sets.superonlinesalessystem.com/ga/click/2-17119785-96-955-1860-1353-aa38d7efd8-ofabc45b7c
302 Found 130 B URL HTTP/1.1 sets.superonlinesalessystem.com/ga/click/2-17119785-96-955-1860-1353-aa38d7efd8-ofabc45b7c
IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash b0f0184897f573f86fb0eb1efed391ae
ab79ba5038afd35cec3be1aa5b11add8f97cd457
727490282d71e9f7808c69d2e84826db83514ec61662879b0310141c349bc6de
GET /ga/click/2-17119785-96-955-1860-1353-aa38d7efd8-ofabc45b7c HTTP/1.1
Host: sets.superonlinesalessystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 21 Sep 2022 15:53:12 GMT
Server: Apache/2.4.52 (Unix) OpenSSL/1.0.2k-fips PHP/7.3.33
Status: 302 Found
X-Rack-Cache: miss
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
X-Request-Id: d7ec4c58fb88332f18296ad4b84d5f21
Location: https://mwebnice.com/5561/1967/6/?subid=dfegrthujtrfeadfeethryju
X-UA-Compatible: IE=Edge,chrome=1
X-Runtime: 0.030354
Expires: Mon, 01 Jan 1990 00:00:00 GMT
X-Powered-By: Phusion Passenger(R) 6.0.12
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8731
Expires: Wed, 21 Sep 2022 18:18:44 GMT
Date: Wed, 21 Sep 2022 15:53:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Retry-After, Content-Type, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 21 Sep 2022 15:13:36 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: INsvgbc6On_QTGNJLOW0Daj9HN6Cp1W386_dNo5FpZPaVTMAxB-tXw==
Age: 2377
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pHwDiY01xfgdjroPDBrXsV__3xQfOLVchWyAuEFNwF82gkIcXQMY9Q==
age: 40680
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 15:53:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 18f76676106048cf8329e85d3dd4fbc6
23a4fe9b785dd2de65c99051bbd53488648d06fd
0c9eac90fc57ca6e25470726ac1abe854c5934a5d0f18368c309637b13c85d1a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:13 GMT
Etag: "6327a605-118"
Server: ECS (amb/6BA1)
Content-Length: 278
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 21 Sep 2022 15:03:22 GMT
Cache-Control: max-age=3600
Expires: Wed, 21 Sep 2022 15:50:33 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fv43TRRi-MPwaowwxT3-7C95u7xi2KTYbp7fsI6Hi1cFu0kmKZUTMw==
Age: 2991
ocsp.digicert.com/
200 OK 471 B IP
Hash ff6d50919e56aed75c47feb45ee2f2ec
98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef
b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2720
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:13 GMT
Last-Modified: Wed, 21 Sep 2022 15:07:53 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
tracking.bioleptin-at.com/aff_c?offer_id=64&aff_id=2629&url_id=1517&aff_sub5=5561_sessid20220921155313403&aff_sub=1967
302 Found 365 B URL HTTP/1.1 tracking.bioleptin-at.com/aff_c?offer_id=64&aff_id=2629&url_id=1517&aff_sub5=5561_sessid20220921155313403&aff_sub=1967
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 4e4dbb2349ed5bdb0c2dfdf457f942a0
994104a60fb5cad4b8a7ee2cedac83be15bcdfe3
047e955b6c17a2aec95bdd1dacc411c9bd876ff582814332756809bdc7612447
GET /aff_c?offer_id=64&aff_id=2629&url_id=1517&aff_sub5=5561_sessid20220921155313403&aff_sub=1967 HTTP/1.1
Host: tracking.bioleptin-at.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 21 Sep 2022 15:53:13 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 365
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://bioleptin.com/3/go/indexmaxweb.php?trans=1020ad6c2acd98981c9fe3b3dff505&aff_sub1=1967&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=5561_sessid20220921155313403
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: aff_ran_url_64=1517; expires=Thu, 22 Sep 2022 15:53:13 GMT; path=/; SameSite=None; Secure
enc_aff_session_64=ENC0322660dbf8410c94b4e1190744a3c8a871e888dbbff057cd8de50f4161b73245d1aa60bfefe5d57d3c0c777886a0d6b51d208ad0162df27f1ade1125451810780febacfd19a88cbe611cd48171279ca937add038e2907876045846e7d1e51e70bd8bbef33400689928e1919aa9321409c220700de2ec02689e10f70bcaca3521aae85d9bda4ac18d656d567596725f1b80b64a974a7018d4e98e522e70455e9e009646f5f; expires=Fri, 21 Oct 2022 15:53:13 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Sat, 16 Aug 2025 02:33:13 GMT; path=/; SameSite=None; Secure
Tracking_id: 1020ad6c2acd98981c9fe3b3dff505
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: cf994877187eb78f8e93e308feb5fbe2
Access-Control-Allow-Headers: Tune-SDK-Version
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CN2qMmUX8nRMlVl/TP78pw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Y0iFsNAdARXGnSe7PEBTl30KHpo=
bioleptin.com/3/go/indexmaxweb.php?trans=1020ad6c2acd98981c9fe3b3dff505&aff_sub1=1967&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=5561_sessid20220921155313403
200 OK 9.0 kB URL HTTP/1.1 bioleptin.com/3/go/indexmaxweb.php?trans=1020ad6c2acd98981c9fe3b3dff505&aff_sub1=1967&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=5561_sessid20220921155313403
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (467)
Hash 479113ecc304365d65966e1a2404f203
d53384a0a18f4a84910352f87934e46eadafc97a
0024761c5f6dabcbaaeda3796c9b1e97a065eb6e54a2f35366644ea69fbf4508
GET /3/go/indexmaxweb.php?trans=1020ad6c2acd98981c9fe3b3dff505&aff_sub1=1967&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=5561_sessid20220921155313403 HTTP/1.1
Host: bioleptin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 15:53:14 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: hasoffers_transaction=1020ad6c2acd98981c9fe3b3dff505; expires=Sat, 18-Sep-2032 15:53:14 GMT; Max-Age=315360000; path=/; domain=.bioleptin.com
visitedindexmaxwebphp=1; expires=Tue, 20-Dec-2022 15:53:14 GMT; Max-Age=7776000
landingPage=go-indexmaxweb; expires=Sat, 18-Sep-2032 15:53:14 GMT; Max-Age=315360000; path=/; domain=.bioleptin.com
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Pragma: no-cache
Content-Length: 9014
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f68499f2ba3b2c5aa7e979ee9b4d3a8
67a456fe80bd69aa2fbd0331ba343d1789509d0f
394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f68499f2ba3b2c5aa7e979ee9b4d3a8
67a456fe80bd69aa2fbd0331ba343d1789509d0f
394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fast.wistia.com/embed/medias/sn08wyqt9t.jsonp
200 OK 1.7 kB URL HTTP/2 fast.wistia.com/embed/medias/sn08wyqt9t.jsonp
IP
File type ASCII text, with very long lines (5348)
Hash 253312d598ff5fee1a1bdcfd4716bddf
3d7cb63f25e4474d78aefd41529c42340c86892b
d9453faf780d80edaa95a25e2d28cfe759ac6c7a9847da41ed0936e037188337
GET /embed/medias/sn08wyqt9t.jsonp HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-encoding: br
content-type: application/javascript; charset=utf-8
etag: W/"ee5fe9f6cc6d9f0361f88c118c073cc9"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 1ec7f2244ce8a55e9812edd33becfb4d
x-runtime: 0.061755
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:14 GMT
age: 85744
x-served-by: cache-iad-kiad7000072-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 14, 1
x-timer: S1663775594.388834,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1657
X-Firefox-Spdy: h2
bioleptin.com/3/go/css/loader/loader.css
200 OK 417 B URL HTTP/1.1 bioleptin.com/3/go/css/loader/loader.css
IP
Hash f2d81f01286d5d52586e4a81a93ea1e3
1f11f747b43e5278d94b01a443418e054fa5290b
91e6d6d04091eaa2e993ee29909c508c7a61ae0da49913897b2d8921b331e5b6
GET /3/go/css/loader/loader.css HTTP/1.1
Host: bioleptin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/3/go/indexmaxweb.php?trans=1020ad6c2acd98981c9fe3b3dff505&aff_sub1=1967&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=5561_sessid20220921155313403
Cookie: visitedindexmaxwebphp=1; hasoffers_transaction=1020ad6c2acd98981c9fe3b3dff505; landingPage=go-indexmaxweb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 15:53:15 GMT
Server: Apache
Last-Modified: Fri, 18 Feb 2022 05:55:47 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 21 Oct 2022 15:53:15 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 417
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
fast.wistia.com/assets/external/E-v1.js
200 OK 116 kB URL HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 116 kB (116484 bytes)
Hash ec8b36216507b0536937372c4128c856
464e63b467c077055ab38dbe829d7ffad45d2ff5
5ca7b18360a50808be6f47f0acc85348584280dc58c9fc4b7955a281b5c9a6f2
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6329c228-1c704"
last-modified: Tue, 20 Sep 2022 13:37:44 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:14 GMT
age: 237
