zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
65.17.230.58301 301 0 B URL HTTP/1.1 zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
IP 65.17.230.58:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /care-services/personalized-care-plans-by-diagnosis/kidney-failure HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 301
Location: https://zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
Date: Wed, 21 Sep 2022 10:52:24 GMT
Content-Length: 0
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7275
Expires: Wed, 21 Sep 2022 12:53:39 GMT
Date: Wed, 21 Sep 2022 10:52:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 21 Sep 2022 10:13:33 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QpMbpEZkg6srImlESjSv61FnbmiXqFzZQXuCWors6NjzvTOjqO_aKw==
Age: 2331
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash afb65a07bf7214addf83d17a53acba32
a8e973204431320aa7b362a4e73944520c4b51b9
46e1a9e6c98245afb7fa84bc6d9ba6844105024e2d3f56e28748e6c321475d02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46E1A9E6C98245AFB7FA84BC6D9BA6844105024E2D3F56E28748E6C321475D02"
Last-Modified: Wed, 21 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13982
Expires: Wed, 21 Sep 2022 14:45:26 GMT
Date: Wed, 21 Sep 2022 10:52:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Qgy/PW1RCEbU+7j8pFWuY8b4dVpSXfkC7oSn3ffIREFGzMWE31fBnS335F9U86j6wnR5YVn2+PA=
x-amz-request-id: CY817PGNX3WCD06V
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 21 Sep 2022 10:45:26 GMT
age: 418
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 10:52:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 21 Sep 2022 10:03:22 GMT
Expires: Wed, 21 Sep 2022 10:46:06 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: v_BD_CE_I09nXDz2mrwOd_zFDFO6mn7W9NCzNy6yi1Qemk8Hxe70Yw==
Age: 2943
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ff6d50919e56aed75c47feb45ee2f2ec
98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef
b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4486
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:25 GMT
Last-Modified: Wed, 21 Sep 2022 09:37:39 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
65.17.230.58200 200 17 kB URL HTTP/1.1 zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
IP 65.17.230.58:0
File type Generic INItialization configuration []\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1708), with CRLF, LF line terminators
Hash 21f1371a0ee8aa713ed99ef06d4449d9
1ee6394b591ce1766a248722a2652a54f33164d8
1c297710634d979c166d45edacc32b1064295420bdfd3f466fec7e83b919009f
GET /care-services/personalized-care-plans-by-diagnosis/kidney-failure HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 200
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html;charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Set-Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SameSite=Lax; path=/; httponly
SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; expires=Sat, 18-Sep-2032 10:52:24 GMT; path=/; httponly
ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; path=/; secure; httponly
ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; SameSite=None; path=/; secure; httponly
Date: Wed, 21 Sep 2022 10:52:25 GMT
Content-Length: 16794
push.services.mozilla.com/
52.89.136.7101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.136.7:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7aP/EjgWM2xBG13ewC/7pA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DL3GZaFAR3SEvMIQ/qNZ1bODE/E=
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e26b7ba66d58890c79c1cb53b36e7f8c
2a8f2788a5263dd704104a1af53f34b5719ffa33
fec31864e4cd5c3397ccb00d887a78a11dbfac9f43a40367326e9b03be392fec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6281
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:25 GMT
Last-Modified: Wed, 21 Sep 2022 09:07:45 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
cdn.polyfill.io/v2/polyfill.min.js?features=es6,Array.prototype.includes,CustomEvent,Object.entries,Object.values,URL
151.101.85.26200 OK 914 B URL HTTP/2 cdn.polyfill.io/v2/polyfill.min.js?features=es6,Array.prototype.includes,CustomEvent,Object.entries,Object.values,URL
IP 151.101.85.26:0
File type ASCII text, with very long lines (3663)
Hash 6d5a4742573ff348dc782898d933fcb8
172744493d1be5b933d10c53e1c9079e6fc91900
81524775d52b647bea220280444455608ce229f7371b8f7e2cc43d6cea3e2acf
GET /v2/polyfill.min.js?features=es6,Array.prototype.includes,CustomEvent,Object.entries,Object.values,URL HTTP/1.1
Host: cdn.polyfill.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
last-modified: Wed, 14 Sep 2022 15:11:14 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/96.0.0
date: Wed, 21 Sep 2022 10:52:25 GMT
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1672, PASS, fastly;desc="Edge time";dur=14
content-length: 914
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 596ea0e7cffcb12819c214fd7e55e6b5
fdf581b35743d7693bf8c7f6154471a1b2646f06
a78eee2be3725b096407fde832e7762dad74ac69165f57a10b1ef76b5b2d9874
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-WGZG9X7
142.250.74.72200 OK 126 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WGZG9X7
IP 142.250.74.72:0
File type Unicode text, UTF-8 text, with very long lines (60904)
Size 126 kB (125513 bytes)
Hash 51c3f44dd0a67ca8a1e41e0c38028844
4e37c29268e436e377742e83b71a7eea4e15005b
a76e9441c2b72fc8dcdf44566fe07e5e4698feda033ac637e64199a2abf8c17d
GET /gtm.js?id=GTM-WGZG9X7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 21 Sep 2022 10:52:25 GMT
expires: Wed, 21 Sep 2022 10:52:25 GMT
cache-control: private, max-age=900
last-modified: Wed, 21 Sep 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 125513
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f68324bff0a6a9b79ef6fa84254982f3
c144294cf0a86bb98207c5b4d05b350556c0006d
2bbeb9cec143aff4b7c70381bdf41dba862712015412cfe75bd7249a9706a419
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3040
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:25 GMT
Last-Modified: Wed, 21 Sep 2022 10:01:45 GMT
Server: ECS (amb/6BA2)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f68324bff0a6a9b79ef6fa84254982f3
c144294cf0a86bb98207c5b4d05b350556c0006d
2bbeb9cec143aff4b7c70381bdf41dba862712015412cfe75bd7249a9706a419
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3040
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:25 GMT
Last-Modified: Wed, 21 Sep 2022 10:01:45 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 596ea0e7cffcb12819c214fd7e55e6b5
fdf581b35743d7693bf8c7f6154471a1b2646f06
a78eee2be3725b096407fde832e7762dad74ac69165f57a10b1ef76b5b2d9874
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cloud.typography.com/7585436/7703792/css/fonts.css
23.14.4.143200 OK 17 B URL HTTP/1.1 cloud.typography.com/7585436/7703792/css/fonts.css
IP 23.14.4.143:0
File type ASCII text, with no line terminators
Hash f130fd70bd4cfa88cacd6d9b4c8c0f19
4d544020a9776f0767f2940605898e55a1ed1407
f2e53e56c4c3f42d0f7654ddedfa5cb642a4c2a6389435c6e4ae65fbfafd9f12
GET /7585436/7703792/css/fonts.css HTTP/1.1
Host: cloud.typography.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: AkamaiNetStorage
Content-Length: 17
Content-Type: text/css
ETag: "f130fd70bd4cfa88cacd6d9b4c8c0f19:1648261936.128631"
Vary: Accept-Encoding
Cache-Control: max-age=300
Date: Wed, 21 Sep 2022 10:52:25 GMT
Connection: keep-alive
esvitas.mpeasylink.com/mpel/mpel_chooser.js
54.174.98.17200 2.4 kB URL HTTP/1.1 esvitas.mpeasylink.com/mpel/mpel_chooser.js
IP 54.174.98.17:0
File type ASCII text, with very long lines (567)
Hash 2d4cdb6bc4d174c30f33d3e1abe971c1
71d35681d616085811b0805b5f4d9a0785e57fc4
a38fe1ad781f8e36110146c1a2d7d9d19c1e6faaa40e94137128172c89606485
Analyzer Verdict Alert quad9 Sinkholed
GET /mpel/mpel_chooser.js HTTP/1.1
Host: esvitas.mpeasylink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: nginx
Date: Wed, 21 Sep 2022 10:52:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"6166-1608738848000"
Last-Modified: Wed, 23 Dec 2020 15:54:08 GMT
Cache-Control: max-age=86400
Expires: Thu, 22 Sep 2022 10:52:25 GMT
vary: accept-encoding
Content-Encoding: gzip
esvitas.mpeasylink.com/mpel/mpel.js
54.174.98.17200 1.7 kB URL HTTP/1.1 esvitas.mpeasylink.com/mpel/mpel.js
IP 54.174.98.17:0
File type ASCII text, with very long lines (518)
Hash d92ac9598f3d4a55e3a5147e03d543ae
27f4d5d2c76e7cad748c2ca14d3c8462dfb1479e
0c7348110b63e1ea68ac328e848c0562e90c121539fc412477f588416262e276
Analyzer Verdict Alert quad9 Sinkholed
GET /mpel/mpel.js HTTP/1.1
Host: esvitas.mpeasylink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: nginx
Date: Wed, 21 Sep 2022 10:52:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"5097-1608738848000"
Last-Modified: Wed, 23 Dec 2020 15:54:08 GMT
Cache-Control: max-age=86400
Expires: Thu, 22 Sep 2022 10:52:25 GMT
vary: accept-encoding
Content-Encoding: gzip
www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/jquery.validate.unobtrusive.min.js
40.71.11.139200 OK 2.5 kB URL HTTP/1.1 www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/jquery.validate.unobtrusive.min.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (5267)
Hash 8ab023ed48a7ecd8b1447a9865e4ee74
1ca4f11298e35b70cc877668bea8eb3a292b52aa
72327c342592328e08141555fc2d389e3e4fec10603d1a7948e6d37e2b5fd5c6
GET /sitecore%20modules/Web/ExperienceForms/scripts/jquery.validate.unobtrusive.min.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 2475
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
ETag: "0026ead3cd61:0"
Last-Modified: Tue, 07 Apr 2020 11:58:56 GMT
Set-Cookie: ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/form.validate.js
40.71.11.139200 OK 1.5 kB URL HTTP/1.1 www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/form.validate.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash b381d4db6f52b6d621a0722b4306eee6
b5235d4f9a059c5b644f3c98a9ee48e2ff4e2a4b
368db3a9e407f81488711ae1ab972af62c5a088e10f3fb4f2f6d42178ee86560
GET /sitecore%20modules/Web/ExperienceForms/scripts/form.validate.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 1504
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
ETag: "0026ead3cd61:0"
Last-Modified: Tue, 07 Apr 2020 11:58:56 GMT
Set-Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/jquery.unobtrusive-ajax.min.js
40.71.11.139200 OK 2.1 kB URL HTTP/1.1 www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/jquery.unobtrusive-ajax.min.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (3083)
Hash 36f25473b9baf42f19da053453cdf576
fab63756f40e6d2ddaea8c720699a17b0cc5ed1c
ce2064c414f0d4f57a8557bbdaf7ea728a15117a7c36566828a80d585d684e7b
GET /sitecore%20modules/Web/ExperienceForms/scripts/jquery.unobtrusive-ajax.min.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 2100
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
ETag: "0026ead3cd61:0"
Last-Modified: Tue, 07 Apr 2020 11:58:56 GMT
Set-Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/assets/js/mp_linkcode.js
40.71.11.139200 OK 923 B URL HTTP/1.1 www.vitas.com/assets/js/mp_linkcode.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type exported SGML document, ASCII text, with CRLF line terminators
Hash f255e3ee4e14dc1bb1c6da8de7dbcb0c
e94235a2b4428db2d09723b21cec621db824dea8
0abb03cc222bac078cee47cce0db5b32fe008bb67eecefbab9b6c7ca6dd5cb6d
GET /assets/js/mp_linkcode.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 923
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: no-cache,max-age=31536000
Content-Encoding: gzip
ETag: "0c5b88756abd81:0"
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
Set-Cookie: ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/jquery.validate.min.js
40.71.11.139200 OK 9.4 kB URL HTTP/1.1 www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/jquery.validate.min.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (22932)
Hash 37bb2055de773a04f36d83fd4a3ad812
07f4f55e0195dc4418ac3a2a4d90518db1b9ec20
8ae92200735074741d83858a77500bc6f3b2c906eec9a4411ea7b58b036afa85
GET /sitecore%20modules/Web/ExperienceForms/scripts/jquery.validate.min.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 9362
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
ETag: "0026ead3cd61:0"
Last-Modified: Tue, 07 Apr 2020 11:58:56 GMT
Set-Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/form.tracking.js
40.71.11.139200 OK 2.6 kB URL HTTP/1.1 www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/form.tracking.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 87e33388efdc6c962df6cb69bca8ec65
6a9c0546560d43cf44363ae54d2e534f9a6bbc70
411bfc61e8051fc2a798d803de0b81fbe4acd13b50728b670cf83411cdae13b2
GET /sitecore%20modules/Web/ExperienceForms/scripts/form.tracking.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 2618
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
ETag: "0026ead3cd61:0"
Last-Modified: Tue, 07 Apr 2020 11:58:56 GMT
Set-Cookie: ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/assets/js/GTMDataLayer.js
40.71.11.139200 OK 480 B URL HTTP/1.1 www.vitas.com/assets/js/GTMDataLayer.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 322d32d84c18527318d2116a5c54c668
3c4fd06d0769331a838e518e643d031d2a5771dd
8f38534967a89507a5a55bbabdb7fb0a2f4f95673c24e5995bc57d11710c1f00
GET /assets/js/GTMDataLayer.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 480
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: no-cache,max-age=31536000
Content-Encoding: gzip
ETag: "02f4cb855abd81:0"
Last-Modified: Mon, 08 Aug 2022 18:36:06 GMT
Set-Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/form.conditions.js
40.71.11.139200 OK 4.6 kB URL HTTP/1.1 www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/form.conditions.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 30cc5df1a24a89412e320ce3f2ac2022
5623bb7391983d5a729620e8dd96b6f1e9007cfb
17887543580ed45d36c4ea77042b918fbc305789affb44a4e5fe0026ab5f6664
GET /sitecore%20modules/Web/ExperienceForms/scripts/form.conditions.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 4593
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:26 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
ETag: "0026ead3cd61:0"
Last-Modified: Tue, 07 Apr 2020 11:58:56 GMT
Set-Cookie: ARRAffinity=e2f403c87ed3b5ea6e8463d3a3a9eb88d7f5b3e20447ab915feade5f3e169685;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=e2f403c87ed3b5ea6e8463d3a3a9eb88d7f5b3e20447ab915feade5f3e169685;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/assets/css/mastersubpage.css
40.71.11.139200 OK 45 kB URL HTTP/1.1 www.vitas.com/assets/css/mastersubpage.css
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65536), with no line terminators
Hash 858e1547eaedbcc53cea1d3a2c0d9456
65d0586512627821c558a9c8650bbe6b46b828b0
29814eeadb29fdc44334e777b41b1cce559d1c49056ca811c396476fc2ae6a01
GET /assets/css/mastersubpage.css HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 45022
Content-Type: text/css
