 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663378&cv=11&fst=1670370663378&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&auid=425545270.1670370661&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2049), with no line terminators
Hash 159ed26dfca5fcc0e255545bb0bd09d9
76d651180a59146f8620a5d075dfe97f229ee6c9
0534d2b046a00343d883956311059fedf05cbf38b572d3fb0dac2326dd661ba7
GET /pagead/viewthroughconversion/1066970472/?random=1670370663378&cv=11&fst=1670370663378&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&auid=425545270.1670370661&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 949
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 00:06:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663389&cv=11&fst=1670370663389&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&auid=425545270.1670370661&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9121%3Bgoogle_business_vertical%3Dretail%3Bid%3D9121&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663389&cv=11&fst=1670370663389&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&auid=425545270.1670370661&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9121%3Bgoogle_business_vertical%3Dretail%3Bid%3D9121&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2265), with no line terminators
Hash 6acc96686ed5d1b61bd84824ca0c5d60
3585d30ac0e9484266fe79eb372685c630a1f54d
4ff209fa1521d144d2a302c383fe4ba44865fd49901497001567e382bc449b06
GET /pagead/viewthroughconversion/1066970472/?random=1670370663389&cv=11&fst=1670370663389&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&auid=425545270.1670370661&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9121%3Bgoogle_business_vertical%3Dretail%3Bid%3D9121&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1011
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 00:06:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 00:06:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663444&cv=11&fst=1670370663444&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&auid=425545270.1670370661&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9160%3Bgoogle_business_vertical%3Dretail%3Bid%3D9160&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663444&cv=11&fst=1670370663444&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&auid=425545270.1670370661&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9160%3Bgoogle_business_vertical%3Dretail%3Bid%3D9160&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2265), with no line terminators
Hash a14a20d5de641aff905e28ab0022145c
b05c62f27dd40a31991c7e9bc0749a16b82fac44
93b513bab8fbaf18acd0456b35d9b40a53116ea2b5d70aca9fbe25885e04310c
GET /pagead/viewthroughconversion/1066970472/?random=1670370663444&cv=11&fst=1670370663444&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&auid=425545270.1670370661&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9160%3Bgoogle_business_vertical%3Dretail%3Bid%3D9160&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1012
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 00:06:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: /mX0yxTtK8yGOGozu7w99oB+6KLEPSMumgtsHhMZWU5yyclPcPXrqEipGjprPubaUhKLbkBs4AeHrWLpMcCB1g==
content-length: 27340
x-fb-trip-id: 1679558926
date: Tue, 06 Dec 2022 23:51:04 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663431&cv=11&fst=1670370663431&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&auid=425545270.1670370661&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1066970472/?random=1670370663431&cv=11&fst=1670370663431&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&auid=425545270.1670370661&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4
IP
Hash cf8b9a6432f2660eb7c5820ec0d48be4
24642b86482deb3109be52b7fb036a0c3aaa1687
69905bfe5428b50e121710d4b1556d64ff2a246664af2aec56aa7eca3bd02f30
GET /pagead/viewthroughconversion/1066970472/?random=1670370663431&cv=11&fst=1670370663431&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&auid=425545270.1670370661&data=event%3Ddl_add_to_cart&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 949
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 07-Dec-2022 00:06:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash bdf30afe074d97f0992c1c98872bf80e
48e25646ddec69bb3e3deabfd01483a32ec948f8
08fd08fb4b9c3de59c35f19299bf56964388890563a5517562b093ba8c9020dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=112572
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Etag: "638eea24-116"
Expires: Thu, 08 Dec 2022 07:07:16 GMT
Last-Modified: Tue, 06 Dec 2022 07:07:16 GMT
Server: nginx
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d44205a852cedc47da2373b3542f2ca0
884e5d2d7ef372a86e7edc3f8c1dc63a3b4fbe82
f2adb5b3e4b05ad953d43f483497243ae66c148f2af8f39473ddc6fcf2623bb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4140
Cache-Control: max-age=137230
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Etag: "638f3a4a-1d7"
Expires: Thu, 08 Dec 2022 13:58:14 GMT
Last-Modified: Tue, 06 Dec 2022 12:49:14 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash cf2e6507805e1a10d487a74829cad86c
e9070249c7b3aefe3c4693b51fedb09dc20a8dce
72c5e49c136edcb6903d4740889309b995d3ab92a06157375c34cb74c49ea2ff
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Dec 2022 23:51:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 06 Dec 2022 20:40:54 GMT
Expires: Wed, 07 Dec 2022 20:40:54 GMT
ETag: "e9070249c7b3aefe3c4693b51fedb09dc20a8dce"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash bdf30afe074d97f0992c1c98872bf80e
48e25646ddec69bb3e3deabfd01483a32ec948f8
08fd08fb4b9c3de59c35f19299bf56964388890563a5517562b093ba8c9020dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=112572