x-served-by: cache-iad-kiad7000159-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 79, 7
x-timer: S1663775594.389473,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 116484
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5f68499f2ba3b2c5aa7e979ee9b4d3a8
67a456fe80bd69aa2fbd0331ba343d1789509d0f
394e18527ce3ad7de2274de2e5e6a7f3fb390e7d6c4f7342ab485b7794e169e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 806f72bf8abb277c82df834e7acc5bf0
cb4f3a30182aab1c7b1303b29bd1f2706249ec72
2e37e86aef64d60a52702aaaaeb03783599449fe463c9bcd8eb5716b444c059e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:53:14 GMT
Last-Modified: Wed, 21 Sep 2022 14:07:37 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hkzMXDe-Sm8J01lrz3gM-B-oKDLZ2sN_6Ib2KlCAj4s3GxJDkF79RQ==
Age: 6337
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 806f72bf8abb277c82df834e7acc5bf0
cb4f3a30182aab1c7b1303b29bd1f2706249ec72
2e37e86aef64d60a52702aaaaeb03783599449fe463c9bcd8eb5716b444c059e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:53:14 GMT
Last-Modified: Wed, 21 Sep 2022 15:21:51 GMT
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: G60dJVURFhyYXUuojwgVsdSOW9ISrDov6jeh6tUpczE_nHjEftsfpQ==
Age: 1883
cdn.truegcloud.com/checkout-loading.gif
200 OK 117 kB URL HTTP/2 cdn.truegcloud.com/checkout-loading.gif
IP
File type GIF image data, version 89a, 160 x 160\012- data
Size 117 kB (116740 bytes)
Hash a3ea5a9e511253711416e9c09ff3c15d
506e41c042499f73cf1e2d6a7285d912c3e86460
d106a2a257150e602c55279e0e932dc4fb9424c9a8fd68454deb7560c49ae36c
GET /checkout-loading.gif HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 116740
last-modified: Sun, 26 Jan 2020 18:07:54 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 00:59:02 GMT
cache-control: max-age=604800
etag: "a3ea5a9e511253711416e9c09ff3c15d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ywB0SuhNuO0gDTitELe0NGi1-rLwG9d4djgCoHMKnodfPR3qnvGd4Q==
age: 312853
X-Firefox-Spdy: h2
cdn.truegcloud.com/bioleptin/shipping-status1.png
200 OK 10 kB URL HTTP/2 cdn.truegcloud.com/bioleptin/shipping-status1.png
IP
File type PNG image data, 414 x 68, 8-bit/color RGB, non-interlaced\012- data
Hash 8932c35a432259e4094e253d2faced83
8a4bc14f271cdaafa8a5b7de25538d61ca46a281
bb48b3160a6456eab6a9b1344a3d7241888a8ebbf160cdb16af46874a8758b75
GET /bioleptin/shipping-status1.png HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10403
last-modified: Mon, 23 Sep 2019 03:25:12 GMT
x-amz-meta-sha256: bb48b3160a6456eab6a9b1344a3d7241888a8ebbf160cdb16af46874a8758b75
x-amz-meta-s3b-last-modified: 20190604T065218Z
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 03:44:27 GMT
etag: "8932c35a432259e4094e253d2faced83"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ibPlYdT8bZUDELs0aN2C2dQI5lWbWOpZcb5SjabaUet0bzRsE9zzwQ==
age: 43728
X-Firefox-Spdy: h2
cdn.truegcloud.com/grsultra/MBG-SEAL_OPT.png
200 OK 71 kB URL HTTP/2 cdn.truegcloud.com/grsultra/MBG-SEAL_OPT.png
IP
File type PNG image data, 194 x 176, 8-bit/color RGBA, non-interlaced\012- data
Hash 2905cc09baa2c7687ef64afd8ec7ea8e
44726fd013a3b726760001eb17398463232a15b1
4adbe46ec0ab383c4b5d4d96084a972156c4e05284cd9cb104ef7d6f6cde6d11
GET /grsultra/MBG-SEAL_OPT.png HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 71177
last-modified: Thu, 06 Jun 2019 12:02:33 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 15:53:14 GMT
etag: "2905cc09baa2c7687ef64afd8ec7ea8e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eQ3e36O3KelHSNohSlpPRHQtCNjhC3c1-UR_qXX-fy7jcorDY8cgNQ==
age: 4419
X-Firefox-Spdy: h2
bioleptin.com/3/go/css/loader/loader.js
200 OK 297 B URL HTTP/1.1 bioleptin.com/3/go/css/loader/loader.js
IP
Hash b6139a17ba621a4b9ca7d78aef87805f
b31bceed81b02450f5aec00a56fc3d0c55eaad4b
f312dad2e1b5d34cab0d9596a1ae4cffe130e28460bc6cbbc3834baee4571047
GET /3/go/css/loader/loader.js HTTP/1.1
Host: bioleptin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/3/go/indexmaxweb.php?trans=1020ad6c2acd98981c9fe3b3dff505&aff_sub1=1967&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=5561_sessid20220921155313403
Cookie: visitedindexmaxwebphp=1; hasoffers_transaction=1020ad6c2acd98981c9fe3b3dff505; landingPage=go-indexmaxweb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 15:53:15 GMT
Server: Apache
Last-Modified: Fri, 18 Feb 2022 05:55:47 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 21 Oct 2022 15:53:15 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 297
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
cdn.truegcloud.com/bioleptin/quality-assured.png
200 OK 157 kB URL HTTP/2 cdn.truegcloud.com/bioleptin/quality-assured.png
IP
File type PNG image data, 900 x 275, 8-bit/color RGBA, non-interlaced\012- data
Size 157 kB (157043 bytes)
Hash c2a45ff343ea07328183f8d509c9084d
a70ca06156d3503b1d1ec15024c4d5e292c6d9b6
607d7fc7f428f97215083c29f200b090f93f46490d19571630ff368363b0bbeb
GET /bioleptin/quality-assured.png HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 157043
last-modified: Wed, 18 Aug 2021 07:53:43 GMT
x-amz-meta-sha256: 607d7fc7f428f97215083c29f200b090f93f46490d19571630ff368363b0bbeb
x-amz-meta-s3b-last-modified: 20210709T084829Z
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 08:22:04 GMT
etag: "c2a45ff343ea07328183f8d509c9084d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UHnRvRPYC_mTZF4ZEmSrVhCmGnCKID-kMpSB0sxEFXTrDVSQugZT9w==
age: 27070
X-Firefox-Spdy: h2
bioleptin.com/3/go/css/style-main.css
200 OK 1.8 kB URL HTTP/1.1 bioleptin.com/3/go/css/style-main.css
IP
Hash d07552511a5604cc1caa7cef423916ad
2ad66db1437d8dd1e4a310e5c9f096f73d155dee
7ffa3ec6c1fb81100455492b2c992cb5eefc7127a7fb426ee6e9acb840131c94
GET /3/go/css/style-main.css HTTP/1.1
Host: bioleptin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/3/go/indexmaxweb.php?trans=1020ad6c2acd98981c9fe3b3dff505&aff_sub1=1967&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=5561_sessid20220921155313403
Cookie: visitedindexmaxwebphp=1; hasoffers_transaction=1020ad6c2acd98981c9fe3b3dff505; landingPage=go-indexmaxweb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 15:53:15 GMT
Server: Apache
Last-Modified: Mon, 04 Apr 2022 06:43:47 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 21 Oct 2022 15:53:15 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1765
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 806f72bf8abb277c82df834e7acc5bf0
cb4f3a30182aab1c7b1303b29bd1f2706249ec72
2e37e86aef64d60a52702aaaaeb03783599449fe463c9bcd8eb5716b444c059e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:53:14 GMT
Etag: "632b012d-1d7"
Server: ECS (dcb/7F82)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -OgCREH-TKydYTXr6EyKC5mixAQwR85XGkYQCt806PMETyUQdl59vw==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash adbd2af85f8d20105c2dd5d7ad1f37b1
3f68eb1c4f6e57531f1652b36bcd495bfbbc1d95
d1c572ac8c03dca65075468302d372f97898e49cf82352e4becd9752161dbe43
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:53:14 GMT
Server: ECS (dcb/7ECA)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PR2wpPcOYEJdJ982t1qLTVxM6bp1w0fbhQ8RosFqUolWeFshsXd4LQ==
main.tgoptimize.com/load.js?r=0.10444747575561686&u=bioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403
200 OK 1.6 kB URL HTTP/2 main.tgoptimize.com/load.js?r=0.10444747575561686&u=bioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403
IP
File type ASCII text, with CRLF line terminators
Hash 563b2bab31a56fcfe3a534f51938c08b
e5ace50e36b632d5cd441b9d00d7c740c90e2733
6cf14b7eba5326ac2846e96dfe5e20516c5b087fe605e6aa13a8ec403b79d866
GET /load.js?r=0.10444747575561686&u=bioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403 HTTP/1.1
Host: main.tgoptimize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 15:53:15 GMT
content-type: text/html; charset=UTF-8
content-length: 1578
server: Apache
set-cookie: tgopt_id=YuKAif3GHe6EpZWSWa1z5JCMEhluOQ3U; expires=Thu, 17-Sep-2037 15:53:15 GMT; Max-Age=473040000; path=/
X-Firefox-Spdy: h2
cdn.truegcloud.com/bioleptin/BIO-FLATSTYLE_03.png
200 OK 72 kB URL HTTP/2 cdn.truegcloud.com/bioleptin/BIO-FLATSTYLE_03.png
IP
File type PNG image data, 248 x 482, 8-bit/color RGBA, non-interlaced\012- data
Hash 1faef82f905efa16a024ac22f09cde8f
24591e5ac3d3fb0789e15deaea2347a02d2d88d7
41cdb94bcdebca0c7a679a773a8494a07fe2ff37e1cf27d1d919b3aa57b77889
GET /bioleptin/BIO-FLATSTYLE_03.png HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 72166
last-modified: Thu, 05 Aug 2021 06:47:17 GMT