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: no-cache,max-age=31536000
Content-Encoding: gzip
ETag: "0c5b88756abd81:0"
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
Set-Cookie: ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/assets/js/mastersubpage.js
40.71.11.139200 OK 124 kB URL HTTP/1.1 www.vitas.com/assets/js/mastersubpage.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 124 kB (124346 bytes)
Hash 02e86dced7475840e110bc8735bc3ef7
813edc7d2cee74338bae47b2dc60c3fd948ba3d4
7b10fbcd065e571eaed6bdaa985ad45198a2f7f1e157a3b3a2eeecb4d968b991
GET /assets/js/mastersubpage.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 124346
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: no-cache,max-age=31536000
Content-Encoding: gzip
ETag: "0c5b88756abd81:0"
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
Set-Cookie: ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
www.vitas.com/layouts/system/VisitorIdentification.js
40.71.11.139200 OK 910 B URL HTTP/1.1 www.vitas.com/layouts/system/VisitorIdentification.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 0690bd029ab146f4bba02c5c7c5d08dc
90594dc8344651b55abd18bd03ab4d766a11e514
5896eda5caefe2252f525509efeb45d6eb5cf435d4b520b25c6bebb800f32e65
GET /layouts/system/VisitorIdentification.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 910
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:26 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
ETag: "04243e1459ad51:0"
Last-Modified: Wed, 13 Nov 2019 17:15:00 GMT
Set-Cookie: ARRAffinity=e2f403c87ed3b5ea6e8463d3a3a9eb88d7f5b3e20447ab915feade5f3e169685;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=e2f403c87ed3b5ea6e8463d3a3a9eb88d7f5b3e20447ab915feade5f3e169685;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e5d7d983b288c67e17280c6a1c0d80d9
8a1e575f8b8427e872c1e4c5645d9ce3e5445e52
a08530049c460e7e3cf236a9969b94b4a794d83f3f4279ac43934194f39dedd6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e5d7d983b288c67e17280c6a1c0d80d9
8a1e575f8b8427e872c1e4c5645d9ce3e5445e52
a08530049c460e7e3cf236a9969b94b4a794d83f3f4279ac43934194f39dedd6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e5d7d983b288c67e17280c6a1c0d80d9
8a1e575f8b8427e872c1e4c5645d9ce3e5445e52
a08530049c460e7e3cf236a9969b94b4a794d83f3f4279ac43934194f39dedd6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/jquery-3.4.1.min.js
40.71.11.139200 OK 39 kB URL HTTP/1.1 www.vitas.com/sitecore%20modules/Web/ExperienceForms/scripts/jquery-3.4.1.min.js
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65451)
Hash bdcff76d1883b83d6027d63276dd26e5
7e80a9d867797601e7c62375cf3457e7bea3cbc9
08b8a6e1bb890f3f8d87d8430f0c6e46e3b897803309e23bdc935906c08a8ad1
GET /sitecore%20modules/Web/ExperienceForms/scripts/jquery-3.4.1.min.js HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 39419
Content-Type: application/x-javascript
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
ETag: "0026ead3cd61:0"
Last-Modified: Tue, 07 Apr 2020 11:58:56 GMT
Set-Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Vary: Accept-Encoding
zh.vitas.com/assets/css/mastersubpage.css
65.17.230.58200 200 45 kB URL HTTP/1.1 zh.vitas.com/assets/css/mastersubpage.css
IP 65.17.230.58:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash c816217602fc7388debd3ce2787401c4
f010a2497fa03e2f3c20a22390b49a89964f641e
4c1a1f43d435114f46a0688fee697576722f3885f33dd3f5434b86bbe8d628a6
GET /assets/css/mastersubpage.css HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 200
Cache-Control: no-cache,max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
ETag: "0c5b88756abd81:0"
Vary: Accept-Encoding
Date: Wed, 21 Sep 2022 10:52:26 GMT
Content-Length: 45202
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8535
Expires: Wed, 21 Sep 2022 13:14:41 GMT
Date: Wed, 21 Sep 2022 10:52:26 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8535
Expires: Wed, 21 Sep 2022 13:14:41 GMT
Date: Wed, 21 Sep 2022 10:52:26 GMT
Connection: keep-alive
www.vitas.com/-/media/images/ztest/homepage/logovitaswhite.ashx?iar=0&hash=9721F44FA4E322E60933CA796A546395
40.71.11.139200 OK 2.7 kB URL HTTP/1.1 www.vitas.com/-/media/images/ztest/homepage/logovitaswhite.ashx?iar=0&hash=9721F44FA4E322E60933CA796A546395
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2692), with no line terminators
Hash 45cdc4bcbfc2f2557cfccb5e583c3c12
8872bd1a8256198d753437606df52ad295405ece
33c6fb8dd14517dabbcc6c07dc06405ebf0cbe18cfb956c87a6bf790f97fb954
GET /-/media/images/ztest/homepage/logovitaswhite.ashx?iar=0&hash=9721F44FA4E322E60933CA796A546395 HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 2692
Content-Type: image/svg+xml
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: private, max-age=604800
Last-Modified: Tue, 07 May 2019 14:33:11 GMT
Set-Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Content-Disposition: inline; filename="logovitaswhite.svg"
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8535
Expires: Wed, 21 Sep 2022 13:14:41 GMT
Date: Wed, 21 Sep 2022 10:52:26 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8535
Expires: Wed, 21 Sep 2022 13:14:41 GMT
Date: Wed, 21 Sep 2022 10:52:26 GMT
Connection: keep-alive
www.vitas.com/-/media/images/footer/twitterwhitelogo100.ashx?h=100&iar=0&w=100&hash=809B524B21D317E3F4686D42D26DD1E5
40.71.11.139200 OK 1.2 kB URL HTTP/1.1 www.vitas.com/-/media/images/footer/twitterwhitelogo100.ashx?h=100&iar=0&w=100&hash=809B524B21D317E3F4686D42D26DD1E5
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash dabe54e88118286691389c34c08e41a7
f91c3220f86ee4d831d203e865f0c2fd931d81aa
aab0a56caf93a8f89f61aa66011dc713e07fe1e2ae0bd130db327fa7dfbbfbda
GET /-/media/images/footer/twitterwhitelogo100.ashx?h=100&iar=0&w=100&hash=809B524B21D317E3F4686D42D26DD1E5 HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 1180
Content-Type: image/png
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: private, max-age=604800
Last-Modified: Tue, 26 Feb 2019 21:37:46 GMT
Set-Cookie: ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Content-Disposition: inline; filename="twitterwhitelogo100.png"
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf057f43-44fd-440b-bd96-67b16eb4eb13.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf057f43-44fd-440b-bd96-67b16eb4eb13.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7b780d39877eea116277625aaa01f1b
d8ac8a7e19b06e38070a0319cde24b5bf0eaa7db
ca9d59056e0a3f512d36db11f4a4bd3109c2ce1e13b29b5f40dce84df079e71f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf057f43-44fd-440b-bd96-67b16eb4eb13.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12654
x-amzn-requestid: efc99152-2b51-462d-b48b-67ba8263b1cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YpOJOGVYoAMFcvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6326c3d4-00eeb6913e06ac151f293263;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 07:08:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wK03Lqow6u4lrQ3QI21klXXHGZqbKYathhCO87k0rZWBbF8o5YYjXw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 07:05:16 GMT
age: 13630
etag: "d8ac8a7e19b06e38070a0319cde24b5bf0eaa7db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6b35a1c-f445-4b05-b56e-ce2ad0ef2a9a.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6b35a1c-f445-4b05-b56e-ce2ad0ef2a9a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8bae3a7a80ff40df1d701dfc925ddeff
91df60162a8322469cada0dd8eb93619f28aec1a
fab10c7ad4658bc191621d9f2042236a7b6e34448ce5215dde5b8d6a64b52952
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6b35a1c-f445-4b05-b56e-ce2ad0ef2a9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6897
x-amzn-requestid: 280a2e44-c21a-4d78-991b-3328e816d045
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YwWSpE0SoAMFaxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63299daa-55cb53491be78c4d5bed0462;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 11:02:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eNkM22Xu--qgJdsrH-UrTG5-Ie4nAsyLjiMaJ5ZKIz0bbw7cYrvFjw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 02:18:26 GMT
age: 30840
etag: "91df60162a8322469cada0dd8eb93619f28aec1a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14e6ddceb639a5f4875aecb796f95c79
b1cd04a66852694284eeef16a1cde38896e33c03
4c0657a00d7fb4caefa64c28340cad94a306cc393cffe692fcc69c65a80f2391
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10244
x-amzn-requestid: 71f08b9e-e977-48de-ad60-5192a43db517
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYwBkGqjIAMFz0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202d3d-0af3334d085ca4a764e31bb5;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7FaZfI_iYUANPdxGBld5NfneWwKJeX2nYA_gmvF9NjML5YOVhZIIoA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 14:38:21 GMT
age: 72845
etag: "b1cd04a66852694284eeef16a1cde38896e33c03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4d98acc059a69d51165fb5e0c7430ea3
09bd3300d710c3212483159f8398b84cde09da26
6e38bbb5c79c4f714973e10961d7bad9e7ae8711cf24d68b13a77206f474d2a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7507
x-amzn-requestid: 2a40c792-8b1b-4476-92de-1fce3df48fc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCmaHefoAMF4Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e28-6b05350006b7f3fb73d1e37a;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rq4QHCD4EubBKHyCj7jyKqpct5d7U33TvNufqj_w8mWunqQsouoh7w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:21:54 GMT
age: 45032
etag: "09bd3300d710c3212483159f8398b84cde09da26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.vitas.com/-/media/images/footer/linkedin100.ashx?h=100&iar=0&w=100&hash=66F27BDB18C2B9C557C123C6153F7B2F
40.71.11.139200 OK 1.1 kB URL HTTP/1.1 www.vitas.com/-/media/images/footer/linkedin100.ashx?h=100&iar=0&w=100&hash=66F27BDB18C2B9C557C123C6153F7B2F
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash c6ce043ff4f733e9d7edac75f9199d04
642e13ebeab0bf7ecc26e123dd088803aa9dc824
8c39413a85aa78b3d6792caabb87fd77af042819e85c3c8f70e28b921aed43de
GET /-/media/images/footer/linkedin100.ashx?h=100&iar=0&w=100&hash=66F27BDB18C2B9C557C123C6153F7B2F HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 1088
Content-Type: image/png
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: private, max-age=604800
Last-Modified: Tue, 26 Feb 2019 21:37:38 GMT
Set-Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Content-Disposition: inline; filename="linkedin100.png"
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0461a18-eff3-4de5-b1f6-be49fa5db229.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0461a18-eff3-4de5-b1f6-be49fa5db229.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4eb6d1b35f680bfec656941b6167fd23
344c6000dbdafdb5105edc93a082d640c3e95ddc
67fc85fa0f1a55d57ab9db6f4c723fb9116ef3b2c5282dbdd42d9c37396bd7b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0461a18-eff3-4de5-b1f6-be49fa5db229.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8826
x-amzn-requestid: cf0c711e-4ec9-4f87-a60f-41374262a114
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYweUHIyoAMFYQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202df5-17ad5d4e25a754586e531d05;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:15:01 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OEbpCQXLpTCDZH4OlzVvvsc-bSgbsIoXRgX6f-nKVwJTL5-SVTCHeA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 21:56:09 GMT
age: 46577
etag: "344c6000dbdafdb5105edc93a082d640c3e95ddc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a692964324dbb9c460a1b855808d02e6
1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54
3fa9e780d62fffb635064aeed542c8e04923ff943c6080476836fab6c24e2426
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9201
x-amzn-requestid: 6dbfae76-f9ab-4f31-9b62-bcf5d9ce4515
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YxzxlEYcoAMFaQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a333d-7d147481402cc46a751b72ed;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:40:13 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hI3FlJJRAUfr0EAcSvvuJajmyQDwBpTxuQIhYfA0Mtp9JyQgKnoDvA==
via: 1.1 7dcaa43cd0535d889b549e6a30a57aa0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 21:43:18 GMT
age: 47348
etag: "1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.vitas.com/-/media/images/footer/instagram100whitelogo.ashx?h=100&iar=0&w=100&hash=3C444E9C73EFFFBF85BE5F08D3EB58EA
40.71.11.139200 OK 3.7 kB URL HTTP/1.1 www.vitas.com/-/media/images/footer/instagram100whitelogo.ashx?h=100&iar=0&w=100&hash=3C444E9C73EFFFBF85BE5F08D3EB58EA
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0394811396c3da6d52ac15cdfbf25fa9
844052cdb8e93bdcc1e8eb209db361708eb85468
7fe082395dd0c3ef43b48b60ad2bcc082b30eff90b876be320a43cb5cb935ce3
GET /-/media/images/footer/instagram100whitelogo.ashx?h=100&iar=0&w=100&hash=3C444E9C73EFFFBF85BE5F08D3EB58EA HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 3735
Content-Type: image/png
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: private, max-age=604800
Last-Modified: Tue, 12 Mar 2019 16:01:05 GMT
Set-Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Content-Disposition: inline; filename="instagram100whiteLogo.png"
www.vitas.com/-/media/images/footer/facebooklogowhite100.ashx?h=100&iar=0&w=100&hash=838E14EE4A0FE6480C8F451B9A977130
40.71.11.139200 OK 1.3 kB URL HTTP/1.1 www.vitas.com/-/media/images/footer/facebooklogowhite100.ashx?h=100&iar=0&w=100&hash=838E14EE4A0FE6480C8F451B9A977130
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash d64e2f957a6b5301f3221dcf7552d093
2c7ea70d9214e31d53fa5c5ddede37983c4066ba
6e752c476d7338c36e77b1a8bbb8eccdede30e440aa859c69426f2d0dc891a7d
GET /-/media/images/footer/facebooklogowhite100.ashx?h=100&iar=0&w=100&hash=838E14EE4A0FE6480C8F451B9A977130 HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 1298
Content-Type: image/png
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: private, max-age=604800
Last-Modified: Tue, 26 Feb 2019 21:37:30 GMT
Set-Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;Secure;Domain=www.vitas.com
ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vitas.com
Content-Disposition: inline; filename="facebooklogowhite100.png"
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 41e846547f0f50fdb95b88115fa3ca38
89f769bd67a3ae27d423839829f2b64a817a9b39
0939ad5ebecfeb7c2e2420d42491f045bb4b154b2c89f43971f9452858317037
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-7T657PQQ1Q>m=2oe9j0&_p=455513857&cid=211402334.1663757546&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663757546&sct=1&seg=0&dl=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&dt=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-7T657PQQ1Q>m=2oe9j0&_p=455513857&cid=211402334.1663757546&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663757546&sct=1&seg=0&dl=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&dt=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7T657PQQ1Q>m=2oe9j0&_p=455513857&cid=211402334.1663757546&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663757546&sct=1&seg=0&dl=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&dt=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://zh.vitas.com