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:04 GMT
Etag: "638eea24-116"
Expires: Thu, 08 Dec 2022 07:07:16 GMT
Last-Modified: Tue, 06 Dec 2022 07:07:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278
s.pinimg.com/ct/core.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1146), with no line terminators
Hash 8d9d0550c915347e312e24f00d311e50
cb44712b22cb011b759da4e741b543238839c735
57d73d188a6162bec272876156addbd7b02a2c6941c45653b8d3453e998e0b5b
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "8d9d0550c915347e312e24f00d311e50"
cache-control: max-age=7200
accept-ranges: bytes
content-type: application/javascript
content-length: 1146
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash cf2e6507805e1a10d487a74829cad86c
e9070249c7b3aefe3c4693b51fedb09dc20a8dce
72c5e49c136edcb6903d4740889309b995d3ab92a06157375c34cb74c49ea2ff
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Dec 2022 23:51:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 06 Dec 2022 20:40:54 GMT
Expires: Wed, 07 Dec 2022 20:40:54 GMT
ETag: "e9070249c7b3aefe3c4693b51fedb09dc20a8dce"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1e181f9ed09fb72bf80535f26ad7b91a
df966a15abb5b870e71527d73592f7d977011eb2
741e73d12b0fa5e76d9b4a78e8e70dbe307e059a0018aca245da0db44c5a5958
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash c11451f004cb0c81c7040847b65b8783
35fa2d688c8e719a009ae34a575cf5f1adbac91a
4b3665319a92d57ff5afadf2519fb8c1a0b4d0436e7ba313c66f6b00c7a7cfc5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 23:51:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 03:37:45 GMT
Expires: Mon, 12 Dec 2022 03:37:44 GMT
Etag: "35fa2d688c8e719a009ae34a575cf5f1adbac91a"
Cache-Control: max-age=444998,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7758ed713e6ab511-OSL
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-321745-2&cid=1648711543.1670370661&jid=291582683&gjid=598168123&_gid=208354377.1670370665&_u=YADAAEAKAAAAACAEK~&z=589193103
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-321745-2&cid=1648711543.1670370661&jid=291582683&gjid=598168123&_gid=208354377.1670370665&_u=YADAAEAKAAAAACAEK~&z=589193103
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-321745-2&cid=1648711543.1670370661&jid=291582683&gjid=598168123&_gid=208354377.1670370665&_u=YADAAEAKAAAAACAEK~&z=589193103 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Content-Type: text/plain
Content-Length: 0
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.nearlynatural.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 06 Dec 2022 23:51:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1e181f9ed09fb72bf80535f26ad7b91a
df966a15abb5b870e71527d73592f7d977011eb2
741e73d12b0fa5e76d9b4a78e8e70dbe307e059a0018aca245da0db44c5a5958
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d3rr3d0n31t48m.cloudfront.net/widget/triggerRunner.js?v=c317b78
200 OK 3.8 kB URL HTTP/2 d3rr3d0n31t48m.cloudfront.net/widget/triggerRunner.js?v=c317b78
IP
File type ASCII text, with very long lines (583)
Hash 6f8d2d39d5726872bebba803a41bb024
2b7c6aa4941537ae52e1f32bfe642dfd440f5cbc
1de43985c42cfd2c6d39a3b7b30957bc1dde1208bd5bbbc94695d4c357383a01
GET /widget/triggerRunner.js?v=c317b78 HTTP/1.1
Host: d3rr3d0n31t48m.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 3772
date: Tue, 15 Nov 2022 21:40:34 GMT
last-modified: Tue, 15 Nov 2022 21:39:30 GMT
etag: "6f8d2d39d5726872bebba803a41bb024"
cache-control: max-age=2592000, public
content-encoding: gzip
x-amz-meta-mtime: 1668548367.68
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s4rv6-3sGrk0yMGeeqtmCj-X_TNdbg9CuR2UiWak3GgTivGiGUOTDw==
age: 1822232
X-Firefox-Spdy: h2
cdn-widget-assets.yotpo.com/widgets-initializer/app.v0.0.50-3655.js
200 OK 9.0 kB URL HTTP/2 cdn-widget-assets.yotpo.com/widgets-initializer/app.v0.0.50-3655.js
IP
File type ASCII text, with very long lines (19548)
Hash 745e9cee84eba7f5391e4d07c1b9109a
d517b43b4d2fc43e9d9ea7915736b51569743dda
85d10274b8ddbc1b11891a08f15acdbc954680ee7cd50489129a319037d06d2c
GET /widgets-initializer/app.v0.0.50-3655.js HTTP/1.1
Host: cdn-widget-assets.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: +MNuRwacaKsh36EEbeVWUMqZEXsr5GhsTO7IGAGYOt+4DiDj5nwpuKkDgnHvSZnkZtH8kIwmOiA=
x-amz-request-id: YVV33TRMNBH45ZBY
last-modified: Mon, 07 Nov 2022 14:26:22 GMT
etag: "acdb5b11f5c91bfca24783350ba5100a"
x-amz-meta-s3cmd-attrs: atime:1667831180/ctime:1667831180/gid:117/gname:jenkins/md5:acdb5b11f5c91bfca24783350ba5100a/mode:33188/mtime:1667831180/uid:110/uname:jenkins
x-amz-version-id: _Cyg0oP0YJIII7Kp3cBkGJlEd89gmhKQ
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=28999763
date: Tue, 06 Dec 2022 23:51:05 GMT
content-length: 8988
X-Firefox-Spdy: h2
cdn.justuno.com/vck.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1134)
Hash e792a4ce79e17bb2a0823cdb48989736
502b9d3f7646e1534f77db812f9b41e14f1db6bc
a0b4ddd6a2937582b2affe71756afc3d6e968f79416ff9e93f5183eb80cf2a06
GET /vck.js HTTP/1.1
Host: cdn.justuno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:04 GMT
content-type: application/javascript
cache-control: public, max-age=691200
cf-bgj: minify
cf-polished: origSize=3165
etag: W/"0d90f75705633071cb4330dbccfe579a"
last-modified: Thu, 12 Nov 2020 22:18:40 GMT
x-77-cache: HIT
x-77-nzt: AblMCQrXoxv/O2YGAA==
x-77-nzt-ray: OTSkTYit/k4=
x-77-pop: stockholmSE
x-age: 419387
x-cache: HIT
x-amz-id-2: Yd1SgHeWJFFvfHjYXN8XR07jx2w5S6/zr36Uc0rE5/AogFoCbhwaTIV0drJxTbc3OahIQHQgPXo=
x-amz-request-id: 7CW5AFDR3HGJ2KVK
x-amz-version-id: IStAkkpAXub6mGXsU7R_eEc9Tjbt5OG9
cf-cache-status: HIT
age: 1349
expires: Wed, 14 Dec 2022 23:51:04 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7758ed6fed13b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