x-amz-meta-sha256: 41cdb94bcdebca0c7a679a773a8494a07fe2ff37e1cf27d1d919b3aa57b77889
x-amz-meta-s3b-last-modified: 20210602T064800Z
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 18:51:52 GMT
etag: "1faef82f905efa16a024ac22f09cde8f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VAjzAcwrUCYz1BtanrJhe3mKVdvu221GChRrVRG1rniLA5ArEapWyQ==
age: 75684
X-Firefox-Spdy: h2
cdn.truegcloud.com/bioleptin/asseenon-trans-destop-R1a.webp
200 OK 31 kB URL HTTP/2 cdn.truegcloud.com/bioleptin/asseenon-trans-destop-R1a.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bac341d0379aa755aef38e2f688c95b2
8f941a729f70ef50f0da6e3dc2b08be1129de437
2e94732fb1750a52fc54eee7b1fb4f78e95fc1d0f960d440b2ae2d7a17c129b9
GET /bioleptin/asseenon-trans-destop-R1a.webp HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 31366
last-modified: Tue, 28 Jul 2020 03:22:50 GMT
x-amz-meta-sha256: 2e94732fb1750a52fc54eee7b1fb4f78e95fc1d0f960d440b2ae2d7a17c129b9
x-amz-meta-s3b-last-modified: 20200728T031527Z
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 15:53:16 GMT
etag: "bac341d0379aa755aef38e2f688c95b2"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: omtWs8ae7y7svZQyzVaehBaRozHo0M0yPPrEDQsKDr6ChA2VUhYtNw==
X-Firefox-Spdy: h2
main.tgoptimize.com/my.gif?tgopt_id=YuKAif3GHe6EpZWSWa1z5JCMEhluOQ3U&r=0.5330111580261795&u=bioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403
200 OK 35 B URL HTTP/2 main.tgoptimize.com/my.gif?tgopt_id=YuKAif3GHe6EpZWSWa1z5JCMEhluOQ3U&r=0.5330111580261795&u=bioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 729c3007a8ed0597531b0c76d54a94bb
90fe9b8a8142548fdfab29f59cb0a164a0eaef81
6a842ea462daca2a0b5a0f5f25bcfc8e0059ac811ca6c6a1bc54e4d9119621c3
GET /my.gif?tgopt_id=YuKAif3GHe6EpZWSWa1z5JCMEhluOQ3U&r=0.5330111580261795&u=bioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403 HTTP/1.1
Host: main.tgoptimize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 15:53:15 GMT
content-type: image/gif
content-length: 35
server: Apache
X-Firefox-Spdy: h2
cdn.truegcloud.com/bioleptin/files/css/fadeout.css
200 OK 241 B URL HTTP/2 cdn.truegcloud.com/bioleptin/files/css/fadeout.css
IP
Hash df9b699fa6011d20544c875c0c9c7149
92526b848af1e4988897a2bb9e51f4e6998cbb62
7c460319c2c1e5436910bb072e5575e2b323132564b112874880d0964b16b001
GET /bioleptin/files/css/fadeout.css HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 241
last-modified: Fri, 18 Jan 2019 08:43:37 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 03:44:27 GMT
etag: "df9b699fa6011d20544c875c0c9c7149"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mTD8hF4CJ8qSVZ8-KRl3YhdwC7IQgxLb92iHVwOvcyFwwhFQd1i2sg==
age: 43729
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 35343b6981ed4c9eb2cd90bc8c2146cd
4e49432e50195a2bc528fb1745a2899306c79db8
cf55f53534e3e8b62513618cda90832a7b9bcd0d15b1a8f6bb51db6eb60daefd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 18:53:39 GMT
expires: Tue, 19 Sep 2023 18:53:39 GMT
cache-control: public, max-age=31536000
age: 161976
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-KMZ74FC
200 OK 65 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KMZ74FC
IP
File type ASCII text, with very long lines (61420)
Hash d499cbe2cf3bcfddddc4aaa264fc5db4
4e3bdc1af8d2b79d20a929bcb2ba1989a2050253
4be79d6e93480873dcd709a2bdec17410070e1e1b002b69d73d73023e60af763
GET /gtm.js?id=GTM-KMZ74FC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 21 Sep 2022 15:53:15 GMT
expires: Wed, 21 Sep 2022 15:53:15 GMT
cache-control: private, max-age=900
last-modified: Wed, 21 Sep 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65319
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5149084af9bb01e5471e0be93a009ab0
1aaae44973461346130015cba0c36e9d1b5b77f2
db8a390c5bb50072d57429a45c470496139deb98e04b175f45600e5e4b2ac884
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18473
Expires: Wed, 21 Sep 2022 21:01:08 GMT
Date: Wed, 21 Sep 2022 15:53:15 GMT
Connection: keep-alive
fast.wistia.com/assets/external/wistia-mux.js
200 OK 32 kB URL HTTP/2 fast.wistia.com/assets/external/wistia-mux.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4e0bd02908384de7517dc6ce2d132a92
e5be3ef18fddb02671eb704d34e3493cdfcb80ae
da3f40915f30cc7863ae44e57acfbc344682d22cba4f29159e2fd5896574b8c6
GET /assets/external/wistia-mux.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6329c228-7e6e"
last-modified: Tue, 20 Sep 2022 13:37:44 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:15 GMT
age: 237
x-served-by: cache-iad-kcgs7200128-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 14, 6
x-timer: S1663775595.392454,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 32366
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12972, version 1.0\012- data
Hash f155ae6c5a655f05edb86445bd7e8d76
23115e9e59853e36044ae725d809759b7e8fa5f2
140ef34d138412106d0dc0bf060ba49acf6eaa6610c5bab642b182ddd0d68c8a
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 19:07:14 GMT
expires: Tue, 19 Sep 2023 19:07:14 GMT
cache-control: public, max-age=31536000
age: 161161
last-modified: Mon, 15 Aug 2022 18:15:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18473
Expires: Wed, 21 Sep 2022 21:01:08 GMT
Date: Wed, 21 Sep 2022 15:53:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecaa9082-610c-41c1-ae9a-e453d87828ab.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecaa9082-610c-41c1-ae9a-e453d87828ab.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dab1f2cd68979d2004ba4449d759a341
54ed14436a75ba2aeb8459bad2ce70229aff4203
e782fb5ede547e1b167719068c6821c62414dcb0991bf9ac38285cb3ce8894e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecaa9082-610c-41c1-ae9a-e453d87828ab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10038
x-amzn-requestid: 4cf38a70-a706-4e6a-b854-9404727c599d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yxy1mHDCIAMF5-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a31bd-5aba5b0640221b302a19781b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: hDCOWNm2vFa9h7BffUJwcwZ6i27jM2qBuSTasH9q_wsQ9oNWhVpQCg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 21:47:24 GMT
etag: "54ed14436a75ba2aeb8459bad2ce70229aff4203"
content-type: image/jpeg
age: 65151
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a504981ee10d8341b64f19001464ae8a
56f228d7358ba9deef000f53214dc7c1dc358109
0ea3b6ed12f3adf9d56e7d9b61f284d28107d99f28ee4e66b4c078a9a1a0cbee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8861
x-amzn-requestid: 873e88ab-7afc-4b14-b428-d90ec2079741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO2wuE0AoAMF7Gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3804-0d25ab397a16c78907914e23;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:08:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UStTyIXPucbY9WmDl3W5bTyeT-2SJ5CTUjv8TLeexqZtKd1p2sJrNA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 03:25:34 GMT
age: 44861
etag: "56f228d7358ba9deef000f53214dc7c1dc358109"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.truegcloud.com/scripts/lazysizes.min.js
200 OK 12 kB URL HTTP/2 cdn.truegcloud.com/scripts/lazysizes.min.js
IP
Hash af393b39355d9a2227eebde1349ecb66
f41c7cb7ac170482494628f113031380da1da544
81f10fe06ade1f352756e73d3a502bc88a5501927cb6833db4ca8416ae553bcb
GET /scripts/lazysizes.min.js HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 26 Jan 2020 18:15:34 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 03:44:27 GMT
cache-control: max-age=86400
etag: W/"a372a2f4bd2a43e2d9bc042e74d2d501"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MqIKl53YWIwi771UN992AhAoxWWYceaPeRyg-F9hHv8y5tleTLnhwA==
age: 43728
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14e6ddceb639a5f4875aecb796f95c79
b1cd04a66852694284eeef16a1cde38896e33c03
4c0657a00d7fb4caefa64c28340cad94a306cc393cffe692fcc69c65a80f2391
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10244
x-amzn-requestid: 71f08b9e-e977-48de-ad60-5192a43db517
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYwBkGqjIAMFz0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202d3d-0af3334d085ca4a764e31bb5;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7FaZfI_iYUANPdxGBld5NfneWwKJeX2nYA_gmvF9NjML5YOVhZIIoA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 12:08:27 GMT
age: 13488
etag: "b1cd04a66852694284eeef16a1cde38896e33c03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans&display=swap
200 OK 12 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans&display=swap