date: Wed, 21 Sep 2022 10:52:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 08:31:01 GMT
expires: Wed, 20 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
age: 94885
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
142.250.74.163200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 18:59:14 GMT
expires: Tue, 19 Sep 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 143592
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.vitas.com/assets/img/hp-hero-floral-lg.jpg
40.71.11.139200 OK 23 kB URL HTTP/1.1 www.vitas.com/assets/img/hp-hero-floral-lg.jpg
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1400x530, components 3\012- data
Hash 4928ee9b4be8c988e9c902dfba2f8f29
958ad758a0e7f9fcf5f8f3a6a46b4501349b40f0
af4a1bdeacd3550452372f4ee51c94e3da837ab002a7a404ed71daf1e3fab3a3
GET /assets/img/hp-hero-floral-lg.jpg HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 23257
Content-Type: image/jpeg
Date: Wed, 21 Sep 2022 10:52:25 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
ETag: "0c5b88756abd81:0"
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 41e846547f0f50fdb95b88115fa3ca38
89f769bd67a3ae27d423839829f2b64a817a9b39
0939ad5ebecfeb7c2e2420d42491f045bb4b154b2c89f43971f9452858317037
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zh.vitas.com/assets/img/icon-search-white.svg
65.17.230.58200 200 985 B URL HTTP/1.1 zh.vitas.com/assets/img/icon-search-white.svg
IP 65.17.230.58:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (985), with no line terminators
Hash 7cac461eded14c3b432ed9fa5e3b6aac
df60d668d48ceff04a83d2a6a5610988f8acb4c5
ee43eca1fe6cc7ff4090d5b93802966bb0a9e1ec91cbabb262339880f46fdd33
GET /assets/img/icon-search-white.svg HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/assets/css/mastersubpage.css
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 200
Cache-Control: max-age=31536000
Content-Type: image/svg+xml
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
ETag: "0c5b88756abd81:0"
Date: Wed, 21 Sep 2022 10:52:26 GMT
Content-Length: 985
esvitas.mpeasylink.com/mpel/mpel_storage.html?cmd=getpref&href=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure
54.174.98.17200 1.2 kB URL HTTP/1.1 esvitas.mpeasylink.com/mpel/mpel_storage.html?cmd=getpref&href=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure
IP 54.174.98.17:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (660)
Hash f5434170cf449014a1399b72c1d5e486
23e7fc0ecac26c13fba39246263e9cb7f7d0307f
51c739bd9dd80b6cdff048d6338233d6748f577883deacd27db15d79797d1d74
Analyzer Verdict Alert quad9 Sinkholed
GET /mpel/mpel_storage.html?cmd=getpref&href=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure HTTP/1.1
Host: esvitas.mpeasylink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: nginx
Date: Wed, 21 Sep 2022 10:52:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"2759-1608738848000"
Last-Modified: Wed, 23 Dec 2020 15:54:08 GMT
vary: accept-encoding
Content-Encoding: gzip
js.adsrvr.org/up_loader.1.1.0.js
143.204.45.46200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP 143.204.45.46:0
File type ASCII text, with very long lines (4593), with no line terminators
Hash 10c8dff7ca8a73c1b632d15cd7304b95
622aee6182568f9a9f425685bc3e1fd209bcddd2
48c115bd9a1ac4ac45eed3e2d7e6c98ed8451f5c546c3f71997c9365b253614f
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 21 Sep 2022 01:54:47 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: b-tZDISsDIRIj6ZJmN8akz7mamRwivdIZp6Oqnppl2Lzstt-yuguiw==
Age: 32260
s7.addthis.com/js/300/addthis_widget.js
23.38.200.123200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (54602)
Size 116 kB (116360 bytes)
Hash b87cd33d44e99d7bb4fa59f97915a154
429b6461bab5189d6987d39713c3405223c461b8
9ad12a8b1ed82ccdfc74eebce578bd8f146b04ba08476f8a9a237e346f1772b2
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5834c"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 116360
date: Wed, 21 Sep 2022 10:52:27 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
zh.vitas.com/assets/img/icon-phone-white.svg
65.17.230.58200 200 847 B URL HTTP/1.1 zh.vitas.com/assets/img/icon-phone-white.svg
IP 65.17.230.58:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (847), with no line terminators
Hash 61b46ad0eb8c515447c9c999ddc2807d
e06e9d0f3e7db7e2e1c3f46dcfbe39b93a5b3e35
710129152adcc89b828634c17a126f0c68e344a1a09893b200148af6d4488d4a
GET /assets/img/icon-phone-white.svg HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/assets/css/mastersubpage.css
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 200
Cache-Control: max-age=31536000
Content-Type: image/svg+xml
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
ETag: "0c5b88756abd81:0"
Date: Wed, 21 Sep 2022 10:52:26 GMT
Content-Length: 847
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash 2d446b6cf5b0d423620dabc81253a63a
216af978904a445519e440cf8c0c35a79d63b917
2c4a25c0d8ca19aefdfc9b82bed4e3e455fd9a443f0dc926f8ec18647e76c726
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 10:52:27 GMT
Last-Modified: Wed, 21 Sep 2022 10:06:50 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3uDfQvlBL2jrWMRBUSiuoc5a5yT3FK4l9iGuxGf04ySbkyme1OxurQ==
Age: 2737
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4f1be33184f21d0e196f84a3f8499bbb
df28d3563991b09b0cc5bcac12f3cc33da4abc31
bcbcecb8f6f1d327e8182f4474d20e0bbd7e9d10029ea26b61b85614b4c2d24c
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1882
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:27 GMT
Last-Modified: Wed, 21 Sep 2022 10:21:05 GMT
Server: ECS (amb/6BA1)
X-Cache: HIT
Content-Length: 471
zh.vitas.com/-/media/images/icons/icon_landing_vc.ashx
65.17.230.58301 301 0 B URL HTTP/1.1 zh.vitas.com/-/media/images/icons/icon_landing_vc.ashx
IP 65.17.230.58:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /-/media/images/icons/icon_landing_vc.ashx HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; utmCampaign_Lifetime=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 301 301
Location: https://www.vitas.com/-/media/images/icons/icon_landing_vc.ashx
Date: Wed, 21 Sep 2022 10:52:26 GMT
Content-Length: 0
zh.vitas.com/api/gtmData/GetData
65.17.230.58200 200 5 B URL HTTP/1.1 zh.vitas.com/api/gtmData/GetData
IP 65.17.230.58:0
File type ASCII text, with no line terminators
Hash 68934a3e9455fa72420237eb05902327
7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /api/gtmData/GetData HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; utmCampaign_Lifetime=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 200
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: application/json;charset=utf-8
Expires: -1
Date: Wed, 21 Sep 2022 10:52:26 GMT
Content-Length: 5
pro.fontawesome.com/releases/v5.15.1/webfonts/fa-solid-900.woff2
104.18.22.52200 OK 141 kB URL HTTP/2 pro.fontawesome.com/releases/v5.15.1/webfonts/fa-solid-900.woff2
IP 104.18.22.52:0
File type Web Open Font Format (Version 2), TrueType, length 140996, version 331.-31392\012- data
Size 141 kB (140996 bytes)
Hash 25d740d42658b6e2c293ce7b3322aac7
41cc9ae4b5dd70fd3988059dfb864f20f99ae371
8b5a3ff47c2413e0bf3dd3bb7899a25aeef9b390a055847a1185a39ad48a2da2
GET /releases/v5.15.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: pro.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://pro.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:27 GMT
content-type: font/woff2
content-length: 140996
x-amz-id-2: yYZF2FUN94+MC5Mufw6HbSbVe3cXa3BIDzh10+CS68dp6uCh0phfeKfi59iNbS9mLke1Rp5Yz1Y=
x-amz-request-id: R8SM9GT82YP6CCAJ
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 28 Jun 2021 17:19:52 GMT
etag: "25d740d42658b6e2c293ce7b3322aac7"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 74e2405bfcf2b50f-OSL
X-Firefox-Spdy: h2
pro.fontawesome.com/releases/v5.15.1/webfonts/fa-regular-400.woff2
104.18.22.52200 OK 174 kB URL HTTP/2 pro.fontawesome.com/releases/v5.15.1/webfonts/fa-regular-400.woff2
IP 104.18.22.52:0
File type Web Open Font Format (Version 2), TrueType, length 173596, version 331.-31392\012- data
Size 174 kB (173596 bytes)
Hash f3beba98d10f221fd533c55345fc6823
4902280f4a68de569f0e8fe25d2f13eb9f8daa1b
4e4cc2d5669ad1bb831c050c273dbf760a070eb5f413458cf5cd7625c594a583
GET /releases/v5.15.1/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: pro.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://pro.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:27 GMT
content-type: font/woff2
content-length: 173596
x-amz-id-2: 7A547Q6T4R7W6Jp6bgFUEp7xDG18uAZcYPs2sG5GwiMsTv1S6Y8lD4Q2+d4b0tl5Na+FhqgF3Ls=
x-amz-request-id: R8SH70JCQ1VQXHAK
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 28 Jun 2021 17:19:52 GMT
etag: "f3beba98d10f221fd533c55345fc6823"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 74e2405c5d59b50f-OSL
X-Firefox-Spdy: h2
esvitas.mpeasylink.com/mpel/mpel?href=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&ref=&lang=&country=undefined&curr=undefined®ion=undefined&osl=en-US
54.174.98.17200 1.5 kB URL HTTP/1.1 esvitas.mpeasylink.com/mpel/mpel?href=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&ref=&lang=&country=undefined&curr=undefined®ion=undefined&osl=en-US
IP 54.174.98.17:0
File type ASCII text, with very long lines (1480), with no line terminators
Hash db6b55651ee81cc4254575b3fbbc73c6
ef3c139d1248f3424f5a9826fdd4bb7558c36cf8
b6fdb6d95a72ba3428b045848d88467990d62e119f5da45f542829a67d5cf346
Analyzer Verdict Alert quad9 Sinkholed
GET /mpel/mpel?href=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&ref=&lang=&country=undefined&curr=undefined®ion=undefined&osl=en-US HTTP/1.1
Host: esvitas.mpeasylink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: nginx
Date: Wed, 21 Sep 2022 10:52:27 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 1480
Connection: keep-alive
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa OUR IND COM NAV INT STA"
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
cdn.inpwrd.net/track/1.0.0/bundle.min.js?customerId=499
54.230.111.59200 OK 34 kB URL HTTP/2 cdn.inpwrd.net/track/1.0.0/bundle.min.js?customerId=499
IP 54.230.111.59:0
Hash 83669e70719c5e8c80b1f47e0054f3c0
5260f9348ed01f5f253abbfc21d49c5a36e93916
636f08ca26fd6a1f42e7e5eb8b8b7ba582d54ad57826f3a91869018c0d0782b1
GET /track/1.0.0/bundle.min.js?customerId=499 HTTP/1.1
Host: cdn.inpwrd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 10 Aug 2022 18:37:18 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 06:39:20 GMT
etag: W/"805cb4320c4792b52bdcb1d55472acbe"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xgbjJmeZNdPzu3e65DQ7iBjqviBC6T6ODCsqG-5UUC-nDy8og2pLDw==
age: 15188
X-Firefox-Spdy: h2
zh.vitas.com/-/media/images/icons/icon_landing_hpcb.ashx
65.17.230.58301 301 0 B URL HTTP/1.1 zh.vitas.com/-/media/images/icons/icon_landing_hpcb.ashx
IP 65.17.230.58:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /-/media/images/icons/icon_landing_hpcb.ashx HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; utmCampaign_Lifetime=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 301 301
Location: https://www.vitas.com/-/media/images/icons/icon_landing_hpcb.ashx
Date: Wed, 21 Sep 2022 10:52:26 GMT
Content-Length: 0
analytics.convertlanguage.com/mpwat.js
3.20.48.39200 OK 28 kB URL HTTP/2 analytics.convertlanguage.com/mpwat.js
IP 3.20.48.39:0
File type C source, ASCII text, with very long lines (2301)
Hash 8772fcb2faac2b0f5a8dadcbdf34e4ae
d20404934d6db3b7aafeff08169c22c676f5293e
fa8d7c0c17500bcb5e91eee17ba759eab4a23ba0efe2fb56f137830a8c4a1243
GET /mpwat.js HTTP/1.1
Host: analytics.convertlanguage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:27 GMT
content-type: application/javascript
content-length: 27848
server: Apache
last-modified: Wed, 11 Aug 2021 16:12:58 GMT
etag: "6cc8-5c94ae4507def"
accept-ranges: bytes
X-Firefox-Spdy: h2
zh.vitas.com/-/media/images/icons/icon_landing_fcs.ashx
65.17.230.58301 301 0 B URL HTTP/1.1 zh.vitas.com/-/media/images/icons/icon_landing_fcs.ashx
IP 65.17.230.58:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /-/media/images/icons/icon_landing_fcs.ashx HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; utmCampaign_Lifetime=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 301 301
Location: https://www.vitas.com/-/media/images/icons/icon_landing_fcs.ashx
Date: Wed, 21 Sep 2022 10:52:26 GMT
Content-Length: 0
zh.vitas.com/-/media/images/icons/icon_landing_hp.ashx
65.17.230.58301 301 0 B URL HTTP/1.1 zh.vitas.com/-/media/images/icons/icon_landing_hp.ashx
IP 65.17.230.58:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /-/media/images/icons/icon_landing_hp.ashx HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/care-services/personalized-care-plans-by-diagnosis/kidney-failure
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; utmCampaign_Lifetime=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 301 301
Location: https://www.vitas.com/-/media/images/icons/icon_landing_hp.ashx
Date: Wed, 21 Sep 2022 10:52:26 GMT
Content-Length: 0
esvitas.mpeasylink.com/mpel/mpel_ssd.js
54.174.98.17200 1.3 kB URL HTTP/1.1 esvitas.mpeasylink.com/mpel/mpel_ssd.js
IP 54.174.98.17:0
File type ASCII text, with very long lines (502)
Hash dd498d12b540b38f0d5092081dc4d833
9f532f1271d35e892f0a96e02e310c5d89fd401f
7d22079878d3c36f0391bbea8f6af833f8de12762ed6ac76a6f4b7ebd702632c
Analyzer Verdict Alert quad9 Sinkholed
GET /mpel/mpel_ssd.js HTTP/1.1
Host: esvitas.mpeasylink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: nginx
Date: Wed, 21 Sep 2022 10:52:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"3276-1608738848000"
Last-Modified: Wed, 23 Dec 2020 15:54:08 GMT
Cache-Control: max-age=86400
Expires: Thu, 22 Sep 2022 10:52:27 GMT
vary: accept-encoding
Content-Encoding: gzip
analytics.convertlanguage.com/__utm.gif?utmwv=1&utmn=715986653&utmcs=UTF-8&utmsr=1280x1024&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmhn=zh.vitas.com&utmr=-&utmcc=__utma%3D182041452.715986653.1663757548.1663757548.1663757548.1%3B%2B__utmb%3D182041452%3B%2B__utmc%3D182041452%3B%2B__utmz%3D182041452.1663757548.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)%3B%2B&utmdt=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&utmp=%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure
3.20.48.39200 OK 35 B URL HTTP/2 analytics.convertlanguage.com/__utm.gif?utmwv=1&utmn=715986653&utmcs=UTF-8&utmsr=1280x1024&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmhn=zh.vitas.com&utmr=-&utmcc=__utma%3D182041452.715986653.1663757548.1663757548.1663757548.1%3B%2B__utmb%3D182041452%3B%2B__utmc%3D182041452%3B%2B__utmz%3D182041452.1663757548.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)%3B%2B&utmdt=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&utmp=%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure
IP 3.20.48.39:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /__utm.gif?utmwv=1&utmn=715986653&utmcs=UTF-8&utmsr=1280x1024&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmhn=zh.vitas.com&utmr=-&utmcc=__utma%3D182041452.715986653.1663757548.1663757548.1663757548.1%3B%2B__utmb%3D182041452%3B%2B__utmc%3D182041452%3B%2B__utmz%3D182041452.1663757548.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)%3B%2B&utmdt=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&utmp=%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure HTTP/1.1
Host: analytics.convertlanguage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:27 GMT
content-type: image/gif
content-length: 35
server: Apache
last-modified: Tue, 14 May 2019 17:36:38 GMT
etag: "23-588dc79a526c8"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.vitas.com/-/media/images/icons/icon_landing_hpcb.ashx
40.71.11.139200 OK 976 B URL HTTP/1.1 www.vitas.com/-/media/images/icons/icon_landing_hpcb.ashx
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ab981dbf1261ce5c70dc63c3dac1d158
bb26653766c9a1bad8ca8f4978dc98dbd14cc320
7fa9343787217c863fa687fa6c7e759e13cb51b17b8308e5ecb3cb6e483c64bc
GET /-/media/images/icons/icon_landing_hpcb.ashx HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zh.vitas.com/
Connection: keep-alive
Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; invoca_session=%7B%22ttl%22%3A%222022-10-21T10%3A52%3A27.427Z%22%2C%22session%22%3A%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D%2C%22config%22%3A%7B%22ce%22%3Atrue%2C%22fv%22%3Afalse%2C%22rn%22%3Afalse%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 976
Content-Type: image/svg+xml
Date: Wed, 21 Sep 2022 10:52:27 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: private, max-age=604800
Last-Modified: Tue, 28 May 2019 17:56:30 GMT
Content-Disposition: inline; filename="Icon_Landing_HPCB.svg"
www.vitas.com/-/media/images/icons/icon_landing_hp.ashx
40.71.11.139200 OK 1.2 kB URL HTTP/1.1 www.vitas.com/-/media/images/icons/icon_landing_hp.ashx
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 23d5729e4c5b206ac14ae35c6d753370
04d8961ec8543d6f93dbc4672dac4620b906f2d1
bca3fb90b071bb4766664aabdd431c1da7200f80090b8ca370a7c306febe3eb7
GET /-/media/images/icons/icon_landing_hp.ashx HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zh.vitas.com/
Connection: keep-alive
Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; invoca_session=%7B%22ttl%22%3A%222022-10-21T10%3A52%3A27.427Z%22%2C%22session%22%3A%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D%2C%22config%22%3A%7B%22ce%22%3Atrue%2C%22fv%22%3Afalse%2C%22rn%22%3Afalse%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 1174
Content-Type: image/svg+xml
Date: Wed, 21 Sep 2022 10:52:27 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: private, max-age=604800
Last-Modified: Tue, 28 May 2019 17:55:48 GMT
Content-Disposition: inline; filename="Icon_Landing_HP.svg"
www.vitas.com/-/media/images/icons/icon_landing_fcs.ashx
40.71.11.139200 OK 1.9 kB URL HTTP/1.1 www.vitas.com/-/media/images/icons/icon_landing_fcs.ashx
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b0ae0d34927b3e6785d59feabd0fc1bf
33dd7afc05803e14edc0c61f79296fa43488bea1
3494206a7558fa97f5c7a398cac34eb243891cf83986898978c6bb7cd59a7218
GET /-/media/images/icons/icon_landing_fcs.ashx HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zh.vitas.com/
Connection: keep-alive
Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; invoca_session=%7B%22ttl%22%3A%222022-10-21T10%3A52%3A27.427Z%22%2C%22session%22%3A%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D%2C%22config%22%3A%7B%22ce%22%3Atrue%2C%22fv%22%3Afalse%2C%22rn%22%3Afalse%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 1879
Content-Type: image/svg+xml
Date: Wed, 21 Sep 2022 10:52:27 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: private, max-age=604800
Last-Modified: Tue, 28 May 2019 17:55:08 GMT
Content-Disposition: inline; filename="Icon_Landing_FCS.svg"
esvitas.mpeasylink.com/mpel/mpel_storage.html?cmd=storePref&href=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&siteurl=zh.vitas.com&lang=zt&country=®ion=&sitelist=www.vitas.com,www.vitas.com,stage.vitas.com,beta.vitas.com,komodo.vitas.com,iguana.vitas.com,gecko.vitas.com,lazarus.vitas.com,dragon.vitas.com;espanol.vitas.com,eskomodo.vitas.com,esiguana.vitas.com,esgecko.vitas.com,eslazarus.vitas.com,esdragon.vitas.com;zh.vitas.com,zhkomodo.vitas.com,zhiguana.vitas.com,zhgecko.vitas.com,zhlazarus.vitas.com,zhdragon.vitas.com;tl.vitas.com,tlkomodo.vitas.com,tliguana.vitas.com,tlgecko.vitas.com,tllazarus.vitas.com,tldragon.vitas.com;vi.vitas.com,vikomodo.vitas.com,viiguana.vitas.com,vigecko.vitas.com,vilazarus.vitas.com,vidragon.vitas.com¤cy=&nonMP=false&mode=&uuid=1a0c44a2382342b68627db701684b464
54.174.98.17200 1.2 kB URL HTTP/1.1 esvitas.mpeasylink.com/mpel/mpel_storage.html?cmd=storePref&href=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&siteurl=zh.vitas.com&lang=zt&country=®ion=&sitelist=www.vitas.com,www.vitas.com,stage.vitas.com,beta.vitas.com,komodo.vitas.com,iguana.vitas.com,gecko.vitas.com,lazarus.vitas.com,dragon.vitas.com;espanol.vitas.com,eskomodo.vitas.com,esiguana.vitas.com,esgecko.vitas.com,eslazarus.vitas.com,esdragon.vitas.com;zh.vitas.com,zhkomodo.vitas.com,zhiguana.vitas.com,zhgecko.vitas.com,zhlazarus.vitas.com,zhdragon.vitas.com;tl.vitas.com,tlkomodo.vitas.com,tliguana.vitas.com,tlgecko.vitas.com,tllazarus.vitas.com,tldragon.vitas.com;vi.vitas.com,vikomodo.vitas.com,viiguana.vitas.com,vigecko.vitas.com,vilazarus.vitas.com,vidragon.vitas.com¤cy=&nonMP=false&mode=&uuid=1a0c44a2382342b68627db701684b464
IP 54.174.98.17:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (660)
Hash f5434170cf449014a1399b72c1d5e486
23e7fc0ecac26c13fba39246263e9cb7f7d0307f
51c739bd9dd80b6cdff048d6338233d6748f577883deacd27db15d79797d1d74
Analyzer Verdict Alert quad9 Sinkholed
GET /mpel/mpel_storage.html?cmd=storePref&href=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&siteurl=zh.vitas.com&lang=zt&country=®ion=&sitelist=www.vitas.com,www.vitas.com,stage.vitas.com,beta.vitas.com,komodo.vitas.com,iguana.vitas.com,gecko.vitas.com,lazarus.vitas.com,dragon.vitas.com;espanol.vitas.com,eskomodo.vitas.com,esiguana.vitas.com,esgecko.vitas.com,eslazarus.vitas.com,esdragon.vitas.com;zh.vitas.com,zhkomodo.vitas.com,zhiguana.vitas.com,zhgecko.vitas.com,zhlazarus.vitas.com,zhdragon.vitas.com;tl.vitas.com,tlkomodo.vitas.com,tliguana.vitas.com,tlgecko.vitas.com,tllazarus.vitas.com,tldragon.vitas.com;vi.vitas.com,vikomodo.vitas.com,viiguana.vitas.com,vigecko.vitas.com,vilazarus.vitas.com,vidragon.vitas.com¤cy=&nonMP=false&mode=&uuid=1a0c44a2382342b68627db701684b464 HTTP/1.1
Host: esvitas.mpeasylink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: nginx
Date: Wed, 21 Sep 2022 10:52:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Accept-Ranges: bytes
ETag: W/"2759-1608738848000"
Last-Modified: Wed, 23 Dec 2020 15:54:08 GMT
vary: accept-encoding
Content-Encoding: gzip
analytics.convertlanguage.com/el3.gif?ea=none&er=def&d_lang=&d_country=&d_curr=&hn=zh.vitas.com&i_lang=zt&i_country=&i_curr=&s_bl=en&s_ref=&s_rl=&s_ll=no&s_geo=no&s_nl=en-US&c_lang=&alg_sig=00000&uuid=1a0c44a2382342b68627db701684b464&ua=na&et=1&f_lang=&f_country=&f_curr=&hist=&tpl=e_T1L1_v3.9.13.0&url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&
3.20.48.39200 OK 35 B URL HTTP/2 analytics.convertlanguage.com/el3.gif?ea=none&er=def&d_lang=&d_country=&d_curr=&hn=zh.vitas.com&i_lang=zt&i_country=&i_curr=&s_bl=en&s_ref=&s_rl=&s_ll=no&s_geo=no&s_nl=en-US&c_lang=&alg_sig=00000&uuid=1a0c44a2382342b68627db701684b464&ua=na&et=1&f_lang=&f_country=&f_curr=&hist=&tpl=e_T1L1_v3.9.13.0&url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&
IP 3.20.48.39:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /el3.gif?ea=none&er=def&d_lang=&d_country=&d_curr=&hn=zh.vitas.com&i_lang=zt&i_country=&i_curr=&s_bl=en&s_ref=&s_rl=&s_ll=no&s_geo=no&s_nl=en-US&c_lang=&alg_sig=00000&uuid=1a0c44a2382342b68627db701684b464&ua=na&et=1&f_lang=&f_country=&f_curr=&hist=&tpl=e_T1L1_v3.9.13.0&url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure& HTTP/1.1
Host: analytics.convertlanguage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:27 GMT
content-type: image/gif
content-length: 35
server: Apache
last-modified: Tue, 14 May 2019 17:36:29 GMT
etag: "23-588dc79153f13"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash 92f49bcd5e7ab7777936202e3511d409
9730bdb2c670654d8e55b5facf7cbcf03987496b
89f35c2f9272d4ee313e0fb2cdc2a0c82eb0cbf706b37ba90e62fcbba52b3bd0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 10:52:27 GMT
Last-Modified: Wed, 21 Sep 2022 09:04:15 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: AZBsf0vyRNbYHHby-xdfzVMKh5A-UVoESFPjmDKDDp68zoOTr72KBQ==
Age: 6492
z.moatads.com/addthismoatframe568911941483/moatframe.js
23.38.201.146200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP 23.38.201.146:0
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=25763
date: Wed, 21 Sep 2022 10:52:27 GMT
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
188.125.94.206200 OK 5.9 kB IP 188.125.94.206:0
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Q8BiV/ucv/Ez1/+s9h8GVsJ91zloHvZ+rURklnTayS1O4b9M8PcK6A4UnFd4vhkZid+ved43Rss=
x-amz-request-id: EHCKV7DYTJEE0JYA
date: Wed, 21 Sep 2022 10:05:41 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 2807
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Wed, 21 Sep 2022 10:41:12 GMT
expires: Wed, 21 Sep 2022 12:41:12 GMT
cache-control: public, max-age=7200
age: 675
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pnapi.invoca.net/1597/na.jsonp?network_id=1597&js_version=4.27.0&tag_id=1597%2F3515805266&request_data_shared_params=%7B%22entry_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22first_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22g_cid%22%3A%22211402334.1663757546%22%2C%22journey%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22last_landing_page%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A16%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&request_data=%5B%7B%22request_id%22%3A%22384824%22%2C%22advertiser_campaign_id_from_network%22%3A%22384824%22%7D%5D&destination_settings=%7B%22paramName%22%3Anull%7D&metrics=%5B%5B%22beaconSupported%22%2C%22counter%22%5D%5D&jsoncallback=json_rr1&
35.170.250.15200 OK 275 B URL HTTP/1.1 pnapi.invoca.net/1597/na.jsonp?network_id=1597&js_version=4.27.0&tag_id=1597%2F3515805266&request_data_shared_params=%7B%22entry_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22first_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22g_cid%22%3A%22211402334.1663757546%22%2C%22journey%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22last_landing_page%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A16%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&request_data=%5B%7B%22request_id%22%3A%22384824%22%2C%22advertiser_campaign_id_from_network%22%3A%22384824%22%7D%5D&destination_settings=%7B%22paramName%22%3Anull%7D&metrics=%5B%5B%22beaconSupported%22%2C%22counter%22%5D%5D&jsoncallback=json_rr1&
IP 35.170.250.15:0
File type ASCII text, with no line terminators
Hash e60fa2c9f5f7968f74f73344a4b7c2a6
8283b5719dd74fe6681327d5c5658f35babe0020
1a33bd566c31e83a1c7f85b5059ff1752ef7b1b1d67ff9b5a7891b3f58e8bc44
GET /1597/na.jsonp?network_id=1597&js_version=4.27.0&tag_id=1597%2F3515805266&request_data_shared_params=%7B%22entry_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22first_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22g_cid%22%3A%22211402334.1663757546%22%2C%22journey%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22last_landing_page%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A16%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&request_data=%5B%7B%22request_id%22%3A%22384824%22%2C%22advertiser_campaign_id_from_network%22%3A%22384824%22%7D%5D&destination_settings=%7B%22paramName%22%3Anull%7D&metrics=%5B%5B%22beaconSupported%22%2C%22counter%22%5D%5D&jsoncallback=json_rr1& HTTP/1.1
Host: pnapi.invoca.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Wed, 21 Sep 2022 10:52:27 GMT
processing_time: 23.23195ms
Server: Goliath
Content-Length: 275
Connection: keep-alive
www.google-analytics.com/gtm/optimize.js?id=OPT-5BBS2VK
142.250.74.174200 OK 42 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-5BBS2VK
IP 142.250.74.174:0
File type ASCII text, with very long lines (1720)
Hash c6df69bb212817690518e133cf540fa4
a9a9880bf2ce822fca0c80e689a71b8a7927911a
f2bf2e7cd4cb3c6abf02d2280a88de3caed2126b32edb3b018188f285c968550
GET /gtm/optimize.js?id=OPT-5BBS2VK HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 21 Sep 2022 10:52:27 GMT
expires: Wed, 21 Sep 2022 10:52:27 GMT
cache-control: private, max-age=900
last-modified: Wed, 21 Sep 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42547
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.vitas.com/assets/img/favicons/favicon-16x16.png
40.71.11.139200 OK 365 B URL HTTP/1.1 www.vitas.com/assets/img/favicons/favicon-16x16.png
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 132723920b97004869088124d349276c
3a5de1d0a0d313d5ee8c91e7f90f08987cd49679
53b0625c0069f30ce4b543cc58abddcb283fa3eb92217e2304cbc5cdb307bd8f
GET /assets/img/favicons/favicon-16x16.png HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; invoca_session=%7B%22ttl%22%3A%222022-10-21T10%3A52%3A27.427Z%22%2C%22session%22%3A%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D%2C%22config%22%3A%7B%22ce%22%3Atrue%2C%22fv%22%3Afalse%2C%22rn%22%3Afalse%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 365
Content-Type: image/png
Date: Wed, 21 Sep 2022 10:52:27 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
ETag: "0c5b88756abd81:0"
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
www.vitas.com/assets/img/favicons/apple-touch-icon-152x152.png
40.71.11.139200 OK 6.7 kB URL HTTP/1.1 www.vitas.com/assets/img/favicons/apple-touch-icon-152x152.png
IP 40.71.11.139:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced\012- data
Hash 3a4f317aadbfc70861cc822801a3050d
87a6c3e12782bf94d9abe8d644d4d4fd15a3e617
4ae90cb1b237ff6b00c410006ab2ebfbcf13922f51168263b7f5c5ded26b3d66
GET /assets/img/favicons/apple-touch-icon-152x152.png HTTP/1.1
Host: www.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Cookie: ARRAffinity=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; ARRAffinitySameSite=a8a1326f30000c264659567a09f65f1f53ab77f536cf04b80a18be2903c89156; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.1.211402334.1663757546; invoca_session=%7B%22ttl%22%3A%222022-10-21T10%3A52%3A27.427Z%22%2C%22session%22%3A%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D%2C%22config%22%3A%7B%22ce%22%3Atrue%2C%22fv%22%3Afalse%2C%22rn%22%3Afalse%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 6658