35.85.84.151/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash 452fd3f46f682999ffc21e6fa4987102
a7e736aa3c413b118e69257d889a4067a2db4529
28167e1c2e9897236c07e6b27c11fc9790711637b7292d9091390b1558ba5e0a
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 35.85.84.151
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 06 Dec 2022 23:51:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1066970472/?random=1670370663431&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=2688878150&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1670370663431&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=2688878150&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1670370663431&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=2688878150&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1670370663394&cv=11&fst=1670370663394&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1066970472/?random=1670370663444&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9160%3Bgoogle_business_vertical%3Dretail%3Bid%3D9160&fmt=3&is_vtc=1&random=147066969&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1670370663444&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9160%3Bgoogle_business_vertical%3Dretail%3Bid%3D9160&fmt=3&is_vtc=1&random=147066969&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1670370663444&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9160%3Bgoogle_business_vertical%3Dretail%3Bid%3D9160&fmt=3&is_vtc=1&random=147066969&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.pinimg.com/ct/lib/main.9a94ee76.js
200 OK 21 kB URL HTTP/2 s.pinimg.com/ct/lib/main.9a94ee76.js
IP
File type Unicode text, UTF-8 text, with very long lines (59858), with no line terminators
Hash e43867aadc515024dd460d8611098a12
c4fd1b2ace2f8a96a38e4b4996be8d7c46fdfd3f
76d528cb411bf6ff7fd77619aa507bec3bdf7f02063add1d9fe9009088f78d98
GET /ct/lib/main.9a94ee76.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "e43867aadc515024dd460d8611098a12"
content-encoding: gzip
accept-ranges: bytes
content-type: application/javascript
content-length: 20728
cache-control: max-age=1209600
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1670370663942&cv=11&fst=1670370663942&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=P50UCNWJjqMCEOja4vwD&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5>m_ee=1&auid=425545270.1670370661&data=event%3Dpage_view%3Bpage_path%3D%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1066970472/?random=1670370663447&cv=11&fst=1670370663447&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=Cn-FCN6JjqMCEOja4vwD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=116.21&bttype=purchase&auid=425545270.1670370661&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1066970472/?random=1670370663378&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=3824387433&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1670370663378&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=3824387433&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1670370663378&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&data=event%3Ddl_add_to_cart&fmt=3&is_vtc=1&random=3824387433&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1066970472/?random=1670370663389&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9121%3Bgoogle_business_vertical%3Dretail%3Bid%3D9121&fmt=3&is_vtc=1&random=1866215907&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1066970472/?random=1670370663389&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9121%3Bgoogle_business_vertical%3Dretail%3Bid%3D9121&fmt=3&is_vtc=1&random=1866215907&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1066970472/?random=1670370663389&cv=11&fst=1670367600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&tiba=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&value=63.69&data=event%3Dadd_to_cart%3Bvisitor_type%3Dguest%3Becomm_prodid%3D9121%3Bgoogle_business_vertical%3Dretail%3Bid%3D9121&fmt=3&is_vtc=1&random=1866215907&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 23:51:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.yimg.com/wi/config/10058070.json
200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10058070.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10058070.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: SEBNR3VDN6TTNM97
x-amz-id-2: cxDg4gAtVufIjccZMYhwIBAoAwxWHar+LFoxwdcnXa0DrrBpLrmp0ey68x0sHaj8l1PfCN9T0Nw=
content-type: application/json
date: Tue, 06 Dec 2022 23:51:05 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 0
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
d3rr3d0n31t48m.cloudfront.net/widget/widget.js?v=90709db
200 OK 48 kB URL HTTP/2 d3rr3d0n31t48m.cloudfront.net/widget/widget.js?v=90709db
IP
File type ASCII text, with very long lines (778)
Hash db6577d43efa27de385813e4eb9bf7a8
8a6816a745cf7445b211d08c7a0741e1e3e33e93
e946a88e3447423c1cea32a407f7f060ce07bf2947c2e1c56ee6e3041bced35f
GET /widget/widget.js?v=90709db HTTP/1.1
Host: d3rr3d0n31t48m.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 47685
date: Tue, 15 Nov 2022 21:40:33 GMT
last-modified: Tue, 15 Nov 2022 21:39:31 GMT
etag: "db6577d43efa27de385813e4eb9bf7a8"
cache-control: max-age=2592000, public
content-encoding: gzip
x-amz-meta-mtime: 1668548366.14
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WXVGfHoowe_oggisIB6Y_AhX6kYQp9Q0FNa-HHFcUZm7ytgQHjF9PQ==
age: 1822233
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d3a8e23884501350f4d1adb973bc65f3
8f8cfcca2019b4bfae6658ddb062754af15ac385
2bd50e036e2b1a12c0306eed6405a1fe8730a0d8c7b6935822d35f0ed304600e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163347