IP
Hash 25d59027911ddadb00d3614605cd00e6
16bdb457ad33884c0094b9cce7ff84343e6f66ad
7d3024df8c2e0b49fcff443df4591f5f20eb8eb5b82addcbe44d14741b9cbf2d
GET /css?family=Open+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 21 Sep 2022 15:53:14 GMT
date: Wed, 21 Sep 2022 15:53:14 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a692964324dbb9c460a1b855808d02e6
1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54
3fa9e780d62fffb635064aeed542c8e04923ff943c6080476836fab6c24e2426
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9201
x-amzn-requestid: 6dbfae76-f9ab-4f31-9b62-bcf5d9ce4515
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YxzxlEYcoAMFaQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a333d-7d147481402cc46a751b72ed;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:40:13 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hI3FlJJRAUfr0EAcSvvuJajmyQDwBpTxuQIhYfA0Mtp9JyQgKnoDvA==
via: 1.1 7dcaa43cd0535d889b549e6a30a57aa0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 21:43:18 GMT
age: 65397
etag: "1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 35343b6981ed4c9eb2cd90bc8c2146cd
4e49432e50195a2bc528fb1745a2899306c79db8
cf55f53534e3e8b62513618cda90832a7b9bcd0d15b1a8f6bb51db6eb60daefd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9652f27d0f4bd30b843881d79cafa171
a1c167c6cc7af47875e069115a069941bbd9f915
6a04401860cc5ddb26c3c5cd0f60b2e969019ec1e49dc5b70d9bf345523f8270
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:53:15 GMT
Last-Modified: Wed, 21 Sep 2022 14:54:31 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WGoR_AaHWdFtVv5CdFed73qFGJvuEMh-T6YNZzquPfTPJbxwlz4kvQ==
Age: 3524
fast.wistia.com/assets/external/embedLinks.js
200 OK 16 kB URL HTTP/2 fast.wistia.com/assets/external/embedLinks.js
IP
File type ASCII text, with very long lines (57852), with no line terminators
Hash 5f8b4add28af116ec471566880091ec5
157bd9856a0245d516aa6f64e4dc2eec2980ffb2
084a7530eb397f42ec79768f94014733bc11e89bd3d65d5fa69fb9750790ed13
GET /assets/external/embedLinks.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6329c228-3d46"
last-modified: Tue, 20 Sep 2022 13:37:44 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:15 GMT
age: 237
x-served-by: cache-iad-kcgs7200079-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 16, 2
x-timer: S1663775596.541770,VS0,VE1
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 15686
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/engines/hls_video.js
200 OK 114 kB URL HTTP/2 fast.wistia.com/assets/external/engines/hls_video.js
IP
File type ASCII text, with very long lines (65469)
Size 114 kB (114378 bytes)
Hash 16e6e4562ea0bbf6c7ba510f38b0fb8b
20964be4789975feaad850da7bff3df654fad6fe
737ffb23a604268ad34f2dfc3599778fc5934ac18762cbcbc1a68e72b5db091d
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6329c228-1beca"
last-modified: Tue, 20 Sep 2022 13:37:44 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:15 GMT
age: 238
x-served-by: cache-iad-kiad7000086-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 67, 4
x-timer: S1663775596.545300,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 114378
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/vc14e1qpkd.json?callback=wistiajson1
200 OK 1.6 kB URL HTTP/2 fast.wistia.com/embed/medias/vc14e1qpkd.json?callback=wistiajson1
IP
File type ASCII text, with very long lines (5440), with no line terminators
Hash 733534c194eebadd8e765a6100b17346
1bdc1f9da7954b02230d500cc7809763edb69c2c
99d7f68d460d814cc54a40941e03a96ee566bca28a0d33da5b9ad70681d7e2bd
GET /embed/medias/vc14e1qpkd.json?callback=wistiajson1 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: W/"666a7e62a40416471221f73eaa7f72e9"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: ec9b4386c3dc695416f82ee52bba9ab8
x-runtime: 0.059849
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:15 GMT
age: 22723
x-served-by: cache-iad-kcgs7200125-IAD, cache-bma1631-BMA
x-cache: HIT, MISS
x-cache-hits: 39, 0
x-timer: S1663775596.602033,VS0,VE92
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1602
X-Firefox-Spdy: h2
fast.wistia.com/assets/images/blank.gif
200 OK 1.2 kB URL HTTP/2 fast.wistia.com/assets/images/blank.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=315360000, public
content-type: image/gif
etag: "632b31ec-4be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 21 Sep 2022 15:46:52 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:15 GMT
age: 238
x-served-by: cache-iad-kiad7000052-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 78, 6
x-timer: S1663775596.729275,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1214
X-Firefox-Spdy: h2
cdn.truegcloud.com/bioleptin/BIO-FLATSTYLE_01.png
200 OK 51 kB URL HTTP/2 cdn.truegcloud.com/bioleptin/BIO-FLATSTYLE_01.png
IP
File type PNG image data, 248 x 482, 8-bit/color RGBA, non-interlaced\012- data
Hash 22cd3b5376bf59a88f0e29262f33ffae
4633d2845914bff2e4a242d2619315baa4a67d17
8f991854970f28c25e4446443b148c7e5e125a51202bc2588d57f82744395d01
GET /bioleptin/BIO-FLATSTYLE_01.png HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 50891
last-modified: Thu, 05 Aug 2021 06:47:17 GMT
x-amz-meta-sha256: 8f991854970f28c25e4446443b148c7e5e125a51202bc2588d57f82744395d01
x-amz-meta-s3b-last-modified: 20210602T064759Z
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 15:53:16 GMT
etag: "22cd3b5376bf59a88f0e29262f33ffae"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xpjiNVV0QS01GCOrz5dcpmgcRnGUMIJ5Xae_IFaV4ha1DZCDKB38tQ==
X-Firefox-Spdy: h2
cdn.truegcloud.com/bioleptin/BIO-FLATSTYLE_06.png
200 OK 76 kB URL HTTP/2 cdn.truegcloud.com/bioleptin/BIO-FLATSTYLE_06.png
IP
File type PNG image data, 248 x 482, 8-bit/color RGBA, non-interlaced\012- data
Hash 366b6b3db4cf6d939180980d97206821
28e8f76d9082a48d56509691aa532879513e8990
495dad04d15391e6c87af48bad81fe0e898fd5b82a79ca31b71437dd78b4b1f8
GET /bioleptin/BIO-FLATSTYLE_06.png HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 75764
last-modified: Thu, 05 Aug 2021 06:47:17 GMT
x-amz-meta-sha256: 495dad04d15391e6c87af48bad81fe0e898fd5b82a79ca31b71437dd78b4b1f8
x-amz-meta-s3b-last-modified: 20210602T064800Z
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 15:53:16 GMT
etag: "366b6b3db4cf6d939180980d97206821"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Vz3DTiPBhuQOIKQHHmCYH2-NILZQswb6ekFt9Sv0l93SutH0UPOvAQ==
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/sn08wyqt9t.m3u8
200 OK 930 B URL HTTP/2 fast.wistia.com/embed/medias/sn08wyqt9t.m3u8
IP
Hash c6a35a043a966f9ca97763a9ed0a04da
489f8a25f2cf4ba2fb18ba231298c82aacaf19b9
c42b5e1d54374e043aaba5a98b2c20ad693b55c828cc04e540c4cb2ae1e32d5e
GET /embed/medias/sn08wyqt9t.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, no-cache
content-type: application/x-mpegURL
etag: W/"c42b5e1d54374e043aaba5a98b2c20ad"
p3p: CP="CURi ADMa DEVa IVAa IVDa CONi OUR IND DSP CAO COR"
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: ee158013d97bb4ac34de2840e4c34967
x-runtime: 0.025021
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:15 GMT
age: 0
x-served-by: cache-iad-kjyo7100160-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 69, 1
x-timer: S1663775596.726948,VS0,VE117
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 930
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/vulcanV2Player/video/controls/LastFrameCanvasControl.js
200 OK 13 kB URL HTTP/2 fast.wistia.com/assets/external/vulcanV2Player/video/controls/LastFrameCanvasControl.js
IP
File type ASCII text, with very long lines (43812), with no line terminators
Hash 1b7912ff7ae89ae35cba1cde8f5c7575
86f852226991ceb2d30334feb3a0d2ee9bb18129
30b7045c3ff54d61fb888819aa8ed2f1bf041733b078a291e24ec9fb22e31c42
GET /assets/external/vulcanV2Player/video/controls/LastFrameCanvasControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6329c228-3261"
last-modified: Tue, 20 Sep 2022 13:37:44 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:15 GMT
age: 237
x-served-by: cache-iad-kcgs7200136-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 78, 1
x-timer: S1663775596.893513,VS0,VE1
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 12897
X-Firefox-Spdy: h2
embedwistia-a.akamaihd.net/deliveries/545e067bc1ab1716494107ec276b9b54e1190797.m3u8
200 OK 67 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/545e067bc1ab1716494107ec276b9b54e1190797.m3u8
IP
ASN #20940 Akamai International B.V.