Content-Type: image/png
Date: Wed, 21 Sep 2022 10:52:27 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Cache-Control: max-age=31536000
ETag: "0c5b88756abd81:0"
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
www.clarity.ms/tag/4kbtwukb6r
13.107.246.53200 OK 1.4 kB URL HTTP/2 www.clarity.ms/tag/4kbtwukb6r
IP 13.107.246.53:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1363), with no line terminators
Hash b7dcdf2fe236658376c3d111616bb6af
d82a589180c9ded3e764ed2a382a940239c5f2f4
2d7643f2672a86443488df0f8d914b601ebd64d2eb512ffcc6c36a2b7642651d
GET /tag/4kbtwukb6r HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-length: 1363
content-type: application/x-javascript
expires: -1
set-cookie: CLID=cde7e42557644d3fb64ffbe771486956.20220921.20230921; expires=Thu, 21 Sep 2023 10:52:28 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:593e4080-f032-4d00-a652-e17f01252a9d
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 06+wqYwAAAABYJSjrqlXJSJTRyeWhWp64TE9OMjFFREdFMTgxNAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Wed, 21 Sep 2022 10:52:27 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9baaa3878151bf5d83c8d7014da17e5d
d8952bdd01ddec1d9a5a480f17ff5e39f6bdb037
1734ff9035c0a9c965cb5047e9fdbc2c1184b6c568066e856c6dbf0b8dc51df3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.yimg.com/wi/config/10099788.json
188.125.94.206200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10099788.json
IP 188.125.94.206:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 66706cf4895b042661f8ba24435be15f
2b91917facefb59f6a1aeb8786f4e24f4c7e6fef
2b914b0ed3590bb0fa6a0e14a988eb19480ff3e1f8beccfd98ad98c731b15402
GET /wi/config/10099788.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rcjZHjBN9Ue8EHYkynaahCcHbG3MKu+kyDZwiLvTFBhYVYO60CiQzhSogz2lrzoVFxxszzeZui0=
x-amz-request-id: D1DX21KD358SE0XJ
date: Wed, 21 Sep 2022 10:52:29 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Mon, 02 May 2022 19:55:59 GMT
x-amz-expiration: expiry-date="Wed, 07 Jun 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "66706cf4895b042661f8ba24435be15f"
x-amz-server-side-encryption: AES256
x-amz-version-id: NW4sHtODetBPYjX49sMslST3rZ9CEJr5
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 1
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-1886974-1&cid=211402334.1663757546&jid=483278265&uid=23206ece-b70d-4e93-8b31-c1d3a8d95d85&gjid=1385302792&_gid=652540019.1663757548&_u=aCDAiUAjRAAAAE~&z=14260300
142.251.1.157200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-1886974-1&cid=211402334.1663757546&jid=483278265&uid=23206ece-b70d-4e93-8b31-c1d3a8d95d85&gjid=1385302792&_gid=652540019.1663757548&_u=aCDAiUAjRAAAAE~&z=14260300
IP 142.251.1.157:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-1886974-1&cid=211402334.1663757546&jid=483278265&uid=23206ece-b70d-4e93-8b31-c1d3a8d95d85&gjid=1385302792&_gid=652540019.1663757548&_u=aCDAiUAjRAAAAE~&z=14260300 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://zh.vitas.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 21 Sep 2022 10:52:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash 0aa058e7720ab11885b4c32010f4e7b0
a7d5d2cce77cac954cdd737f595ef337eb78bf08
70e40c989da6e60a442ad381c96f483edbe6afcf655025c6390554bef80a5364
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 10:52:28 GMT
Last-Modified: Wed, 21 Sep 2022 09:12:49 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HXlWwNK_cQozaw3Mlf20DdKKmcBfMwXzo_UqD1kslfPSCtDcLsjS-w==
Age: 5979
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9baaa3878151bf5d83c8d7014da17e5d
d8952bdd01ddec1d9a5a480f17ff5e39f6bdb037
1734ff9035c0a9c965cb5047e9fdbc2c1184b6c568066e856c6dbf0b8dc51df3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tags.srv.stackadapt.com/events.js
54.226.8.81200 OK 5.4 kB URL HTTP/1.1 tags.srv.stackadapt.com/events.js
IP 54.226.8.81:0
File type ASCII text, with very long lines (16677)
Hash c0c16bc4538ecbfe0c4b995be0e7b518
f31012a4d9b01c44d4fb75e53875c6b1261fbcc8
e654976fc3f27c7cf9557fb5f4095e58355a77290ed0d0f48e6e8e66eb4f5e48
GET /events.js HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: max-age=5
Content-Encoding: gzip
Content-Type: text/javascript
Date: Wed, 21 Sep 2022 10:52:28 GMT
Set-Cookie: sa-user-id=s%3A0-e51ff5f0-78bc-4744-57c7-0afd845ca851.7qxEtAeb0%2FXAGV9naTUi2xLuEAPY%2Bi11ifORmmUGAj0; Max-Age=31536000; Secure; SameSite=None
sa-user-id-v2=s%3A5R_18Hi8R0RXxwr9hFyoUVtaKpo.u6KqbXE8NFIcAuElJcJxVmamaXzjBu%2BK%2B8WEuqp5QTA; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
Content-Length: 5399
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash fde987c85b17b2242afddd76c3fd3b62
08e87b8185fc39462e6b331d565a864df2fd5865
49bc15e88c546089cc42939f8dc9f7046f1dd98332c31cf52435586bc8ea177c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 67b756e82caefc7860b9f2d4a4f40341
adeae15d52089bcca4ca247fc4aebceef8406e34
72ff9f52080a633dc841554f7d4cc70083edd2572b535d84093ae63f0c50b832
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-1886974-1&cid=211402334.1663757546&jid=483278265&_u=aCDAiUAjRAAAAE~&z=841215875
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-1886974-1&cid=211402334.1663757546&jid=483278265&_u=aCDAiUAjRAAAAE~&z=841215875
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-1886974-1&cid=211402334.1663757546&jid=483278265&_u=aCDAiUAjRAAAAE~&z=841215875 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 10:52:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-1886974-1&cid=211402334.1663757546&jid=483278265&_u=aCDAiUAjRAAAAE~&z=841215875
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-1886974-1&cid=211402334.1663757546&jid=483278265&_u=aCDAiUAjRAAAAE~&z=841215875
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-1886974-1&cid=211402334.1663757546&jid=483278265&_u=aCDAiUAjRAAAAE~&z=841215875 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 10:52:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash fde987c85b17b2242afddd76c3fd3b62
08e87b8185fc39462e6b331d565a864df2fd5865
49bc15e88c546089cc42939f8dc9f7046f1dd98332c31cf52435586bc8ea177c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tags.srv.stackadapt.com/sa.css
54.226.8.81200 OK 27 B URL HTTP/1.1 tags.srv.stackadapt.com/sa.css
IP 54.226.8.81:0
Hash 83f5ba33314db5f218488a5a51da1455
87a21689afa235c4c65437334085be4bf5cca170
3f100e5e6ff270dadb43b44878f0118a2389dee0d844acc102b5179d70a824dc
GET /sa.css HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Content-Type: text/css
Date: Wed, 21 Sep 2022 10:52:28 GMT
Content-Length: 27
Connection: keep-alive
sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2021%20Sep%202022%2010%3A52%3A28%20GMT&n=0&b=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&.yp=10099788&f=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&enc=UTF-8&yv=1.13.0&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2021%20Sep%202022%2010%3A52%3A28%20GMT&n=0&b=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&.yp=10099788&f=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Wed%2C%2021%20Sep%202022%2010%3A52%3A28%20GMT&n=0&b=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&.yp=10099788&f=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:28 GMT
expires: Wed, 21 Sep 2022 10:52:28 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBOzsKmMCECKSgdQaagVPXxfRwOAMLJYFEgEBAQE-LGM0YwAAAAAA_eMAAA&S=AQAAAte2Wlpfv5H1CjqyG3LIrnI; Expires=Thu, 21 Sep 2023 16:52:28 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash bb4bdc4c3c6869c822618f0b9ef1bdc5
6a438b8d9d87aa30e0989ace7fc0d4cafce1f29d
eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.adroll.com/j/AWJXGDTO3BCO7AKQ4V3BOK/roundtrip.js
143.204.55.72200 OK 18 kB URL HTTP/1.1 s.adroll.com/j/AWJXGDTO3BCO7AKQ4V3BOK/roundtrip.js
IP 143.204.55.72:0
File type ASCII text, with very long lines (1326)
Hash c6f1a4ff295b523ede3585e64635afc2
af20671a8310fe0a94cb10d56cf5bbbbdceff743
36aa47d3c42210e0af290fb6db5a064928088dff8bbccf81d6e69fff4e497df7
GET /j/AWJXGDTO3BCO7AKQ4V3BOK/roundtrip.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 04:30:15 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: HCTSxHzhLE1d4m2WXigTGtLypaz1AdTw
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 21 Sep 2022 10:52:29 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"e52d03c1e0858280d0eef276b8271b5b"
Vary: Accept-Encoding
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: RefreshHit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VHTMFVYmI046vB0IGt4l72VDTX2M2nkad57PwGFqMz1VFKHYiI1dUw==
s.adroll.com/j/exp/AWJXGDTO3BCO7AKQ4V3BOK/index.js
143.204.55.72302 Moved Temporarily 0 B URL HTTP/1.1 s.adroll.com/j/exp/AWJXGDTO3BCO7AKQ4V3BOK/index.js
IP 143.204.55.72:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/exp/AWJXGDTO3BCO7AKQ4V3BOK/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
Content-Length: 0
Connection: keep-alive
Date: Wed, 21 Sep 2022 08:28:46 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/exp/index.js
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
Age: 8622
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Z4rP0FhHBuky6Y1oNz6M-Ua0SGU--CQNuugrXyCFQl3lkcptuIkfmA==
s.adroll.com/j/exp/index.js
143.204.55.72200 OK 28 B URL HTTP/1.1 s.adroll.com/j/exp/index.js
IP 143.204.55.72:0
File type ASCII text, with no line terminators
Hash 5816cced8568d223aa09d889f300692b
95cab5e474d7391762c3da5c7dc50fcf05df529f
f59e5f34a941183aacaed25322ac0856628493c2cfd936ded3fddc0a49510e52
GET /j/exp/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zh.vitas.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 28
Connection: keep-alive
Last-Modified: Fri, 02 Sep 2022 17:25:28 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: VS8aSrwndm.MeiNnyJ10ruHH56v74CIF
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 21 Sep 2022 03:06:29 GMT
Etag: "5816cced8568d223aa09d889f300692b"
Vary: Accept-Encoding
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
Age: 29780
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: InkjIM0Z1kfDcBxInX6lxVSpBOzN8J6-wOFp7Fw6zIhXX-t24N1mXg==
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
23.38.200.123200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP 23.38.200.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Wed, 21 Sep 2022 10:52:28 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
zh.vitas.com/assets/img/icon-plus-blue-small.svg
65.17.230.58200 200 265 B URL HTTP/1.1 zh.vitas.com/assets/img/icon-plus-blue-small.svg
IP 65.17.230.58:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 8182f3493486688f6172bfaf16a95dbe
90095b817c675c1aa53d496cded34ebe3b29c29d
f34ed308343d7d127e22ed838aa8a8fd6789a71adcad9292806addcccd74f351
GET /assets/img/icon-plus-blue-small.svg HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/assets/css/mastersubpage.css
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.2.211402334.1663757546; utmCampaign_Lifetime=true; invoca_session=%7B%22ttl%22%3A%222022-10-21T10%3A52%3A27.934Z%22%2C%22session%22%3A%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D%2C%22config%22%3A%7B%22ce%22%3Atrue%2C%22fv%22%3Afalse%2C%22rn%22%3Afalse%7D%7D; mp__utma=182041452.715986653.1663757548.1663757548.1663757548.1; mp__utmb=182041452; mp__utmc=182041452; mp__utmz=182041452.1663757548.1.1.utmccn=(direct)|utmcsr=(direct)|utmcmd=(none); _gid=GA1.2.652540019.1663757548; _dc_gtm_UA-1886974-1=1; _clck=1yioole|1|f52|0; sa-user-id=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851.7qxEtAeb0%252FXAGV9naTUi2xLuEAPY%252Bi11ifORmmUGAj0; sa-user-id-v2=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851%2524ip%252491.90.42.154.6qC36vOUjPW%252FxuiLvS9Xe0mbtRJbrorkIdD0NB8Xdy8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 200
Cache-Control: max-age=31536000
Content-Type: image/svg+xml
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
ETag: "0c5b88756abd81:0"
Date: Wed, 21 Sep 2022 10:52:28 GMT
Content-Length: 265
zh.vitas.com/assets/img/icon-minus-blue-small.svg
65.17.230.58200 200 180 B URL HTTP/1.1 zh.vitas.com/assets/img/icon-minus-blue-small.svg
IP 65.17.230.58:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash bd4e02660c620da66a4de6311ce9960e
042fd577865d307b770e35274c1ece2721cd88fa
8565c8188db3983d472442f8d1f86c2d46be817bc674298e81e73277fff95f61
GET /assets/img/icon-minus-blue-small.svg HTTP/1.1
Host: zh.vitas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/assets/css/mastersubpage.css
Cookie: ASP.NET_SessionId=boqrze2vc0bj4pkfq35u5gca; SC_ANALYTICS_GLOBAL_COOKIE=30cf46c6422f4590b4e5bed6b765e4d5|False; ARRAffinity=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; ARRAffinitySameSite=52534756bc24481c0848ee2def3c54a057fd0e51707d9dcf782aa603bbaa9f24; _ga_7T657PQQ1Q=GS1.1.1663757546.1.0.1663757546.0.0.0; _ga=GA1.2.211402334.1663757546; utmCampaign_Lifetime=true; invoca_session=%7B%22ttl%22%3A%222022-10-21T10%3A52%3A27.934Z%22%2C%22session%22%3A%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%7D%2C%22config%22%3A%7B%22ce%22%3Atrue%2C%22fv%22%3Afalse%2C%22rn%22%3Afalse%7D%7D; mp__utma=182041452.715986653.1663757548.1663757548.1663757548.1; mp__utmb=182041452; mp__utmc=182041452; mp__utmz=182041452.1663757548.1.1.utmccn=(direct)|utmcsr=(direct)|utmcmd=(none); _gid=GA1.2.652540019.1663757548; _dc_gtm_UA-1886974-1=1; _clck=1yioole|1|f52|0; sa-user-id=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851.7qxEtAeb0%252FXAGV9naTUi2xLuEAPY%252Bi11ifORmmUGAj0; sa-user-id-v2=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851%2524ip%252491.90.42.154.6qC36vOUjPW%252FxuiLvS9Xe0mbtRJbrorkIdD0NB8Xdy8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 200
Cache-Control: max-age=31536000
Content-Type: image/svg+xml
Last-Modified: Mon, 08 Aug 2022 18:41:54 GMT
ETag: "0c5b88756abd81:0"
Date: Wed, 21 Sep 2022 10:52:28 GMT
Content-Length: 180
tags.srv.stackadapt.com/sa.jpeg
54.226.8.81200 OK 651 B URL HTTP/1.1 tags.srv.stackadapt.com/sa.jpeg
IP 54.226.8.81:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3\012- data
Hash a1732dbd09f54c033fd001368549e1f5
e8780e842cfb0aa679bad581da531d18f5847b30
2a6c0413e1ed447aac0e667a82e6c69bda9465df4881188097fe60700f45c4e3
GET /sa.jpeg HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zh.vitas.com/
Origin: https://zh.vitas.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Content-Type: image/jpeg
Date: Wed, 21 Sep 2022 10:52:28 GMT
Content-Length: 651
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3ca08f899d44591a33730004f810d125
e88c6cfe0236f7d9fa82db40d16740b5c440f613
7476bb62c1ec4101a3717111a10d4fe0d0807bb02db4b5df76ed2ff1dedc2561
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5100
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:28 GMT
Last-Modified: Wed, 21 Sep 2022 09:27:28 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278
c.betrad.com/pub/tag.js
72.247.42.93200 OK 1.3 kB IP 72.247.42.93:0
File type ASCII text, with very long lines (2932), with no line terminators