Date: Tue, 06 Dec 2022 23:51:05 GMT
Etag: "638fa679-1d7"
Expires: Thu, 08 Dec 2022 21:13:32 GMT
Last-Modified: Tue, 06 Dec 2022 20:30:49 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WdHMKfxbzEtgYxtcRTW0rsovEH-wcwhbAl0eWRE1_6f_CzhFKOetzg==
Age: 2563
ct.pinterest.com/user/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%7D&cb=1670370665422&dep=2%2CPAGE_LOAD
200 OK 377 B URL HTTP/2 ct.pinterest.com/user/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%7D&cb=1670370665422&dep=2%2CPAGE_LOAD
IP
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash f6314a3333f750a090b7d16565b63b62
b071e68a3c67319a26ff36cd8a2758cc69e72377
341b6a8e9fc8f0cd98feb8442e1c01f066cf2b220749842c5be46d65786c3085
GET /user/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%7D&cb=1670370665422&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVlUWXlObVV6TkdNdE5HSXlOUzAwTnpBd0xUbGpOMlV0TlRJeE9XTXhaamhoT0dKbQ
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.nearlynatural.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 377
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1646236608013888
date: Tue, 06 Dec 2022 23:51:05 GMT
vary: Accept-Encoding
akamai-grn: 0.540a655f.1670370665.33d0ecb4
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/user/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22e9d9b184-DBDE-412D-E449-233C312A9620%22%7D&tid=2621045558050&cb=1670370665424&dep=5%2CEVENT_TAGS_ABSENT
200 OK 377 B URL HTTP/2 ct.pinterest.com/user/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22e9d9b184-DBDE-412D-E449-233C312A9620%22%7D&tid=2621045558050&cb=1670370665424&dep=5%2CEVENT_TAGS_ABSENT
IP
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash f6314a3333f750a090b7d16565b63b62
b071e68a3c67319a26ff36cd8a2758cc69e72377
341b6a8e9fc8f0cd98feb8442e1c01f066cf2b220749842c5be46d65786c3085
GET /user/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22e9d9b184-DBDE-412D-E449-233C312A9620%22%7D&tid=2621045558050&cb=1670370665424&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU9HTTRaak15Tm1RdFpEaGhNaTAwWTJGbUxUZ3lOMlF0TXpWbE9XTTRabVJrWWpnNQ
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.nearlynatural.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 377
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1565613060818829
date: Tue, 06 Dec 2022 23:51:05 GMT
vary: Accept-Encoding
akamai-grn: 0.540a655f.1670370665.33d0ecb5
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%221cb9bbd7-38b2-42b6-97fe-3d3c64c20308%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1670370665424
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%221cb9bbd7-38b2-42b6-97fe-3d3c64c20308%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1670370665424
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2621045558050&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%221cb9bbd7-38b2-42b6-97fe-3d3c64c20308%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1670370665424 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 3046794129840341
date: Tue, 06 Dec 2022 23:51:05 GMT
akamai-grn: 0.540a655f.1670370665.33d0ecc4
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1988548864489894&ev=PageView&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&rl=&if=false&ts=1670370665459&sw=1280&sh=1024&ud[external_id]=0eff6a14ce3c09f097183855cbc9aff55e9832e0db7f842f442d7f3f74eef92b&udff[em]=69985e58c6be11d76a4ecf39d296aa6322926cc0effe16952c9a5552ac1012e8&udff[fn]=27511e620b42e8fbec37edf4bfc765d490f326137a40a51837184f61b8aae39f&udff[ln]=4c2c99819a510dbb94a2b592b7217574dd6bc376b1f679312057a1c0d2c6b4cb&v=2.9.89&r=stable&ec=0&o=2078&fbp=fb.1.1670370665459.480479808&it=1670370664819&coo=false&eid=162d55d5-306a-4fdf-ba37-b87c314e9baf&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1988548864489894&ev=PageView&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&rl=&if=false&ts=1670370665459&sw=1280&sh=1024&ud[external_id]=0eff6a14ce3c09f097183855cbc9aff55e9832e0db7f842f442d7f3f74eef92b&udff[em]=69985e58c6be11d76a4ecf39d296aa6322926cc0effe16952c9a5552ac1012e8&udff[fn]=27511e620b42e8fbec37edf4bfc765d490f326137a40a51837184f61b8aae39f&udff[ln]=4c2c99819a510dbb94a2b592b7217574dd6bc376b1f679312057a1c0d2c6b4cb&v=2.9.89&r=stable&ec=0&o=2078&fbp=fb.1.1670370665459.480479808&it=1670370664819&coo=false&eid=162d55d5-306a-4fdf-ba37-b87c314e9baf&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1988548864489894&ev=PageView&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&rl=&if=false&ts=1670370665459&sw=1280&sh=1024&ud[external_id]=0eff6a14ce3c09f097183855cbc9aff55e9832e0db7f842f442d7f3f74eef92b&udff[em]=69985e58c6be11d76a4ecf39d296aa6322926cc0effe16952c9a5552ac1012e8&udff[fn]=27511e620b42e8fbec37edf4bfc765d490f326137a40a51837184f61b8aae39f&udff[ln]=4c2c99819a510dbb94a2b592b7217574dd6bc376b1f679312057a1c0d2c6b4cb&v=2.9.89&r=stable&ec=0&o=2078&fbp=fb.1.1670370665459.480479808&it=1670370664819&coo=false&eid=162d55d5-306a-4fdf-ba37-b87c314e9baf&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 06 Dec 2022 23:51:05 