Hash 6ba7f8c0d2496730beac321018f265ce
ec4b1cde9e52bfc198d6c68b77eba6eae6a2ff0f
936ad59fb06d4cf20980402cee9ba81525edd8b1038f106c6bb88b2e0bffc9ce
GET /deliveries/545e067bc1ab1716494107ec276b9b54e1190797.m3u8 HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.apple.mpegurl
Content-Length: 66718
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 545e067bc1ab1716494107ec276b9b54e1190797-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=31316639
Expires: Tue, 19 Sep 2023 02:57:14 GMT
Date: Wed, 21 Sep 2022 15:53:15 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
embedwistia-a.akamaihd.net/deliveries/545e067bc1ab1716494107ec276b9b54e1190797.m3u8/seg-1-v1-a1.ts
200 OK 1.9 MB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/545e067bc1ab1716494107ec276b9b54e1190797.m3u8/seg-1-v1-a1.ts
IP
ASN #20940 Akamai International B.V.
File type MPEG transport stream data\012- data
Size 1.9 MB (1889400 bytes)
Hash 438351a606a1b40bb2ce6d71bf7d14d6
c311f57fb0b538c80ad2ad9c66a3bcda6d753ade
da81c1bdafb1515235b98f703b81532174ce386dda8cd72d0b0d79f30083da96
GET /deliveries/545e067bc1ab1716494107ec276b9b54e1190797.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: video/MP2T
Content-Length: 1889400
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: 545e067bc1ab1716494107ec276b9b54e1190797-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=31282920
Expires: Mon, 18 Sep 2023 17:35:15 GMT
Date: Wed, 21 Sep 2022 15:53:15 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
tgenics-cdn.s3.ap-southeast-1.amazonaws.com/cardioclear7/warning.png
200 OK 1.3 kB URL HTTP/1.1 tgenics-cdn.s3.ap-southeast-1.amazonaws.com/cardioclear7/warning.png
IP
File type PNG image data, 100 x 93, 8-bit/color RGBA, non-interlaced\012- data
Hash bd3f139d62a599996a953e70099bb183
4fdb4f7cec4582927a10a9821be4ef3b750ef449
57b01d8335e96ebd1bcec8d13ab2a4339c9d1dd2fb9becd530a1546fcb6c7098
GET /cardioclear7/warning.png HTTP/1.1
Host: tgenics-cdn.s3.ap-southeast-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 6RRwXLCMJl+jPqJ81DTdQPsl7U60W/UscLwsAYm1pn8PYreJzTOgH6PMO0VHPw5ld5zsNFC8g1Q=
x-amz-request-id: TP4WZD0A2EDWCZBP
Date: Wed, 21 Sep 2022 15:53:16 GMT
Last-Modified: Thu, 21 Oct 2021 05:20:57 GMT
ETag: "bd3f139d62a599996a953e70099bb183"
x-amz-meta-sha256: 57b01d8335e96ebd1bcec8d13ab2a4339c9d1dd2fb9becd530a1546fcb6c7098
x-amz-meta-s3b-last-modified: 20211021T052019Z
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 1330
cdn.truegcloud.com/bioleptin/BL-desktop-thumbnail-beforeafter.gif
200 OK 291 kB URL HTTP/2 cdn.truegcloud.com/bioleptin/BL-desktop-thumbnail-beforeafter.gif
IP
File type GIF image data, version 89a, 1707 x 960\012- data
Size 291 kB (290627 bytes)
Hash 342f7f2f7d9aedcec0091023b34cbb51
0e6250994b69e6d128740885f1cb8c98541eb4de
93a1532cda3d6588ad4d468964ec3fb0c9851eb5577acc99ec695b6766325e29
GET /bioleptin/BL-desktop-thumbnail-beforeafter.gif HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 290627
last-modified: Mon, 28 Jun 2021 01:50:43 GMT
x-amz-meta-sha256: 93a1532cda3d6588ad4d468964ec3fb0c9851eb5577acc99ec695b6766325e29
x-amz-meta-s3b-last-modified: 20210628T014908Z
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 18:05:32 GMT
etag: "342f7f2f7d9aedcec0091023b34cbb51"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ejiCZmoIkNRQOlwCdsTjX6_Khq6ee9K_lpbzefstk_G59FCKjstUqQ==
age: 78465
X-Firefox-Spdy: h2
embedwistia-a.akamaihd.net/deliveries/e1bdecac86691bdcf00306279d97bbcf99098a0a.m3u8
200 OK 67 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/e1bdecac86691bdcf00306279d97bbcf99098a0a.m3u8
IP
ASN #20940 Akamai International B.V.
Hash df4ec9ecce7d67fdfe6c1704aa3f0ffc
43b013954a32fa4a37a2b7af81b301148879b443
8fe92a3d56ef29ea3c49967c3caf275c93217a7b75a29ebbeeb9ca95fdafbed4
GET /deliveries/e1bdecac86691bdcf00306279d97bbcf99098a0a.m3u8 HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.apple.mpegurl
Content-Length: 66718
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: e1bdecac86691bdcf00306279d97bbcf99098a0a-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=31283203
Expires: Mon, 18 Sep 2023 17:39:59 GMT
Date: Wed, 21 Sep 2022 15:53:16 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
embedwistia-a.akamaihd.net/deliveries/e1bdecac86691bdcf00306279d97bbcf99098a0a.m3u8/seg-1-v1-a1.ts
200 OK 536 kB URL HTTP/1.1 embedwistia-a.akamaihd.net/deliveries/e1bdecac86691bdcf00306279d97bbcf99098a0a.m3u8/seg-1-v1-a1.ts
IP
ASN #20940 Akamai International B.V.
File type MPEG transport stream data\012- data
Size 536 kB (535800 bytes)
Hash e4bbf49e830ada9374a78d42b7cd472d
094079797af50870369715625a2c71fa2a5ed33a
f35bab215786b6e2606a48329cb257d3801b83f30da056494bb5aa0c13a247f8
GET /deliveries/e1bdecac86691bdcf00306279d97bbcf99098a0a.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embedwistia-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: video/MP2T
Content-Length: 535800
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Last-Modified: Mon, 05 Nov 2018 10:11:00 GMT
surrogate-key: e1bdecac86691bdcf00306279d97bbcf99098a0a-hls-segment a227918e831bad87448fc210e029b3c9b5b84f05
Accept-Ranges: bytes
Cache-Control: max-age=31316663
Expires: Tue, 19 Sep 2023 02:57:39 GMT
Date: Wed, 21 Sep 2022 15:53:16 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Request-Method: *
Access-Control-Allow-Origin: *
ocsp.digicert.com/
200 OK 471 B IP
Hash f044e840446aeed07322953c10259404
d3042c5911e7b86ff100b82814aa809d4da4a57f
2d2f965bc02e954c245eb57517445f6ee2ada480b9082ade85f1558451dbc86a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4505
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:16 GMT
Last-Modified: Wed, 21 Sep 2022 14:38:11 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Wed, 21 Sep 2022 14:41:12 GMT
expires: Wed, 21 Sep 2022 16:41:12 GMT
cache-control: public, max-age=7200
age: 4324
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=0391028E88506741391810A8890766B9; domain=.bing.com; expires=Mon, 16-Oct-2023 15:53:16 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 98E3BF263D2D4B1AA587DC3E9C8DB67E Ref B: OSL30EDGE0421 Ref C: 2022-09-21T15:53:16Z
date: Wed, 21 Sep 2022 15:53:15 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash b6f5f30b99090bb82ff77e15d64c48e5
7e67297b96f31a1f5809e295650c9de447927d86
7f475bbbdafdec40112104ef95c0f0ebd79ff7a3189de99bcc88709ac715fc8c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5611
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:16 GMT
Last-Modified: Wed, 21 Sep 2022 14:19:45 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 9ecd89752214ef749272eef344b9089a
70a58a49c08934265ee34c74efb01d6b3124095d
f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: CSBTYtYZu3wkc4V5lqVawDL5VmfXMnH1d0ODP5BAFaIsV38vm0dYtV352cDlj0TEa1MNdQmaJqMDW0chlQXZZQ==
content-length: 26839
x-fb-trip-id: 1679558926
date: Wed, 21 Sep 2022 15:53:16 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dev.visualwebsiteoptimizer.com/v.gif?cd=0&a=256811&d=bioleptin.com&u=D5A0674212A7D48E885BF8A2CB843EE80&h=62ea2134a371509bb5f0040f25a98523&r=0.4474834541633209
200 OK 35 B URL HTTP/2 dev.visualwebsiteoptimizer.com/v.gif?cd=0&a=256811&d=bioleptin.com&u=D5A0674212A7D48E885BF8A2CB843EE80&h=62ea2134a371509bb5f0040f25a98523&r=0.4474834541633209
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /v.gif?cd=0&a=256811&d=bioleptin.com&u=D5A0674212A7D48E885BF8A2CB843EE80&h=62ea2134a371509bb5f0040f25a98523&r=0.4474834541633209 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 15:53:16 GMT
content-type: image/gif
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
expires: Mon, 10 Jan 2005 00:00:01 GMT
pragma: no-cache
x-content-type-options: nosniff
content-length: 35
server: gnv1c
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f044e840446aeed07322953c10259404
d3042c5911e7b86ff100b82814aa809d4da4a57f
2d2f965bc02e954c245eb57517445f6ee2ada480b9082ade85f1558451dbc86a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4505
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:16 GMT
Last-Modified: Wed, 21 Sep 2022 14:38:11 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 281bc4ac040f65d1a31ff6ce7f7e592f
c1d5bcdb3df2340aeeb6b2d3d20ec7a2a96ba633
f9e7d84b14b25e2bd1b05f5e7c47561e2edec81c759a1af1b8af68851e8818dd
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 21 Sep 2022 15:53:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 20 Sep 2022 23:32:49 GMT
Expires: Wed, 21 Sep 2022 23:32:49 GMT
ETag: "c1d5bcdb3df2340aeeb6b2d3d20ec7a2a96ba633"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
bioleptin.com/favicon.ico