Hash 812eb988082cad1391c7fc6c81e39aba
33e010cf311cbb22be79b6e44f78956bb72f74d0
7ad685255c05a74ab8ad592bc230790c5536d9a2d147b84624de9a3bfa2aa1ed
GET /pub/tag.js HTTP/1.1
Host: c.betrad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "e9d0b4bc8cde1a2da50ac97b3cb6f9f3:1660073332.060438"
last-modified: Tue, 09 Aug 2022 19:28:52 GMT
server: AkamaiNetStorage
content-encoding: gzip
cache-control: max-age=172800
date: Wed, 21 Sep 2022 10:52:28 GMT
content-length: 1251
vary: Accept-Encoding, Origin
access-control-max-age: 108000
access-control-allow-origin:
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS,POST
X-Firefox-Spdy: h2
c.betrad.com/pub/icon1.png
72.247.42.93200 OK 623 B URL HTTP/2 c.betrad.com/pub/icon1.png
IP 72.247.42.93:0
File type PNG image data, 14 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash f3da3ffcdd147cc49b203c8ecdaf5edc
da7d1b3c1967bce32b1dd620ebbfef52452adc16
6633d38dcc8914e95a0c71437a45c9ca96adeb7a0d5012d95f6f279f453e762a
GET /pub/icon1.png HTTP/1.1
Host: c.betrad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
etag: "d08da9f445b63100a56646de99043059:1307039438"
last-modified: Thu, 02 Jun 2011 18:30:38 GMT
server: AkamaiNetStorage
unused62: 8096267
content-encoding: gzip
cache-control: max-age=864000
date: Wed, 21 Sep 2022 10:52:28 GMT
content-length: 623
vary: Accept-Encoding, Origin
access-control-max-age: 108000
access-control-allow-origin:
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS,POST
X-Firefox-Spdy: h2
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 700
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://zh.vitas.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Wed, 21 Sep 2022 10:52:28 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3ca08f899d44591a33730004f810d125
e88c6cfe0236f7d9fa82db40d16740b5c440f613
7476bb62c1ec4101a3717111a10d4fe0d0807bb02db4b5df76ed2ff1dedc2561
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5100
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:28 GMT
Last-Modified: Wed, 21 Sep 2022 09:27:28 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.66200 OK 58 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP 142.250.74.66:0
File type ASCII text, with very long lines (2903)
Hash 8ce20e0920e41a9d1d41236921161e15
4424142aa1c521f58b8d789ef360910bbad90bf0
3d2c2f9361289d9c880612d00fcc717dd131379aa5a568e96559c6d78690779a
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
date: Wed, 21 Sep 2022 10:52:28 GMT
expires: Wed, 21 Sep 2022 10:52:28 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15628457003242540634
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 57978
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20220915/r20190131/zrt_lookup.html
142.250.74.162200 OK 4.4 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20220915/r20190131/zrt_lookup.html
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash 682bf699cccbc0ff817e1fcb7b95262a
11ad3edf0008f52b733c2d6d7199e1f052318d58
bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
GET /pagead/html/r20220915/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
date: Tue, 20 Sep 2022 20:35:43 GMT
expires: Tue, 04 Oct 2022 20:35:43 GMT
cache-control: public, max-age=1209600
age: 51406
etag: 9671129459699598864
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
content.inpwrd.net/data/lineitem/499/https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure?callback=__jp0
3.230.214.16200 OK 158 B URL HTTP/2 content.inpwrd.net/data/lineitem/499/https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure?callback=__jp0
IP 3.230.214.16:0
File type ASCII text, with no line terminators
Hash afabdecf0029ee9c7f3f58975f81aa23
71936bdb7031bf07f0a2dcff8cda2aaac821e484
d7f504f8e3e73dce963ce42aeafc08cb1b816d4b2f42da7891b435ef17219caa
GET /data/lineitem/499/https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure?callback=__jp0 HTTP/1.1
Host: content.inpwrd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/javascript; charset=utf-8
content-length: 158
x-dns-prefetch-control: off
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
surrogate-control: no-store
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
vary: Accept-Encoding
X-Firefox-Spdy: h2
s7.addthis.com/l10n/client.zh.min.json
23.38.200.123200 OK 1.5 kB URL HTTP/2 s7.addthis.com/l10n/client.zh.min.json
IP 23.38.200.123:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1553), with no line terminators
Hash 6a7c2439f63d550c4dcef8b6b57de08c
e4aa9e28cfafc58327965960634e174c71fa1973
acd75a6f90a7f47c3299b7dfdcebda3005876f6dd80c37160eec7c91e8b10e08
GET /l10n/client.zh.min.json HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
last-modified: Tue, 10 Sep 2019 15:15:17 GMT
etag: W/"5d77be05-a39"
cache-control: public, s-maxage=604800
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 1523
date: Wed, 21 Sep 2022 10:52:29 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash f6c21d505e02f4cb0db903ee5e68e398
b7cf380a2cbf7993c629351e580fb0dab213e9fd
f9441e8d3f7c1a55cbec8a870647d14008b38485c76d2a5bac7ac751a47c3f23
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 10:52:29 GMT
Last-Modified: Wed, 21 Sep 2022 10:29:07 GMT
Server: ECS (nyb/1D2B)
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3iEsi-qD6jZI_Lf5E_7aqDGvqZK4FaJF4qLyvPs-umKuoW5r6Cu5sg==
Age: 1402
origin.acuityplatform.com/event/v2/pixel.js
104.110.25.90200 OK 2.2 kB URL HTTP/1.1 origin.acuityplatform.com/event/v2/pixel.js
IP 104.110.25.90:0
File type HTML document, ASCII text, with very long lines (2158)
Hash 443c7fbac7b639cf13dd7a7231665748
bfadb3d10f32292dff00be08bb385613d4bee79f
1823ed6d967b506b110a547735f2e4eae2279a4147925bab4da6e7d676175a5b
GET /event/v2/pixel.js HTTP/1.1
Host: origin.acuityplatform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Content-Type: application/javascript
Content-Length: 2159
Last-Modified: Wed, 03 Nov 2021 20:59:24 GMT
ETag: "6182f82c-86f"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Wed, 21 Sep 2022 10:52:29 GMT
Connection: keep-alive
snap.licdn.com/li.lms-analytics/insight.min.js
23.36.76.210200 OK 3.1 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP 23.36.76.210:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7751)
Hash 57efbbeb3e1d23c82b677511c67c8b0e
f927ba115ef4be362694c22850ddbdd1c1b054d1
873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=47114
date: Wed, 21 Sep 2022 10:52:29 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2
tags.srv.stackadapt.com/saq_pxl?uid=PHOt38_XHg0lrXYf-uksIw&is_js=true&landing_url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&t=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&tip=EKefxythmhTMfGAC7yDUd_uaLgke9ZB9iWedepzh5Xw&host=https://zh.vitas.com&sa-user-id-v2=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851%2524ip%252491.90.42.154.6qC36vOUjPW%252FxuiLvS9Xe0mbtRJbrorkIdD0NB8Xdy8&sa-user-id=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851.7qxEtAeb0%252FXAGV9naTUi2xLuEAPY%252Bi11ifORmmUGAj0
54.226.8.81200 OK 116 B URL HTTP/1.1 tags.srv.stackadapt.com/saq_pxl?uid=PHOt38_XHg0lrXYf-uksIw&is_js=true&landing_url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&t=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&tip=EKefxythmhTMfGAC7yDUd_uaLgke9ZB9iWedepzh5Xw&host=https://zh.vitas.com&sa-user-id-v2=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851%2524ip%252491.90.42.154.6qC36vOUjPW%252FxuiLvS9Xe0mbtRJbrorkIdD0NB8Xdy8&sa-user-id=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851.7qxEtAeb0%252FXAGV9naTUi2xLuEAPY%252Bi11ifORmmUGAj0
IP 54.226.8.81:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b082bd2297ffbd3ad013e664feb8d40
995380f4d14f938d3820e6a67f53ecae8a85d99a
6c858cec392242c25e75779f779e148776c19866ba934865333a8027e2f6fcff
GET /saq_pxl?uid=PHOt38_XHg0lrXYf-uksIw&is_js=true&landing_url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&t=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&tip=EKefxythmhTMfGAC7yDUd_uaLgke9ZB9iWedepzh5Xw&host=https://zh.vitas.com&sa-user-id-v2=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851%2524ip%252491.90.42.154.6qC36vOUjPW%252FxuiLvS9Xe0mbtRJbrorkIdD0NB8Xdy8&sa-user-id=s%253A0-e51ff5f0-78bc-4744-57c7-0afd845ca851.7qxEtAeb0%252FXAGV9naTUi2xLuEAPY%252Bi11ifORmmUGAj0 HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: https://zh.vitas.com
Content-Type: text/plain; charset=utf-8
Date: Wed, 21 Sep 2022 10:52:29 GMT
Content-Length: 116
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 14d31c538ef2caf4422a82eae13752fb
64a60fba95891f5dcc3d098c78ca3705d679c073
9bf27ebead2d15f04d2874793cb043a7d650b50902092fe6ae3a5a9891c5cabe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6167
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 10:52:29 GMT
Last-Modified: Wed, 21 Sep 2022 09:09:42 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
bat.bing.com/bat.js
13.107.21.200200 OK 11 kB IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=2738D25B3B2D6D8330BFC07D3A7A6C90; domain=.bing.com; expires=Mon, 16-Oct-2023 10:52:29 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 171EB00864D844E9B173179C1EEFE6E2 Ref B: OSL30EDGE0406 Ref C: 2022-09-21T10:52:29Z
date: Wed, 21 Sep 2022 10:52:28 GMT
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=r6mamjg&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=1h2wv80&upv=1.1.0
15.197.193.217200 OK 2.9 kB URL HTTP/2 insight.adsrvr.org/track/up?adv=r6mamjg&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=1h2wv80&upv=1.1.0
IP 15.197.193.217:0
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 216fabc4d06f1562ed9a8d2c19d84518
951476b3f9e81e11eacbd35712bb53baae8dccfe
464e5e5337cd847ed265f8ee364cc187179a76c9926d9bc6a7b4d6e5122c89b0
GET /track/up?adv=r6mamjg&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=1h2wv80&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
157.240.200.14200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.200.14:0
File type ASCII text, with very long lines (64348)
Hash 9ecd89752214ef749272eef344b9089a
70a58a49c08934265ee34c74efb01d6b3124095d
f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: lWygpcw5C1gDm9cok2zt0Th7/FcrWPW8uHP2j3ETyqhB58JDGUnwYvsMBDO372YJfvi4BcWkgAuNbSwplHbttw==
priority: u=3,i
content-length: 26839
x-fb-trip-id: 1679558926
date: Wed, 21 Sep 2022 10:52:29 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1224286.js?sv=7
143.204.55.84200 OK 3.1 kB URL HTTP/2 static.hotjar.com/c/hotjar-1224286.js?sv=7
IP 143.204.55.84:0
File type ASCII text, with very long lines (3790)
Hash b722e28b0b97b24780c50087f0ebe225
bc21ee8faaed7979ef9345910fe9355325e902d7
59b5f401e4055b08bbc4cf439f61b34e938b19d8cdd6f610972529bde474ab71
GET /c/hotjar-1224286.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 21 Sep 2022 10:52:29 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/1611c0225180ba52f9efdadb7a47f739
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fB4Tl6RJR935_1KGS9sHztpHaF014lPJBoPQshMa6vkAqJ3MLyP6cg==
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
20.234.93.27302 Found 0 B IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=9F45A13D53B74803A4DADC02F7657648&RedC=c.clarity.ms&MXFR=031AE8977866648801C5FAB17C666A19
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=031AE8977866648801C5FAB17C666A19; domain=.clarity.ms; expires=Mon, 16-Oct-2023 10:52:29 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Wed, 21 Sep 2022 10:52:29 GMT
content-length: 0
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300lo.json?si=632aeceb8f67d209&bkl=0&bl=1&pdt=2948&sid=632aeceb8f67d209&pub=ra-5cfaa94494804232&rev=v8.28.8-wp&ln=zh&pc=men&cb=0&ab=-&dp=zh.vitas.com&fp=care-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1663757548643&jsl=1&uvs=632aecebc4fcd2e9000&skipb=1&callback=addthis.cbs.jsonp__76614447361966910
23.38.200.123200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=632aeceb8f67d209&bkl=0&bl=1&pdt=2948&sid=632aeceb8f67d209&pub=ra-5cfaa94494804232&rev=v8.28.8-wp&ln=zh&pc=men&cb=0&ab=-&dp=zh.vitas.com&fp=care-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1663757548643&jsl=1&uvs=632aecebc4fcd2e9000&skipb=1&callback=addthis.cbs.jsonp__76614447361966910
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 9ecbc49372c9aaae2c55b5bb74a83c1a
cf0d4499704e050d9ffd1d766dbb4e43167d9847
522e3dc0bfccecedc595f81e5a6a36781251de2c99598f1267869a385563c4f5
GET /live/red_lojson/300lo.json?si=632aeceb8f67d209&bkl=0&bl=1&pdt=2948&sid=632aeceb8f67d209&pub=ra-5cfaa94494804232&rev=v8.28.8-wp&ln=zh&pc=men&cb=0&ab=-&dp=zh.vitas.com&fp=care-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1663757548643&jsl=1&uvs=632aecebc4fcd2e9000&skipb=1&callback=addthis.cbs.jsonp__76614447361966910 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Wed, 21 Sep 2022 10:52:29 GMT
X-Firefox-Spdy: h2
l.betrad.com/pub/p.gif?pid=8350&ocid=4184&ii=1&mb=0&r=0.15655490157102703
52.6.228.158204 No Content 0 B URL HTTP/2 l.betrad.com/pub/p.gif?pid=8350&ocid=4184&ii=1&mb=0&r=0.15655490157102703
IP 52.6.228.158:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pub/p.gif?pid=8350&ocid=4184&ii=1&mb=0&r=0.15655490157102703 HTTP/1.1
Host: l.betrad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 21 Sep 2022 10:52:29 GMT
x-powered-by: Express
etag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash 1f550dfc4af255641c8167dae65d12d4
52841801316626648c60e89b9eb785c741b53773
b01bc89ab9caf6c5c16f57d709d1b97c6017fb8f37fb2bd5782ef35763cc3fea
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 10:52:29 GMT
Last-Modified: Wed, 21 Sep 2022 09:05:55 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f2ZVHv3Qq8QW5rl5nRkdYELEUOtFb0waAk96f7S7RIyS6CdocEFGLQ==
Age: 6394
script.hotjar.com/modules.f4179535429bf14e77ee.js
143.204.55.46200 OK 65 kB URL HTTP/2 script.hotjar.com/modules.f4179535429bf14e77ee.js
IP 143.204.55.46:0
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 4a99ec558aff503901b33da3d9b4ec1b
83d1a24dacc650c18594a5334ae15a144b5704ec
ad082098bddf0eed29c4d958450687924b052f783a834f58e59495e0c8f3143b
GET /modules.f4179535429bf14e77ee.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 65420
date: Tue, 20 Sep 2022 16:01:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "4a99ec558aff503901b33da3d9b4ec1b"
last-modified: Tue, 20 Sep 2022 16:00:26 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5wn3fAZZvQDpfe6irCnqooonwgnoCvTEJIRiIgMZhFaJDOjV4fMy2g==
age: 67882
X-Firefox-Spdy: h2
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
23.38.200.123200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP 23.38.200.123:0
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 9a77dff666eebb6cf4bbc4c67c7b563b
9e98d7824a7b4e34665c2690d6f52caddad1fe4b
6cdf8e597f3cbe759531153fd926d51aeaebd836a1c9bc1436e079645bfd3ad7
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77672
date: Wed, 21 Sep 2022 10:52:29 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