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&rl=&if=false&ts=1670370665464&cd[content_ids]=3246518534244&cd[content_name]=82%E2%80%9D%20Artificial%20Olive%20Tree&cd[content_type]=product_group&cd[value]=116.21&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=0eff6a14ce3c09f097183855cbc9aff55e9832e0db7f842f442d7f3f74eef92b&udff[em]=69985e58c6be11d76a4ecf39d296aa6322926cc0effe16952c9a5552ac1012e8&udff[fn]=27511e620b42e8fbec37edf4bfc765d490f326137a40a51837184f61b8aae39f&udff[ln]=4c2c99819a510dbb94a2b592b7217574dd6bc376b1f679312057a1c0d2c6b4cb&v=2.9.89&r=stable&ec=2&o=2078&fbp=fb.1.1670370665459.480479808&it=1670370664819&coo=false&eid=f7719ad5-39c1-44e1-ae22-ced6d31d5fa4&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&rl=&if=false&ts=1670370665464&cd[content_ids]=3246518534244&cd[content_name]=82%E2%80%9D%20Artificial%20Olive%20Tree&cd[content_type]=product_group&cd[value]=116.21&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=0eff6a14ce3c09f097183855cbc9aff55e9832e0db7f842f442d7f3f74eef92b&udff[em]=69985e58c6be11d76a4ecf39d296aa6322926cc0effe16952c9a5552ac1012e8&udff[fn]=27511e620b42e8fbec37edf4bfc765d490f326137a40a51837184f61b8aae39f&udff[ln]=4c2c99819a510dbb94a2b592b7217574dd6bc376b1f679312057a1c0d2c6b4cb&v=2.9.89&r=stable&ec=2&o=2078&fbp=fb.1.1670370665459.480479808&it=1670370664819&coo=false&eid=f7719ad5-39c1-44e1-ae22-ced6d31d5fa4&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&rl=&if=false&ts=1670370665464&cd[content_ids]=3246518534244&cd[content_name]=82%E2%80%9D%20Artificial%20Olive%20Tree&cd[content_type]=product_group&cd[value]=116.21&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=0eff6a14ce3c09f097183855cbc9aff55e9832e0db7f842f442d7f3f74eef92b&udff[em]=69985e58c6be11d76a4ecf39d296aa6322926cc0effe16952c9a5552ac1012e8&udff[fn]=27511e620b42e8fbec37edf4bfc765d490f326137a40a51837184f61b8aae39f&udff[ln]=4c2c99819a510dbb94a2b592b7217574dd6bc376b1f679312057a1c0d2c6b4cb&v=2.9.89&r=stable&ec=2&o=2078&fbp=fb.1.1670370665459.480479808&it=1670370664819&coo=false&eid=f7719ad5-39c1-44e1-ae22-ced6d31d5fa4&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 06 Dec 2022 23:51:05 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&rl=&if=false&ts=1670370665462&cd[content_ids]=3247325413476&cd[content_name]=54%E2%80%9D%20Fiddle%20Leaf%20Artificial%20Tree%20(Real%20Touch)&cd[content_type]=product_group&cd[value]=63.69&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=0eff6a14ce3c09f097183855cbc9aff55e9832e0db7f842f442d7f3f74eef92b&udff[em]=69985e58c6be11d76a4ecf39d296aa6322926cc0effe16952c9a5552ac1012e8&udff[fn]=27511e620b42e8fbec37edf4bfc765d490f326137a40a51837184f61b8aae39f&udff[ln]=4c2c99819a510dbb94a2b592b7217574dd6bc376b1f679312057a1c0d2c6b4cb&v=2.9.89&r=stable&ec=1&o=2078&fbp=fb.1.1670370665459.480479808&it=1670370664819&coo=false&eid=6c50f268-ea14-47e9-8896-d52062c5d04e&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&rl=&if=false&ts=1670370665462&cd[content_ids]=3247325413476&cd[content_name]=54%E2%80%9D%20Fiddle%20Leaf%20Artificial%20Tree%20(Real%20Touch)&cd[content_type]=product_group&cd[value]=63.69&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=0eff6a14ce3c09f097183855cbc9aff55e9832e0db7f842f442d7f3f74eef92b&udff[em]=69985e58c6be11d76a4ecf39d296aa6322926cc0effe16952c9a5552ac1012e8&udff[fn]=27511e620b42e8fbec37edf4bfc765d490f326137a40a51837184f61b8aae39f&udff[ln]=4c2c99819a510dbb94a2b592b7217574dd6bc376b1f679312057a1c0d2c6b4cb&v=2.9.89&r=stable&ec=1&o=2078&fbp=fb.1.1670370665459.480479808&it=1670370664819&coo=false&eid=6c50f268-ea14-47e9-8896-d52062c5d04e&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1988548864489894&ev=AddToCart&dl=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&rl=&if=false&ts=1670370665462&cd[content_ids]=3247325413476&cd[content_name]=54%E2%80%9D%20Fiddle%20Leaf%20Artificial%20Tree%20(Real%20Touch)&cd[content_type]=product_group&cd[value]=63.69&cd[content_category]=&cd[currency]=USD&sw=1280&sh=1024&ud[external_id]=0eff6a14ce3c09f097183855cbc9aff55e9832e0db7f842f442d7f3f74eef92b&udff[em]=69985e58c6be11d76a4ecf39d296aa6322926cc0effe16952c9a5552ac1012e8&udff[fn]=27511e620b42e8fbec37edf4bfc765d490f326137a40a51837184f61b8aae39f&udff[ln]=4c2c99819a510dbb94a2b592b7217574dd6bc376b1f679312057a1c0d2c6b4cb&v=2.9.89&r=stable&ec=1&o=2078&fbp=fb.1.1670370665459.480479808&it=1670370664819&coo=false&eid=6c50f268-ea14-47e9-8896-d52062c5d04e&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 06 Dec 2022 23:51:05 GMT
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2006%20Dec%202022%2023%3A51%3A05%20GMT&n=0&b=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&.yp=10058070&f=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2006%20Dec%202022%2023%3A51%3A05%20GMT&n=0&b=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&.yp=10058070&f=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Tue%2C%2006%20Dec%202022%2023%3A51%3A05%20GMT&n=0&b=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&.yp=10058070&f=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:05 GMT
expires: Tue, 06 Dec 2022 23:51:05 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBGnVj2MCECdHEnwi-jgg6HbTsICWcRcFEgEBAQEmkWOZYwAAAAAA_eMAAA&S=AQAAAvefoX--ffsA5r1W-Wtluqc; Expires=Thu, 7 Dec 2023 05:51:05 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22e9d9b184-DBDE-412D-E449-233C312A9620%22%7D&tid=2621045558050&cb=1670370665704&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%221cb9bbd7-38b2-42b6-97fe-3d3c64c20308%22%2C%22pin_unauth%22%3A%22dWlkPVlUWXlObVV6TkdNdE5HSXlOUzAwTnpBd0xUbGpOMlV0TlRJeE9XTXhaamhoT0dKbQ%22%2C%22aem_eligible_list%22%3A%5B%22ct%22%2C%22ph%22%2C%22country%22%5D%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22e9d9b184-DBDE-412D-E449-233C312A9620%22%7D&tid=2621045558050&cb=1670370665704&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%221cb9bbd7-38b2-42b6-97fe-3d3c64c20308%22%2C%22pin_unauth%22%3A%22dWlkPVlUWXlObVV6TkdNdE5HSXlOUzAwTnpBd0xUbGpOMlV0TlRJeE9XTXhaamhoT0dKbQ%22%2C%22aem_eligible_list%22%3A%5B%22ct%22%2C%22ph%22%2C%22country%22%5D%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=PageVisit&ed=%7B%22np%22%3A%22shopify%22%2C%22eventID%22%3A%22e9d9b184-DBDE-412D-E449-233C312A9620%22%7D&tid=2621045558050&cb=1670370665704&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22shopify%22%2C%22shopify_y%22%3A%221cb9bbd7-38b2-42b6-97fe-3d3c64c20308%22%2C%22pin_unauth%22%3A%22dWlkPVlUWXlObVV6TkdNdE5HSXlOUzAwTnpBd0xUbGpOMlV0TlRJeE9XTXhaamhoT0dKbQ%22%2C%22aem_eligible_list%22%3A%5B%22ct%22%2C%22ph%22%2C%22country%22%5D%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 1131734280812168