302 Moved Temporarily 0 B URL HTTP/1.1 bioleptin.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: bioleptin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/3/go/indexmaxweb.php?trans=1020ad6c2acd98981c9fe3b3dff505&aff_sub1=1967&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=5561_sessid20220921155313403
Cookie: hasoffers_transaction=1020ad6c2acd98981c9fe3b3dff505; landingPage=go-indexmaxweb; tgopt_7160=1; tgopt_id=YuKAif3GHe6EpZWSWa1z5JCMEhluOQ3U; _vwo_uuid_v2=D5A0674212A7D48E885BF8A2CB843EE80|62ea2134a371509bb5f0040f25a98523
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Moved Temporarily
Date: Wed, 21 Sep 2022 15:53:17 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Location: https://home.bioleptin.com/favicon.ico
Cache-Control: max-age=600
Expires: Wed, 21 Sep 2022 16:03:17 GMT
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
bat.bing.com/action/0?ti=25022381&Ver=2&mid=1f948b0e-cfc3-4897-8829-eaccfb5a7ba0&sid=81829c6039c511eda136d7956abed9e6&vid=81829be039c511ed9e02b938cd5f1ad3&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=BioLeptin&p=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403%23wistia-fs&r=<=3513&evt=pageLoad&sv=1&rn=731400
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=25022381&Ver=2&mid=1f948b0e-cfc3-4897-8829-eaccfb5a7ba0&sid=81829c6039c511eda136d7956abed9e6&vid=81829be039c511ed9e02b938cd5f1ad3&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=BioLeptin&p=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403%23wistia-fs&r=<=3513&evt=pageLoad&sv=1&rn=731400
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=25022381&Ver=2&mid=1f948b0e-cfc3-4897-8829-eaccfb5a7ba0&sid=81829c6039c511eda136d7956abed9e6&vid=81829be039c511ed9e02b938cd5f1ad3&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=BioLeptin&p=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403%23wistia-fs&r=<=3513&evt=pageLoad&sv=1&rn=731400 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1D3FEAC816C363670463F8EE179462D0; domain=.bing.com; expires=Mon, 16-Oct-2023 15:53:16 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: EC7B7E9D55E745A08B3F5A7A384EFEBF Ref B: OSL30EDGE0421 Ref C: 2022-09-21T15:53:16Z
date: Wed, 21 Sep 2022 15:53:15 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/25022381.js
200 OK 666 B URL HTTP/2 bat.bing.com/p/action/25022381.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 460ddd846a21b046dc2ab4d363d8abf0
59b46e2cb3bc3e184c2f3be3d2b089d7022c966b
a59483750a908150552354dfe33360da7e4cfb043604e397529f3e5b58027a0b
GET /p/action/25022381.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 666
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=3C7960C49F9B6A78121872E29ECC6B6D; domain=.bing.com; expires=Mon, 16-Oct-2023 15:53:16 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BC581A5B96BC4440980005D1E2B02FF0 Ref B: OSL30EDGE0421 Ref C: 2022-09-21T15:53:16Z
date: Wed, 21 Sep 2022 15:53:15 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 77f9b5e468180a8976a641e40dceedbf
9873db160721dc9f41d3ff2d711db700d6f5d4d7
cae6929c00ed37fc097432c9ac1d6800244479d3877b17662c67bafeeff23aba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-101401696-16&cid=874986594.1663775596&jid=1049561477&gjid=870554350&_gid=1476375826.1663775596&_u=YEDAAEAAAAAAAC~&z=692895872
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-101401696-16&cid=874986594.1663775596&jid=1049561477&gjid=870554350&_gid=1476375826.1663775596&_u=YEDAAEAAAAAAAC~&z=692895872
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-101401696-16&cid=874986594.1663775596&jid=1049561477&gjid=870554350&_gid=1476375826.1663775596&_u=YEDAAEAAAAAAAC~&z=692895872 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://bioleptin.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 21 Sep 2022 15:53:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 77f9b5e468180a8976a641e40dceedbf
9873db160721dc9f41d3ff2d711db700d6f5d4d7
cae6929c00ed37fc097432c9ac1d6800244479d3877b17662c67bafeeff23aba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f675396b1827a50c78e358358f256144
451b788273e06a08f762735c23c13028e32a3f3c
6bd9e2ec423bf8f0f681a92f4ad0b28cdb53f5df6ca4b571c9697b678c20c126
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.clarity.ms/tag/uet/25022381
200 OK 2.0 kB URL HTTP/2 www.clarity.ms/tag/uet/25022381
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash b2dc56e452665e8beef6859dbcee5f5a
d46db5319d42310fc43112bf02bb0ea813cd55e0
aa013e99d39a5a5d8791d1212add34a52d2c0a792657f5566d64e6bbf4a10e42
GET /tag/uet/25022381 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=59cb81e463664790a74d133e74781b07.20220921.20230921; expires=Thu, 21 Sep 2023 15:53:16 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3f60b293-70d6-4805-b0bb-3484f0a73bf0
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0bDMrYwAAAAAnqhLjyQrWSaI6lf5KabW8T1NMMjMxMDUwMjA1MDIxADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Wed, 21 Sep 2022 15:53:16 GMT
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-101401696-16&cid=874986594.1663775596&jid=1049561477&_u=YEDAAEAAAAAAAC~&z=1827499521
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-101401696-16&cid=874986594.1663775596&jid=1049561477&_u=YEDAAEAAAAAAAC~&z=1827499521
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-101401696-16&cid=874986594.1663775596&jid=1049561477&_u=YEDAAEAAAAAAAC~&z=1827499521 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 21 Sep 2022 15:53:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.truegcloud.com/scripts/all.5.7.1.css
200 OK 13 kB URL HTTP/2 cdn.truegcloud.com/scripts/all.5.7.1.css
IP
Hash 6db3fcb3e6392825ee45bc34ed7a980b
4837619a1dc8b08afb955456537cf960aec11e9b
2c25926050080b3b3b9c0c3b45326a939540c28d7c228924ec07d129fc249f76
GET /scripts/all.5.7.1.css HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, DELETE, PUT, POST
access-control-max-age: 3000
last-modified: Sun, 26 Jan 2020 18:15:34 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 03:44:28 GMT
cache-control: max-age=86400
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y0DmpgfxawgXSod-DxeA3kjA9Mmfs-qcy63S0VxVCr1dgISKPYdWXQ==
age: 43728
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f675396b1827a50c78e358358f256144
451b788273e06a08f762735c23c13028e32a3f3c
6bd9e2ec423bf8f0f681a92f4ad0b28cdb53f5df6ca4b571c9697b678c20c126
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1b33d59cf038a3fe7273f78fda2cce3a
0b367731ef6df8e1f6c1b8774198daa9959d7cf5
b02b1756112479f92786994de8e884986b0a7eb3d5885300bfd8a64f597f7cc4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 15:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=310272689480737&ev=ViewContent&dl=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D_removed_%26aff_sub1%3D1967%26aff_sub2%3D_removed_%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522aff_sub2%2522%255D%252C%2522sensitiveParams%2522%253A%255B%2522cbd31fe312a05a4718b4d67151a8c4052c9aa091f4012fbf5a77ba5da8df41ef%2522%255D%257D%23wistia-fs&rl=&if=false&ts=1663775596599&sw=1280&sh=1024&v=2.9.83&r=stable&ec=1&o=30&fbp=fb.1.1663775596593.795822278&it=1663775596260&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=310272689480737&ev=ViewContent&dl=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D_removed_%26aff_sub1%3D1967%26aff_sub2%3D_removed_%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522aff_sub2%2522%255D%252C%2522sensitiveParams%2522%253A%255B%2522cbd31fe312a05a4718b4d67151a8c4052c9aa091f4012fbf5a77ba5da8df41ef%2522%255D%257D%23wistia-fs&rl=&if=false&ts=1663775596599&sw=1280&sh=1024&v=2.9.83&r=stable&ec=1&o=30&fbp=fb.1.1663775596593.795822278&it=1663775596260&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=310272689480737&ev=ViewContent&dl=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D_removed_%26aff_sub1%3D1967%26aff_sub2%3D_removed_%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522aff_sub2%2522%255D%252C%2522sensitiveParams%2522%253A%255B%2522cbd31fe312a05a4718b4d67151a8c4052c9aa091f4012fbf5a77ba5da8df41ef%2522%255D%257D%23wistia-fs&rl=&if=false&ts=1663775596599&sw=1280&sh=1024&v=2.9.83&r=stable&ec=1&o=30&fbp=fb.1.1663775596593.795822278&it=1663775596260&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Wed, 21 Sep 2022 15:53:16 GMT