d.adroll.com/consent/check/AWJXGDTO3BCO7AKQ4V3BOK?arrfrr=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&_s=1904894915771ff563a6894f124365ca&_b=2
52.211.202.0200 OK 447 B URL HTTP/2 d.adroll.com/consent/check/AWJXGDTO3BCO7AKQ4V3BOK?arrfrr=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&_s=1904894915771ff563a6894f124365ca&_b=2
IP 52.211.202.0:0
File type ASCII text, with very long lines (447), with no line terminators
Hash 86fad4864bab32589c662f2746ee2ba7
c980a6400bbca177679c02e42158ab9731362a25
bbc0b94e79cca791b97a281ad28bab35e010e050e9f5ed4f657e2cbb6140b17a
GET /consent/check/AWJXGDTO3BCO7AKQ4V3BOK?arrfrr=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&_s=1904894915771ff563a6894f124365ca&_b=2 HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: application/javascript
content-length: 447
server: nginx/1.20.0
X-Firefox-Spdy: h2
s7.addthis.com/static/custom-messages.5799ddf75a30812a3d49.js
23.38.200.123200 OK 29 kB URL HTTP/2 s7.addthis.com/static/custom-messages.5799ddf75a30812a3d49.js
IP 23.38.200.123:0
File type Unicode text, UTF-8 text, with very long lines (60526)
Hash f4a430f112d94f56cbeddcde217f69b6
01c1580d462c4977c7194746540f813e6b5675ce
f8999cbfee6629cf5f2f77d325a508f30a1adc6f1ab7506c462bf467930f36da
GET /static/custom-messages.5799ddf75a30812a3d49.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-1c9fc"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 28570
date: Wed, 21 Sep 2022 10:52:29 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.22200 OK 1.8 kB IP 192.124.249.22:0
Hash e40276e33e96687c78745d6c9f5b7ef1
f38d1f7fe1dda2f0b5899f550d69f274fb59a037
fdcddecb683eb43806e0ae28588f4d055ce3ca10511847d2982978688ca01b8b
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 21 Sep 2022 10:52:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 20 Sep 2022 22:38:57 GMT
Expires: Wed, 21 Sep 2022 22:38:57 GMT
ETag: "f38d1f7fe1dda2f0b5899f550d69f274fb59a037"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
insight.adsrvr.org/track/up?adv=1v8n31u&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=a0h6ovm&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=1v8n31u&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=a0h6ovm&upv=1.1.0
IP 15.197.193.217:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/up?adv=1v8n31u&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=a0h6ovm&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=9F45A13D53B74803A4DADC02F7657648&RedC=c.clarity.ms&MXFR=031AE8977866648801C5FAB17C666A19
13.107.21.200302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=9F45A13D53B74803A4DADC02F7657648&RedC=c.clarity.ms&MXFR=031AE8977866648801C5FAB17C666A19
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=9F45A13D53B74803A4DADC02F7657648&RedC=c.clarity.ms&MXFR=031AE8977866648801C5FAB17C666A19 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zh.vitas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=9F45A13D53B74803A4DADC02F7657648&MUID=2536A96E231262CE1A32BB4822456365
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=2536A96E231262CE1A32BB4822456365; domain=c.bing.com; expires=Mon, 16-Oct-2023 10:52:29 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 931B610B306C4D5A831F8073459AC2ED Ref B: OSL30EDGE0406 Ref C: 2022-09-21T10:52:29Z
date: Wed, 21 Sep 2022 10:52:29 GMT
content-length: 0
X-Firefox-Spdy: h2
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 97925
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://zh.vitas.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Wed, 21 Sep 2022 10:52:28 GMT
X-Firefox-Spdy: h2
e.acuityplatform.com/pj?pk=5660372742194033200&pu=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure
154.59.122.94204 No Content 0 B URL HTTP/1.1 e.acuityplatform.com/pj?pk=5660372742194033200&pu=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure
IP 154.59.122.94:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pj?pk=5660372742194033200&pu=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure HTTP/1.1
Host: e.acuityplatform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Set-Cookie: auid=694282080664; Domain=acuityplatform.com; Expires=Thu, 21-Sep-2023 10:52:29 GMT; Path=/; SameSite=None; Secure
Access-Control-Allow-Origin: *
www.facebook.com/tr/?id=107074669642349&ev=PageView&dl=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&rl=&if=false&ts=1663757549641&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663757549640.1565624080&it=1663757549309&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET
157.240.200.35200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=107074669642349&ev=PageView&dl=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&rl=&if=false&ts=1663757549641&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663757549640.1565624080&it=1663757549309&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET
IP 157.240.200.35:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=107074669642349&ev=PageView&dl=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&rl=&if=false&ts=1663757549641&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663757549640.1565624080&it=1663757549309&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Wed, 21 Sep 2022 10:52:29 GMT
expires: Wed, 21 Sep 2022 10:52:29 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=9F45A13D53B74803A4DADC02F7657648&MUID=2536A96E231262CE1A32BB4822456365
20.234.93.27200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=9F45A13D53B74803A4DADC02F7657648&MUID=2536A96E231262CE1A32BB4822456365
IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=9F45A13D53B74803A4DADC02F7657648&MUID=2536A96E231262CE1A32BB4822456365 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zh.vitas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Wed, 21-Sep-2022 11:02:29 GMT; path=/; SameSite=None; Secure;
date: Wed, 21 Sep 2022 10:52:29 GMT
content-length: 42
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=12072942&tm=gtm002&Ver=2&mid=8dc08825-4578-4411-85ef-055b6bf929d3&sid=7cf78c00399b11ed971409026e37a16a&vid=7cf79710399b11ed9b11ff7c90ef7f91&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&p=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&r=<=4499&evt=pageLoad&sv=1&rn=736723
13.107.21.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=12072942&tm=gtm002&Ver=2&mid=8dc08825-4578-4411-85ef-055b6bf929d3&sid=7cf78c00399b11ed971409026e37a16a&vid=7cf79710399b11ed9b11ff7c90ef7f91&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&p=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&r=<=4499&evt=pageLoad&sv=1&rn=736723
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=12072942&tm=gtm002&Ver=2&mid=8dc08825-4578-4411-85ef-055b6bf929d3&sid=7cf78c00399b11ed971409026e37a16a&vid=7cf79710399b11ed9b11ff7c90ef7f91&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=%E8%85%8E%E8%A1%B0%E7%AB%AD%E7%97%85%E4%BA%BA%E7%9A%84%E5%AE%89%E5%AF%A7%E7%99%82%E8%AD%B7%E5%8F%8A%E9%81%A9%E7%94%A8%E8%B3%87%E6%A0%BC%20%7C%20VITAS%20Healthcare&p=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&r=<=4499&evt=pageLoad&sv=1&rn=736723 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2B71B25C8685692E35E2A07A87D268A0; domain=.bing.com; expires=Mon, 16-Oct-2023 10:52:29 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: EA730E2A79DD43819B25A6E35725DC37 Ref B: OSL30EDGE0406 Ref C: 2022-09-21T10:52:29Z
date: Wed, 21 Sep 2022 10:52:29 GMT
X-Firefox-Spdy: h2
vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
143.204.55.105200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
IP 143.204.55.105:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Hash f6a9ca04b0687ea3c0d98e8430c8c77b
35503b2deb23091a9a9c6c68d4020dbdf879588e
8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n2OE9_yF1kRjn8v6SI7zGqtwzF9oaegk-QV93e4uIAryCoSNVxEmGA==
age: 1215322
X-Firefox-Spdy: h2
bat.bing.com/p/action/12072942.js
13.107.21.200204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/12072942.js
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/12072942.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=183BC012AB8964260F8AD234AADE651A; domain=.bing.com; expires=Mon, 16-Oct-2023 10:52:29 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8E11761DA0F94F9681DA9910619DC962 Ref B: OSL30EDGE0406 Ref C: 2022-09-21T10:52:29Z
date: Wed, 21 Sep 2022 10:52:29 GMT
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D41761%26time%3D1663757549243%26url%3Dhttps%253A%252F%252Fzh.vitas.com%252Fcare-services%252Fpersonalized-care-plans-by-diagnosis%252Fkidney-failure%26liSync%3Dtrue
13.107.42.14302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D41761%26time%3D1663757549243%26url%3Dhttps%253A%252F%252Fzh.vitas.com%252Fcare-services%252Fpersonalized-care-plans-by-diagnosis%252Fkidney-failure%26liSync%3Dtrue
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D41761%26time%3D1663757549243%26url%3Dhttps%253A%252F%252Fzh.vitas.com%252Fcare-services%252Fpersonalized-care-plans-by-diagnosis%252Fkidney-failure%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zh.vitas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=41761&time=1663757549243&url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&8bd581aa-50d7-441f-8e3c-3a97652aa2d9"; Domain=.linkedin.com; Expires=Thu, 21-Sep-2023 10:52:29 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202209211052292669206b-e8f2-4347-879c-f1b1a0949129AQFbhzpEISe5c6Ns44-ZfHWMBKuFptfx"; Domain=.www.linkedin.com; Expires=Thu, 21-Sep-2023 10:52:29 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjM3NTc1NDk7MjswMjF9qUSoHAwf29BgWEpjbrRYXiu/4u24ZnznL6kjn6E2Dg==; Domain=.linkedin.com; Expires=Mon, 20 Mar 2023 10:52:29 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2347:u=1:x=1:i=1663757549:t=1663843949:v=2:sig=AQEPEadNNmEIl3SbhiPknTgrneCIoPii"; Expires=Thu, 22 Sep 2022 10:52:29 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXpLb3AOAUrmMklGhwctQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E4EB92F41FD54FFA86FC795643D6A057 Ref B: OSL30EDGE0516 Ref C: 2022-09-21T10:52:29Z
date: Wed, 21 Sep 2022 10:52:29 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=41761&time=1663757549243&url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&liSync=true
13.107.42.14200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=41761&time=1663757549243&url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&liSync=true
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=41761&time=1663757549243&url=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zh.vitas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&30574f34-9e46-40dc-8a46-40ce449d97e0"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 21-Sep-2023 10:52:30 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2347:u=1:x=1:i=1663757550:t=1663843950:v=2:sig=AQG1iRZhzR0MqjkRW4DPANh4Odty3Ixm"; Expires=Thu, 22 Sep 2022 10:52:30 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXpLb3Dce3tf5o2xG5o0w==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: CF5388C6966743A9AC3B7D65F00C1644 Ref B: OSL30EDGE0516 Ref C: 2022-09-21T10:52:29Z
date: Wed, 21 Sep 2022 10:52:29 GMT
content-length: 0
X-Firefox-Spdy: h2
pnapi.invoca.net/1597/na.jsonp?network_id=1597&js_version=4.27.0&tag_id=1597%2F3515805266&request_data_shared_params=%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%2C%22brand_validation%22%3Anull%2C%22campaign_name%22%3Anull%2C%22customer_type%22%3Anull%2C%22entry_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22first_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22gaID%22%3Anull%2C%22gclid%22%3Anull%2C%22g_cid%22%3A%22211402334.1663757546%22%2C%22invoca_destination_number%22%3Anull%2C%22journey%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22last_landing_page%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22location%22%3Anull%2C%22msclkid%22%3Anull%2C%22profile_name%22%3Anull%2C%22sc_camp%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A16%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&request_data=%5B%7B%22request_id%22%3A%22384824%22%2C%22advertiser_campaign_id_from_network%22%3A%22384824%22%7D%5D&destination_settings=%7B%22paramName%22%3Anull%7D&metrics=%5B%5B%22initialLoad%22%2C1663757547360%5D%2C%5B%22startRun%22%2C1663757547425%5D%2C%5B%22startCollectPlacements%22%2C1663757547428%5D%2C%5B%22endCollectPlacements%22%2C1663757547469%5D%2C%5B%22startMapNumberRequest%22%2C1663757547470%5D%2C%5B%22endMapNumberRequest%22%2C1663757547929%5D%2C%5B%22endNumberReplacement%22%2C1663757547934%5D%2C%5B%22startWaitForData%22%2C1663757548473%5D%2C%5B%22endWaitForData%22%2C1663757550628%5D%5D&jsoncallback=json_rr2&
35.170.250.15200 OK 275 B URL HTTP/1.1 pnapi.invoca.net/1597/na.jsonp?network_id=1597&js_version=4.27.0&tag_id=1597%2F3515805266&request_data_shared_params=%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%2C%22brand_validation%22%3Anull%2C%22campaign_name%22%3Anull%2C%22customer_type%22%3Anull%2C%22entry_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22first_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22gaID%22%3Anull%2C%22gclid%22%3Anull%2C%22g_cid%22%3A%22211402334.1663757546%22%2C%22invoca_destination_number%22%3Anull%2C%22journey%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22last_landing_page%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22location%22%3Anull%2C%22msclkid%22%3Anull%2C%22profile_name%22%3Anull%2C%22sc_camp%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A16%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&request_data=%5B%7B%22request_id%22%3A%22384824%22%2C%22advertiser_campaign_id_from_network%22%3A%22384824%22%7D%5D&destination_settings=%7B%22paramName%22%3Anull%7D&metrics=%5B%5B%22initialLoad%22%2C1663757547360%5D%2C%5B%22startRun%22%2C1663757547425%5D%2C%5B%22startCollectPlacements%22%2C1663757547428%5D%2C%5B%22endCollectPlacements%22%2C1663757547469%5D%2C%5B%22startMapNumberRequest%22%2C1663757547470%5D%2C%5B%22endMapNumberRequest%22%2C1663757547929%5D%2C%5B%22endNumberReplacement%22%2C1663757547934%5D%2C%5B%22startWaitForData%22%2C1663757548473%5D%2C%5B%22endWaitForData%22%2C1663757550628%5D%5D&jsoncallback=json_rr2&
IP 35.170.250.15:0
File type ASCII text, with no line terminators
Hash ef8ae73cb5cb4f7438d4e502bae11171
c6fc5aedfc37532880736a5715af82242a72ee74
5c0cc50d769333f02d7879f65bece1cb6b43adc556708c8d43eb25fb4f1a1bec