date: Tue, 06 Dec 2022 23:51:06 GMT
set-cookie: _pinterest_ct_ua="TWc9PSZQNUNRNnY4c0NvbVpzQkw1SURXdVdneTQzbVlIRG9ob043cWU0RStGa3VabWZ1WDgzUXcwZExvcmRvQkRPdmpLTjFnYmF4Q0dSQWhGUDN6R2tkNUhxQktjUGREdmFYTzA0VVpxWXE2UmVVTT0meVgxWmppUkxCYjR1MDZ3UUhwcW11UHhzejRzPQ=="; Expires=Wed, 06 Dec 2023 23:51:06 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
akamai-grn: 0.540a655f.1670370666.33d0ed0b
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
px.mountain.com/st?ga_tracking_id=UA-321745-2&ga_client_id=1648711543.1670370661&shpt=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-321745-2%22%2C%22ga_client_id%22%3A%221648711543.1670370661%22%2C%22shpt%22%3A%22Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout%22%2C%22dcm_cid%22%3A%221670370661.1%22%2C%22dcm_gid%22%3A%22208354377.1670370665%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1670370661.1&dcm_gid=208354377.1670370665&dxver=4.0.0&shaid=32489&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&cb=36856005769167944term%3Dvalue&shadditional=googletagmanager%3Dtrue%2Cshopify%3Dtrue%2Cga4%3Dtrue%2Csh_conversion%3DSHBLOCK&shoamt=256.99&shoid=370693&shpc=
200 OK 1.2 kB URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-321745-2&ga_client_id=1648711543.1670370661&shpt=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-321745-2%22%2C%22ga_client_id%22%3A%221648711543.1670370661%22%2C%22shpt%22%3A%22Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout%22%2C%22dcm_cid%22%3A%221670370661.1%22%2C%22dcm_gid%22%3A%22208354377.1670370665%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1670370661.1&dcm_gid=208354377.1670370665&dxver=4.0.0&shaid=32489&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&cb=36856005769167944term%3Dvalue&shadditional=googletagmanager%3Dtrue%2Cshopify%3Dtrue%2Cga4%3Dtrue%2Csh_conversion%3DSHBLOCK&shoamt=256.99&shoid=370693&shpc=
IP
File type ASCII text, with very long lines (2113)
Hash 77f0ec4abd2906194c7111abf2e765ad
f864b5e651120a4153dd994105f5da4c9c1cde42
1c4eeb6ceda196b749ab1457e349160b3706121f805fb1bf9e5cf55fa81c5489
GET /st?ga_tracking_id=UA-321745-2&ga_client_id=1648711543.1670370661&shpt=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-321745-2%22%2C%22ga_client_id%22%3A%221648711543.1670370661%22%2C%22shpt%22%3A%22Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout%22%2C%22dcm_cid%22%3A%221670370661.1%22%2C%22dcm_gid%22%3A%22208354377.1670370665%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1670370661.1&dcm_gid=208354377.1670370665&dxver=4.0.0&shaid=32489&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&cb=36856005769167944term%3Dvalue&shadditional=googletagmanager%3Dtrue%2Cshopify%3Dtrue%2Cga4%3Dtrue%2Csh_conversion%3DSHBLOCK&shoamt=256.99&shoid=370693&shpc= HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 06 Dec 2022 23:51:06 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=d9b287c1-75c0-11ed-86b0-8fa438cbe7fc;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
gs.mountain.com/gs
200 OK 31 kB IP
Hash fc5c219a760371df80fe8f753a60d560
bc5311f6be6d6a3624fd92fd09a9812cc8d4229e
900d060358108619dc6394a7cd22a842b6121b76a60f09a1dc2624a287b35d95
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Cookie: guid=d9b287c1-75c0-11ed-86b0-8fa438cbe7fc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 06 Dec 2022 23:51:07 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
dev.visualwebsiteoptimizer.com/j.php?a=370106&u=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&r=0.4906436946122824
200 OK 0 B URL HTTP/2 dev.visualwebsiteoptimizer.com/j.php?a=370106&u=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&r=0.4906436946122824
IP
GET /j.php?a=370106&u=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&r=0.4906436946122824 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:04 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
cache-control: public, max-age=0, no-cache, must-revalidate
server: gams1
timing-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
px.mountain.com/st?ga_tracking_id=UA-321745-2&ga_client_id=1648711543.1670370661&shpt=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-321745-2%22%2C%22ga_client_id%22%3A%221648711543.1670370661%22%2C%22shpt%22%3A%22Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout%22%2C%22dcm_cid%22%3A%221670370661.1%22%2C%22dcm_gid%22%3A%22208354377.1670370665%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1670370661.1&dcm_gid=208354377.1670370665&dxver=4.0.0&shaid=32489&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&shadditional=googletagmanager%3Dtrue%2Cshopify%3Dtrue%2Cga4%3Dtrue%2Csh_conversion%3DSHBLOCK&shoamt=256.99&shoid=370693&shpc=&cb=1670370666488478&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1670370667267
200 OK 0 B URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-321745-2&ga_client_id=1648711543.1670370661&shpt=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-321745-2%22%2C%22ga_client_id%22%3A%221648711543.1670370661%22%2C%22shpt%22%3A%22Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout%22%2C%22dcm_cid%22%3A%221670370661.1%22%2C%22dcm_gid%22%3A%22208354377.1670370665%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1670370661.1&dcm_gid=208354377.1670370665&dxver=4.0.0&shaid=32489&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&shadditional=googletagmanager%3Dtrue%2Cshopify%3Dtrue%2Cga4%3Dtrue%2Csh_conversion%3DSHBLOCK&shoamt=256.99&shoid=370693&shpc=&cb=1670370666488478&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1670370667267