expires: Wed, 21 Sep 2022 15:53:16 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=310272689480737&ev=PageView&dl=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D_removed_%26aff_sub1%3D1967%26aff_sub2%3D_removed_%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522aff_sub2%2522%255D%252C%2522sensitiveParams%2522%253A%255B%2522cbd31fe312a05a4718b4d67151a8c4052c9aa091f4012fbf5a77ba5da8df41ef%2522%255D%257D%23wistia-fs&rl=&if=false&ts=1663775596596&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663775596593.795822278&it=1663775596260&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=310272689480737&ev=PageView&dl=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D_removed_%26aff_sub1%3D1967%26aff_sub2%3D_removed_%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522aff_sub2%2522%255D%252C%2522sensitiveParams%2522%253A%255B%2522cbd31fe312a05a4718b4d67151a8c4052c9aa091f4012fbf5a77ba5da8df41ef%2522%255D%257D%23wistia-fs&rl=&if=false&ts=1663775596596&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663775596593.795822278&it=1663775596260&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=310272689480737&ev=PageView&dl=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D_removed_%26aff_sub1%3D1967%26aff_sub2%3D_removed_%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522aff_sub2%2522%255D%252C%2522sensitiveParams%2522%253A%255B%2522cbd31fe312a05a4718b4d67151a8c4052c9aa091f4012fbf5a77ba5da8df41ef%2522%255D%257D%23wistia-fs&rl=&if=false&ts=1663775596596&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663775596593.795822278&it=1663775596260&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Wed, 21 Sep 2022 15:53:16 GMT
expires: Wed, 21 Sep 2022 15:53:16 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/playPauseLoadingControl.js
200 OK 16 kB URL HTTP/2 fast.wistia.com/assets/external/playPauseLoadingControl.js
IP
File type ASCII text, with very long lines (59899), with no line terminators
Hash bc2e2ee2292331734472380da1b8e246
f1c0d0a56add17cf01bfcb69f4165f1a987d56a0
fb6c5149e6bded580759f0dbf09eec19df63d2e925b109e5770598e87a2f7a00
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6329c228-3e3c"
last-modified: Tue, 20 Sep 2022 13:37:44 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:16 GMT
age: 239
x-served-by: cache-iad-kcgs7200113-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 54, 5
x-timer: S1663775597.827828,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 15932
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash edd123486ce1e9776a5a755df76f27a8
d796ed0dd67f3157bf8d451456cea74e0e6d2aea
ad4505e2ae3507b507fd4fb7368739cf6800842704cec8cd99af302f82cb3aec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD4505E2AE3507B507FD4FB7368739CF6800842704CEC8CD99AF302F82CB3AEC"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15201
Expires: Wed, 21 Sep 2022 20:06:37 GMT
Date: Wed, 21 Sep 2022 15:53:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b6d1254ad74f8e4bfbcac0b0562b88a3
7f1c65a6307c53d05a8bf953cb28196a614ae887
d54fd281f59c897359e59528ffa9407a3b212d3d488e433530bd5ca038b5d445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D54FD281F59C897359E59528FFA9407A3B212D3D488E433530BD5CA038B5D445"
Last-Modified: Mon, 19 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2148
Expires: Wed, 21 Sep 2022 16:29:04 GMT
Date: Wed, 21 Sep 2022 15:53:16 GMT
Connection: keep-alive
in.visitors.live/socket.io/?EIO=3&transport=websocket
101 Switching Protocols 0 B URL HTTP/1.1 in.visitors.live/socket.io/?EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: in.visitors.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://bioleptin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sbLrSmTOnEeJr1SeRnrZ8A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: FIXtx8A7vOdvfbM4IYXlJoy7OOk=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
Date: Wed, 21 Sep 2022 15:53:16 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
visitors.live/socket.io/?siteId=220722&EIO=3&transport=websocket
101 Switching Protocols 0 B URL HTTP/1.1 visitors.live/socket.io/?siteId=220722&EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?siteId=220722&EIO=3&transport=websocket HTTP/1.1
Host: visitors.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://bioleptin.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YRhghwY2hVGKv4YrDi3+oQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: ye8zjiFLwCzaIifQ0mvtecNMg/Y=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
Date: Wed, 21 Sep 2022 15:53:16 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b6d1254ad74f8e4bfbcac0b0562b88a3
7f1c65a6307c53d05a8bf953cb28196a614ae887
d54fd281f59c897359e59528ffa9407a3b212d3d488e433530bd5ca038b5d445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D54FD281F59C897359E59528FFA9407A3B212D3D488E433530BD5CA038B5D445"
Last-Modified: Mon, 19 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18676
Expires: Wed, 21 Sep 2022 21:04:33 GMT
Date: Wed, 21 Sep 2022 15:53:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash edd123486ce1e9776a5a755df76f27a8
d796ed0dd67f3157bf8d451456cea74e0e6d2aea
ad4505e2ae3507b507fd4fb7368739cf6800842704cec8cd99af302f82cb3aec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD4505E2AE3507B507FD4FB7368739CF6800842704CEC8CD99AF302F82CB3AEC"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15200
Expires: Wed, 21 Sep 2022 20:06:37 GMT
Date: Wed, 21 Sep 2022 15:53:17 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5956c48894737ea70dd15ee6e5c2a4f4
4d80ab34bcc58920a98c0fdb9ebae26a410dc5f9
f568254d2505f9f96fa6df6b8689d9c5d1279ff5558a393a661f4760800a7b43
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:53:17 GMT
Last-Modified: Wed, 21 Sep 2022 14:19:48 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yQBnfaS8uPCFJqsx5yiUt8ZQ8MzKk6PrOdVRGQYTOFs1eTWov4k3Pw==
Age: 5610
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5956c48894737ea70dd15ee6e5c2a4f4
4d80ab34bcc58920a98c0fdb9ebae26a410dc5f9
f568254d2505f9f96fa6df6b8689d9c5d1279ff5558a393a661f4760800a7b43
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 15:53:17 GMT
Last-Modified: Wed, 21 Sep 2022 14:18:45 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1hahUKQ-YYvKTGux-f-FMfaisKypPfPv6vSxWm3ukEnlDVcAG6QFdg==
Age: 5672
pipedream.wistia.com/mput?topic=metrics
200 OK 2 B URL HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/x-www-form-urlencoded
Content-Length: 6936
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 15:53:17 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
distillery.wistia.com/x
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1608
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 21 Sep 2022 15:53:17 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
X-Firefox-Spdy: h2
d10lpsik1i8c69.cloudfront.net/graphics/blink_green.png
200 OK 1.3 kB URL HTTP/2 d10lpsik1i8c69.cloudfront.net/graphics/blink_green.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 2e4ff7ec8bf18d247ee942621e0f9d65
8a95379165f6eec4bd32371ea005476eb9738e17
9746bbc8be1eacd912bb90f2226b3f9141b15938f7b0281825c74999c0040c9b
GET /graphics/blink_green.png HTTP/1.1
Host: d10lpsik1i8c69.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1283
date: Fri, 02 Sep 2022 19:59:51 GMT
last-modified: Fri, 02 Sep 2022 19:59:47 GMT
etag: "2e4ff7ec8bf18d247ee942621e0f9d65"
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rt3tAYoLz7K4O4yf6rwxnN2ky2i-C1miUzjeBTxwsKydeFzAwPrLKg==
age: 1626807
X-Firefox-Spdy: h2
d10lpsik1i8c69.cloudfront.net/graphics/logo-light.png
200 OK 1.1 kB URL HTTP/2 d10lpsik1i8c69.cloudfront.net/graphics/logo-light.png
IP
File type PNG image data, 68 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 35ce74c31e3ef54462a234340af702d7
237486e74119f2e28f466d401c26fbc64d0a5cdb
8c34bc7bc1985e63394c3c2afff88cdcfc06e501320432dd23eaff83ea6754eb
GET /graphics/logo-light.png HTTP/1.1
Host: d10lpsik1i8c69.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1143
date: Fri, 02 Sep 2022 19:59:51 GMT
last-modified: Fri, 02 Sep 2022 19:59:47 GMT
etag: "35ce74c31e3ef54462a234340af702d7"
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hn883_MnSozNmg_5y25E8AvG7XVsA79Fw8dEbxxDXHN7rGj2pPFHSQ==
age: 1626807
X-Firefox-Spdy: h2
d10lpsik1i8c69.cloudfront.net/graphics/sound-on-white.png
200 OK 277 B URL HTTP/2 d10lpsik1i8c69.cloudfront.net/graphics/sound-on-white.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 76f1993de0fd323f67cece8d8e63bfa2
a95e6e665260a90968d0ff818d5c196dc7684f27
da0c1bc51d4ebfa2570f3e7546d9d3ccfb3f9d3c1199b1ca49869510aa79392a
GET /graphics/sound-on-white.png HTTP/1.1
Host: d10lpsik1i8c69.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 277
date: Fri, 02 Sep 2022 19:59:51 GMT
last-modified: Fri, 02 Sep 2022 19:59:47 GMT
etag: "76f1993de0fd323f67cece8d8e63bfa2"
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qCp8fn1ADEvtzBXB5i9uz2ggWWB9Q74-J-X0cZ9DBykhokdQ3yUeXw==
age: 1626807
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 281bc4ac040f65d1a31ff6ce7f7e592f
c1d5bcdb3df2340aeeb6b2d3d20ec7a2a96ba633
f9e7d84b14b25e2bd1b05f5e7c47561e2edec81c759a1af1b8af68851e8818dd