GET /1597/na.jsonp?network_id=1597&js_version=4.27.0&tag_id=1597%2F3515805266&request_data_shared_params=%7B%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22invoca_id%22%3A%22i-a89019d5-84da-4148-a936-9c7e8d6df238%22%2C%22brand_validation%22%3Anull%2C%22campaign_name%22%3Anull%2C%22customer_type%22%3Anull%2C%22entry_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22first_page%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22gaID%22%3Anull%2C%22gclid%22%3Anull%2C%22g_cid%22%3A%22211402334.1663757546%22%2C%22invoca_destination_number%22%3Anull%2C%22journey%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22last_landing_page%22%3A%22%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22location%22%3Anull%2C%22msclkid%22%3Anull%2C%22profile_name%22%3Anull%2C%22sc_camp%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A16%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&request_data=%5B%7B%22request_id%22%3A%22384824%22%2C%22advertiser_campaign_id_from_network%22%3A%22384824%22%7D%5D&destination_settings=%7B%22paramName%22%3Anull%7D&metrics=%5B%5B%22initialLoad%22%2C1663757547360%5D%2C%5B%22startRun%22%2C1663757547425%5D%2C%5B%22startCollectPlacements%22%2C1663757547428%5D%2C%5B%22endCollectPlacements%22%2C1663757547469%5D%2C%5B%22startMapNumberRequest%22%2C1663757547470%5D%2C%5B%22endMapNumberRequest%22%2C1663757547929%5D%2C%5B%22endNumberReplacement%22%2C1663757547934%5D%2C%5B%22startWaitForData%22%2C1663757548473%5D%2C%5B%22endWaitForData%22%2C1663757550628%5D%5D&jsoncallback=json_rr2& HTTP/1.1
Host: pnapi.invoca.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Wed, 21 Sep 2022 10:52:30 GMT
processing_time: 25.83081ms
Server: Goliath
Content-Length: 275
Connection: keep-alive
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 134908
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://zh.vitas.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Wed, 21 Sep 2022 10:52:30 GMT
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=u921n6l&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=jawcg7g&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=u921n6l&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=jawcg7g&upv=1.1.0
IP 15.197.193.217:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/up?adv=u921n6l&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=jawcg7g&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=bdv5w4w&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=d4u35q3&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=bdv5w4w&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=d4u35q3&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=bdv5w4w&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=d4u35q3&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=ly588pi&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=vttmlpd&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ly588pi&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=vttmlpd&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=ly588pi&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=vttmlpd&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.40/clarity.js
13.107.246.53200 OK 0 B URL HTTP/2 www.clarity.ms/eus2/s/0.6.40/clarity.js
IP 13.107.246.53:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus2/s/0.6.40/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8c7baa5622330"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 07OwqYwAAAAArQ1feoMBsQKFm7kfzVFfKTE9OMjFFREdFMTgxNAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Wed, 21 Sep 2022 10:52:28 GMT
X-Firefox-Spdy: h2
solutions.invocacdn.com/js/invoca-latest.min.js
54.230.111.110200 OK 0 B URL HTTP/2 solutions.invocacdn.com/js/invoca-latest.min.js
IP 54.230.111.110:0
GET /js/invoca-latest.min.js HTTP/1.1
Host: solutions.invocacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 21:07:42 GMT
x-amz-version-id: kkx8cmGgooMGeimwW4In93s6hIJC6Azb
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 10:16:54 GMT
cache-control: max-age=3600
etag: W/"1f44d59b4ca2d82abb2911699e1698a3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2lF8cGt4LKNozOyXpLVsjDNdhC8_LE3dx0oRJQn_2RanP3aVhPCzWQ==
age: 2140
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=h0a5a7r&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=eag6bjc&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=h0a5a7r&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=eag6bjc&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=h0a5a7r&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=eag6bjc&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:28 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=tr5wcw2&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=px1lseh&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=tr5wcw2&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=px1lseh&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=tr5wcw2&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=px1lseh&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=EB+Garamond:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400;1,500;1,600;1,700;1,800&display=swap
216.58.211.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=EB+Garamond:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400;1,500;1,600;1,700;1,800&display=swap
IP 216.58.211.10:0
GET /css2?family=EB+Garamond:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400;1,500;1,600;1,700;1,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vitas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 21 Sep 2022 10:52:26 GMT
date: Wed, 21 Sep 2022 10:52:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=1ayl9tn&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=c29601e&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=1ayl9tn&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=c29601e&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=1ayl9tn&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=c29601e&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:28 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=aiionpe&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=uphevhk&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=aiionpe&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=uphevhk&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=aiionpe&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=uphevhk&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=3xc8b71&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=utxjx0t&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=3xc8b71&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=utxjx0t&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=3xc8b71&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=utxjx0t&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=xb8ukmv&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=rme08as&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=xb8ukmv&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=rme08as&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=xb8ukmv&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=rme08as&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=u9qdxu8&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=32hf9t1&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=u9qdxu8&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=32hf9t1&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=u9qdxu8&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=32hf9t1&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=f28pryc&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=2cczou5&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=f28pryc&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=2cczou5&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=f28pryc&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=2cczou5&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=j22p9yt&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=dzplaof&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=j22p9yt&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=dzplaof&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=j22p9yt&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=dzplaof&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=8c6lx1n&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=zm7jwgq&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=8c6lx1n&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=zm7jwgq&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=8c6lx1n&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=zm7jwgq&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=vpg9opq&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=u9rjzs9&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=vpg9opq&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=u9rjzs9&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=vpg9opq&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=u9rjzs9&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:28 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=7peqv3t&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=18vev9d&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=7peqv3t&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=18vev9d&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=7peqv3t&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=18vev9d&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:28 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=8gzwry8&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=eqdqyfm&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=8gzwry8&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=eqdqyfm&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=8gzwry8&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=eqdqyfm&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=73qm9y9&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=55e4lww&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=73qm9y9&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=55e4lww&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=73qm9y9&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=55e4lww&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
pro.fontawesome.com/releases/v5.15.1/css/all.css
104.18.22.52200 OK 0 B URL HTTP/2 pro.fontawesome.com/releases/v5.15.1/css/all.css
IP 104.18.22.52:0
GET /releases/v5.15.1/css/all.css HTTP/1.1
Host: pro.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zh.vitas.com
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:26 GMT
content-type: text/css
x-amz-id-2: uSTTla5Gtjhf1YhEk3Zu3S130sVnjoaJshHKCw4znbOpLbt9MRRiD4pEYOFozsbWIERTcMuyjXo=
x-amz-request-id: Z4F9062SV1HTMCH0
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 28 Jun 2021 17:18:07 GMT
etag: W/"95fe9653f2c45892b7e58090566f510f"
cache-control: max-age=31556926
cf-cache-status: MISS
server: cloudflare
cf-ray: 74e240545b0fb50f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=w75zw3s&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=573jriv&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=w75zw3s&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=573jriv&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=w75zw3s&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=573jriv&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=6k8rr86&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=i9cqxkw&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=6k8rr86&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=i9cqxkw&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=6k8rr86&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=i9cqxkw&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,700
216.58.211.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,700
IP 216.58.211.10:0
GET /css?family=Open+Sans:300,300i,400,400i,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.vitas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 21 Sep 2022 10:52:26 GMT
date: Wed, 21 Sep 2022 10:52:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=xzxugrd&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=xglbmf4&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=xzxugrd&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=xglbmf4&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=xzxugrd&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=xglbmf4&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=opgeexv&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=yg14q0s&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=opgeexv&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=yg14q0s&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=opgeexv&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=yg14q0s&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:28 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=i34fr2t&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=vofu9wy&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=i34fr2t&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=vofu9wy&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=i34fr2t&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=vofu9wy&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
solutions.invocacdn.com/js/networks/1597/3515805266/tag-live.js
54.230.111.110200 OK 0 B URL HTTP/2 solutions.invocacdn.com/js/networks/1597/3515805266/tag-live.js
IP 54.230.111.110:0
GET /js/networks/1597/3515805266/tag-live.js HTTP/1.1
Host: solutions.invocacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
x-amz-replication-status: COMPLETED
last-modified: Mon, 18 Jul 2022 13:47:28 GMT
x-amz-version-id: W7aNq_K.cJLOa7ERv6Lv6XzOhpGnmDzc
server: AmazonS3
content-encoding: br
date: Wed, 21 Sep 2022 10:52:27 GMT
cache-control: max-age=300
etag: W/"5210bc7fb92379205d9aaa3554aca611"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OjnfGkBVn3xDRdPvdZsduJLCmGmn8kl9BuvgmE6NZqXYlzUPu4fm8g==
age: 274
X-Firefox-Spdy: h2
assets.sitescdn.net/ytag/ytag.min.js
104.18.116.52200 OK 0 B URL HTTP/2 assets.sitescdn.net/ytag/ytag.min.js
IP 104.18.116.52:0
GET /ytag/ytag.min.js HTTP/1.1
Host: assets.sitescdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:28 GMT
content-type: application/javascript
x-amz-id-2: W1cQ/rhjTedJt9SEFSxoikEqs3bHbwj9xJ28IJO6+cBOgQYkSFQjs2RIv9z34tRumiIS2AOXmIU=
x-amz-request-id: 23F870N41JB7S6HC
last-modified: Fri, 24 Jun 2022 14:50:17 GMT
x-amz-version-id: 19P2jJpo4joI05TIJzyRycOXZwdmuMYP
etag: W/"e2eccaf3e55d48240f949da331db8fec"
cf-cache-status: HIT
age: 3617
set-cookie: __cf_bm=g9rKRVwrEPt_FJc26V1jVUSnOgWZlZeVgSXl6x0tQ5I-1663757548-0-ATcSSZ6OwqY3/0svOpSt5SEEobbUFfc67/kdzynhpXVMW45BSPcI9KM0fzd6DJOPaD377Ix8ZmHq0RBy9TzhHks=; path=/; expires=Wed, 21-Sep-22 11:22:28 GMT; domain=.sitescdn.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e240685c790b41-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=dreu12m&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=ar78t5v&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=dreu12m&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=ar78t5v&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=dreu12m&ref=https%3A%2F%2Fzh.vitas.com%2Fcare-services%2Fpersonalized-care-plans-by-diagnosis%2Fkidney-failure&upid=ar78t5v&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zh.vitas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 10:52:28 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2