IP
GET /st?ga_tracking_id=UA-321745-2&ga_client_id=1648711543.1670370661&shpt=Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-321745-2%22%2C%22ga_client_id%22%3A%221648711543.1670370661%22%2C%22shpt%22%3A%22Thank%20you%20Preston!%20-%20Nearly%20Natural%20-%20Checkout%22%2C%22dcm_cid%22%3A%221670370661.1%22%2C%22dcm_gid%22%3A%22208354377.1670370665%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A3%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1670370661.1&dcm_gid=208354377.1670370665&dxver=4.0.0&shaid=32489&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&shadditional=googletagmanager%3Dtrue%2Cshopify%3Dtrue%2Cga4%3Dtrue%2Csh_conversion%3DSHBLOCK&shoamt=256.99&shoid=370693&shpc=&cb=1670370666488478&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1670370667267 HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Cookie: guid=d9b287c1-75c0-11ed-86b0-8fa438cbe7fc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 06 Dec 2022 23:51:07 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: tt="H4sIAAAAAAAAAKtW8guKNzYysbCMNzK3NFayMtBRKlOyMtJRggpaGFsoWRmamRsYmxuYmZlbmpnpIGkByxrUAgDQtnDCRgAAAA==";Domain=px.mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
rt="MzI0ODk6MTY3MDM3MDY2Nw==";Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=d9b287c1-75c0-11ed-86b0-8fa438cbe7fc;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
www.nearlynatural.com/10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5
200 OK 0 B URL HTTP/2 www.nearlynatural.com/10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5
IP
GET /10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5 HTTP/1.1
Host: www.nearlynatural.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: order=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaEpJaVZqT1dSaE56UXlOall5WkdReU56bGhOVFk1WWpNNU1tWTRaamsxWTJRMk9RWTZCa1ZVIiwiZXhwIjoiMjAyMi0xMi0yN1QyMzo1MDo1OS41MDhaIiwicHVyIjoiY29va2llLm9yZGVyIn19--aad20de744e4c832b9e508b2d04d8497739d9887; _y=1cb9bbd7-38b2-42b6-97fe-3d3c64c20308; _s=27845634-06b9-4007-8fd3-228900cb7af0; _shopify_y=1cb9bbd7-38b2-42b6-97fe-3d3c64c20308; _shopify_s=27845634-06b9-4007-8fd3-228900cb7af0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:00 GMT
content-type: text/html; charset=utf-8
x-sorting-hat-podid: 82
x-sorting-hat-shopid: 10894606436
vary: Accept-Encoding
x-frame-options: DENY
x-shopid: 10894606436
x-shardid: 82
x-robots-tag: none
referrer-policy: origin-when-cross-origin
content-language: en-US
cache-control: no-cache
strict-transport-security: max-age=7889238
set-cookie: _secure_session_id=adc8d1de2f683c26841a2a4ed54dffcb; path=/; expires=Wed, 07 Dec 2022 23:51:00 GMT; secure; HttpOnly
_orig_referrer=; Expires=Tue, 20-Dec-22 23:51:00 GMT; Domain=nearlynatural.com; Path=/; HttpOnly; SameSite=Lax
_landing_page=%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5; Expires=Tue, 20-Dec-22 23:51:00 GMT; Domain=nearlynatural.com; Path=/; HttpOnly; SameSite=Lax
_y=1cb9bbd7-38b2-42b6-97fe-3d3c64c20308; Expires=Wed, 06-Dec-23 23:51:00 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_s=27845634-06b9-4007-8fd3-228900cb7af0; Expires=Wed, 07-Dec-22 00:21:00 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_shopify_y=1cb9bbd7-38b2-42b6-97fe-3d3c64c20308; Expires=Wed, 06-Dec-23 23:51:00 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_shopify_s=27845634-06b9-4007-8fd3-228900cb7af0; Expires=Wed, 07-Dec-22 00:21:00 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
x-shopify-stage: production
content-security-policy: frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=show&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=2fc5b1e7-b67f-4e9a-88b9-01a16efd2e3e
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block; report=/xss-report?source%5Baction%5D=show&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=2fc5b1e7-b67f-4e9a-88b9-01a16efd2e3e
x-dc: gcp-europe-north1,gcp-us-central1,gcp-us-central1
x-request-id: 2fc5b1e7-b67f-4e9a-88b9-01a16efd2e3e
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nB2L4Sj7VzwXBaL0BfRWK741n1QUGm4z4zJ5f%2FlT936HY7wrJpWR3eh1dt4HgPUgYLcKngUNtcug%2B1fH80dEsLsVIL%2Fs5G%2Fz4MTBc6pPPnVc%2FL98PbCOcYqhAfABz6lnOVoceVhsDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: cfRequestDuration;dur=1105.000019
server: cloudflare
cf-ray: 7758ed4f0a33b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/shopifycloud/shopify/assets/checkout_2021-01-25-266aa337234d56a0b535ff6a2db927478599bf7bb303c87072bd783ac112829e.js
200 OK 0 B URL HTTP/2 cdn.shopify.com/shopifycloud/shopify/assets/checkout_2021-01-25-266aa337234d56a0b535ff6a2db927478599bf7bb303c87072bd783ac112829e.js
IP
GET /shopifycloud/shopify/assets/checkout_2021-01-25-266aa337234d56a0b535ff6a2db927478599bf7bb303c87072bd783ac112829e.js HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Origin: https://www.nearlynatural.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:01 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/checkout_2021-01-25-266aa337234d56a0b535ff6a2db927478599bf7bb303c87072bd783ac112829e.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 4c493dfd-55e3-4d2a-829e-f113657dbede
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Thu, 17 Nov 2022 21:44:01 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KANe%2Bl%2BnZdaBpjkL%2B7tXGOd6sXWwzR3kDqh7bo9FU1NgezqUAMx9tCZz6WeIxQkATH4TmRzPqkGBgpoEiZgKv0xA2T41Zikuy3X%2Fmi5CxzIJlCGFBVzgIPGjf6yM42CCww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=38.480, imageryFetch;dur=38.273, cfRequestDuration;dur=195.000172
server: cloudflare
cf-ray: 7758ed5958a40b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 0 B IP
ASN #203220 Yahoo! UK Services Limited
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nvp7HpXJZB2hhDGwscFVizx2H6zgg6AbUCYUA0qoOW/R5xvQetHrySwTNnZGG4nUK6sQCdt2kZ8=
x-amz-request-id: ZXPBYQSPG9S0KS6A
date: Tue, 06 Dec 2022 23:51:00 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 5
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
p.yotpo.com/js/bundle.js
200 OK 0 B IP
GET /js/bundle.js HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:51:05 GMT
content-type: application/javascript
server: nginx
last-modified: Wed, 11 Aug 2021 17:25:00 GMT
etag: W/"611407ec-a96b"
expires: Wed, 07 Dec 2022 23:51:05 GMT
cache-control: max-age=86400, private
content-encoding: gzip
X-Firefox-Spdy: h2
dx.mountain.com/spx?dxver=4.0.0&shaid=32489&tdr=&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&cb=36856005769167944term=value
200 0 B URL HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=32489&tdr=&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&cb=36856005769167944term=value
IP
GET /spx?dxver=4.0.0&shaid=32489&tdr=&plh=https%3A%2F%2Fwww.nearlynatural.com%2F10894606436%2Forders%2F67c290ffcb9cb31db9d6c388d95e5ec5&cb=36856005769167944term=value HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Tue, 06 Dec 2022 23:51:04 GMT
connection: close
www.nearlynatural.com/10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5/authenticate?key=c9da742662dd279a569b392f8f95cd69
302 Found 0 B URL HTTP/2 www.nearlynatural.com/10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5/authenticate?key=c9da742662dd279a569b392f8f95cd69
IP
GET /10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5/authenticate?key=c9da742662dd279a569b392f8f95cd69 HTTP/1.1
Host: www.nearlynatural.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 06 Dec 2022 23:50:59 GMT
content-type: text/html; charset=utf-8
location: https://www.nearlynatural.com/10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5
x-sorting-hat-podid: 82
x-sorting-hat-shopid: 10894606436
x-frame-options: DENY
x-shopid: 10894606436
x-shardid: 82
x-robots-tag: none
referrer-policy: origin-when-cross-origin
content-language: en-US
cache-control: no-cache
strict-transport-security: max-age=7889238
set-cookie: order=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaEpJaVZqT1dSaE56UXlOall5WkdReU56bGhOVFk1WWpNNU1tWTRaamsxWTJRMk9RWTZCa1ZVIiwiZXhwIjoiMjAyMi0xMi0yN1QyMzo1MDo1OS41MDhaIiwicHVyIjoiY29va2llLm9yZGVyIn19--aad20de744e4c832b9e508b2d04d8497739d9887; path=/10894606436/orders/67c290ffcb9cb31db9d6c388d95e5ec5; expires=Tue, 27 Dec 2022 23:50:59 GMT; secure; HttpOnly; SameSite=Lax
_y=1cb9bbd7-38b2-42b6-97fe-3d3c64c20308; Expires=Wed, 06-Dec-23 23:50:59 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_s=27845634-06b9-4007-8fd3-228900cb7af0; Expires=Wed, 07-Dec-22 00:20:59 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_shopify_y=1cb9bbd7-38b2-42b6-97fe-3d3c64c20308; Expires=Wed, 06-Dec-23 23:50:59 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
_shopify_s=27845634-06b9-4007-8fd3-228900cb7af0; Expires=Wed, 07-Dec-22 00:20:59 GMT; Domain=nearlynatural.com; Path=/; SameSite=Lax
x-shopify-stage: production
content-security-policy: frame-ancestors 'none'; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=authenticate&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=879fe2b7-e670-4f1c-8a40-66622f655475
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block; report=/xss-report?source%5Baction%5D=authenticate&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=checkouts%2Fweb%2Forders&source%5Bsection%5D=checkout&source%5Bshop_id%5D=10894606436&source%5Buuid%5D=879fe2b7-e670-4f1c-8a40-66622f655475
x-dc: gcp-europe-north1,gcp-us-central1,gcp-us-central1
x-request-id: 879fe2b7-e670-4f1c-8a40-66622f655475
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8tk1f9C4kPh6n8PAVln1ACp%2Bqv8z9uupc3%2BikV%2BnwVL7RnkFXvkJ%2BsgZ9Rj%2BiETM8B0i6LkMoAlrTAL%2F8LMjWmwMBLJq5eu6BqNsuW1GrzSaFp8SMi43797CmOq0urUMhlq5fpzpAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: cfRequestDuration;dur=467.999935
server: cloudflare
cf-ray: 7758ed4cf88bb517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.attn.tv/nearlynatural/dtag.js
200 OK 0 B URL HTTP/2 cdn.attn.tv/nearlynatural/dtag.js
IP
GET /nearlynatural/dtag.js HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
date: Tue, 06 Dec 2022 23:51:03 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Oct 2022 16:39:13 GMT
etag: W/"73a8287bbb9c4566f62f7c4fa6f9a688"
cache-control: public, max-age=120
x-amz-version-id: LlT3T0xodZHpywBzY.WLjEsYuLvNGIQP
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BweGIcId8isDg6uUt9M_WFB8cUcc7GfEsQWy60eE720m8bqjWUkbZQ==
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0108/9460/6436/t/359/assets/idme-checkout-template.js?78273
404 Not Found 0 B URL HTTP/2 cdn.shopify.com/s/files/1/0108/9460/6436/t/359/assets/idme-checkout-template.js?78273
IP
GET /s/files/1/0108/9460/6436/t/359/assets/idme-checkout-template.js?78273 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nearlynatural.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Tue, 06 Dec 2022 23:51:01 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=30
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 15370367-c9fe-4fe5-994d-312df5db5a20
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Yig5V7aVo2ZmU8WfBMqUcOpqA%2Br29xY5Ug4PYwoEHJhva5kR3RL%2BlEbfhJ1BozWGA2l4eIAy8pjVu4W%2BkTojHIOtrQyc8OdqwMga7BiDHRnz1lJCESgyuFdMFekzN1G1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=13.592, imageryFetch;dur=13.460, cfRequestDuration;dur=144.999981
server: cloudflare
cf-ray: 7758ed595d36b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
23.227.38.74
35.81.162.201
23.36.77.32
104.17.203.53
18.195.28.127
157.240.200.14
93.184.220.29
95.101.97.70
212.82.100.181