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 21 Sep 2022 15:53:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 20 Sep 2022 23:32:49 GMT
Expires: Wed, 21 Sep 2022 23:32:49 GMT
ETag: "c1d5bcdb3df2340aeeb6b2d3d20ec7a2a96ba633"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=D07477BB86D045EBA24234DBF0D7328C&RedC=c.clarity.ms&MXFR=17992F639FE3651218F33D459BE36BEC
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=17992F639FE3651218F33D459BE36BEC; domain=.clarity.ms; expires=Mon, 16-Oct-2023 15:53:17 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Wed, 21 Sep 2022 15:53:17 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=D07477BB86D045EBA24234DBF0D7328C&RedC=c.clarity.ms&MXFR=17992F639FE3651218F33D459BE36BEC
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=D07477BB86D045EBA24234DBF0D7328C&RedC=c.clarity.ms&MXFR=17992F639FE3651218F33D459BE36BEC
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=D07477BB86D045EBA24234DBF0D7328C&RedC=c.clarity.ms&MXFR=17992F639FE3651218F33D459BE36BEC HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bioleptin.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=D07477BB86D045EBA24234DBF0D7328C&MUID=33DA45C6AF056DFC3DDA57E0AE526C28
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=33DA45C6AF056DFC3DDA57E0AE526C28; domain=c.bing.com; expires=Mon, 16-Oct-2023 15:53:17 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6BF90CF714904B219B91C2CD13D52A15 Ref B: OSL30EDGE0421 Ref C: 2022-09-21T15:53:17Z
date: Wed, 21 Sep 2022 15:53:16 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=D07477BB86D045EBA24234DBF0D7328C&MUID=33DA45C6AF056DFC3DDA57E0AE526C28
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=D07477BB86D045EBA24234DBF0D7328C&MUID=33DA45C6AF056DFC3DDA57E0AE526C28
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=D07477BB86D045EBA24234DBF0D7328C&MUID=33DA45C6AF056DFC3DDA57E0AE526C28 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bioleptin.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Wed, 21-Sep-2022 16:03:17 GMT; path=/; SameSite=None; Secure;
date: Wed, 21 Sep 2022 15:53:17 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 861
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://bioleptin.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Wed, 21 Sep 2022 15:53:16 GMT
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/allIntegrations.js
200 OK 5.6 kB URL HTTP/2 fast.wistia.com/assets/external/allIntegrations.js
IP
File type ASCII text, with very long lines (21488), with no line terminators
Hash b1eb9672ac177947644bf8e822d19f1e
02d257c4df58e19aa4c6ddc24cc0c6826ab925b5
d7cbd8fdaeee50983c4065843ed5809f5f2d60eb657dcdfd2a569dfdf641cc52
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
content-type: application/javascript
etag: "6329c228-15df"
last-modified: Tue, 20 Sep 2022 13:37:44 GMT
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 21 Sep 2022 15:53:17 GMT
age: 240
x-served-by: cache-iad-kiad7000146-IAD, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 20, 3
x-timer: S1663775598.831304,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 5599
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 71696
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://bioleptin.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Wed, 21 Sep 2022 15:53:17 GMT
X-Firefox-Spdy: h2
home.bioleptin.com/favicon.ico
200 OK 0 B URL HTTP/1.1 home.bioleptin.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: home.bioleptin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bioleptin.com/
Connection: keep-alive
Cookie: hasoffers_transaction=1020ad6c2acd98981c9fe3b3dff505; landingPage=go-indexmaxweb; tgopt_7160=1; tgopt_id=YuKAif3GHe6EpZWSWa1z5JCMEhluOQ3U; _vwo_uuid_v2=D5A0674212A7D48E885BF8A2CB843EE80|62ea2134a371509bb5f0040f25a98523; _ga=GA1.2.874986594.1663775596; _gid=GA1.2.1476375826.1663775596; _gat_UA-101401696-16=1; _uetsid=81829c6039c511eda136d7956abed9e6; _uetvid=81829be039c511ed9e02b938cd5f1ad3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 15:53:18 GMT
Server: Apache
X-Powered-By: PHP/7.0.33
Cache-Control: max-age=172800
Expires: Fri, 23 Sep 2022 15:53:18 GMT
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 7466
Origin: https://bioleptin.com
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://bioleptin.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Wed, 21 Sep 2022 15:53:18 GMT
X-Firefox-Spdy: h2
cdn.truegcloud.com/scripts/font-awesome.4.2.0.min.css
200 OK 0 B URL HTTP/2 cdn.truegcloud.com/scripts/font-awesome.4.2.0.min.css
IP
GET /scripts/font-awesome.4.2.0.min.css HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Sun, 26 Jan 2020 18:15:34 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 02:45:47 GMT
cache-control: max-age=86400
etag: W/"feda974a77ea5783b8be673f142b7c88"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LWcd2LQE9c1qrqEzMITRCMXikTmooO-wLtALDJPB6nla32kS_klCSg==
age: 47249
X-Firefox-Spdy: h2
cdn.truegcloud.com/scripts/bootstrap.3.3.6.min.css
200 OK 0 B URL HTTP/2 cdn.truegcloud.com/scripts/bootstrap.3.3.6.min.css
IP
GET /scripts/bootstrap.3.3.6.min.css HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Sun, 26 Jan 2020 18:15:34 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 03:02:29 GMT
cache-control: max-age=86400
etag: W/"2f624089c65f12185e79925bc5a7fc42"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N4FvWoXEEMgI5zHnAktnaFKVC9reSlpl-w7YbJFkO1gDH2HF9yE2-w==
age: 46246
X-Firefox-Spdy: h2
dev.visualwebsiteoptimizer.com/deploy/js_visitor_settings.php?v=1&a=256811&url=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403&random=0.3214403603411017
200 OK 0 B URL HTTP/2 dev.visualwebsiteoptimizer.com/deploy/js_visitor_settings.php?v=1&a=256811&url=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403&random=0.3214403603411017
IP
GET /deploy/js_visitor_settings.php?v=1&a=256811&url=https%3A%2F%2Fbioleptin.com%2F3%2Fgo%2Findexmaxweb.php%3Ftrans%3D1020ad6c2acd98981c9fe3b3dff505%26aff_sub1%3D1967%26aff_sub2%3D%26aff_sub3%3D%26aff_sub4%3D%26aff_sub5%3D5561_sessid20220921155313403&random=0.3214403603411017 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 15:53:16 GMT
content-type: application/javascript; charset=UTF-8
server: gams1
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d10lpsik1i8c69.cloudfront.net/w.js
200 OK 0 B URL HTTP/2 d10lpsik1i8c69.cloudfront.net/w.js
IP
GET /w.js HTTP/1.1
Host: d10lpsik1i8c69.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:59:48 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 15:50:56 GMT
cache-control: max-age=3600
etag: W/"dc0bbcecf2e632d9beb92f4d88b21c2b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 34TbE0MV42bLsctsjRseG638iYHVbZ5YE4Lme0GcKZLjvkQ48qgGIw==
age: 141
X-Firefox-Spdy: h2
cdn.truegcloud.com/scripts/jquery.1.9.1.min.js
200 OK 0 B URL HTTP/2 cdn.truegcloud.com/scripts/jquery.1.9.1.min.js
IP
GET /scripts/jquery.1.9.1.min.js HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 26 Jan 2020 18:15:34 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 03:44:27 GMT
cache-control: max-age=86400
etag: W/"397754ba49e9e0cf4e7c190da78dda05"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -qsKQCz0okxzUClwfJtVQoaxHx_3pq1169_VMJv1SgdF6HwsCZDj1Q==
age: 43728
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Fira+Sans&display=swap:800
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Fira+Sans&display=swap:800
IP
GET /css?family=Fira+Sans&display=swap:800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 21 Sep 2022 15:53:14 GMT
date: Wed, 21 Sep 2022 15:53:14 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d10lpsik1i8c69.cloudfront.net/js/clickstream.js?v=e708588
200 OK 0 B URL HTTP/2 d10lpsik1i8c69.cloudfront.net/js/clickstream.js?v=e708588
IP
GET /js/clickstream.js?v=e708588 HTTP/1.1
Host: d10lpsik1i8c69.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bioleptin.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 18 Sep 2022 16:52:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 02 Sep 2022 19:59:47 GMT
etag: W/"6a7ba000cc0f3518baa46608eb12410c"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ah0iMfSGJDpLLFyQDQxdFDE09eF7S1zPJOJxZoU0H5Ss6Hr1HYhsiA==
age: 255670
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.40/clarity.js
200 OK 0 B URL HTTP/2 www.clarity.ms/eus2/s/0.6.40/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus2/s/0.6.40/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8c7baa5622330"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0bDMrYwAAAAC8IpcKoIILT6S+ZGxuJCR2T1NMMjMxMDUwMjA1MDIxADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
date: Wed, 21 Sep 2022 15:53:16 GMT
X-Firefox-Spdy: h2
cdn.truegcloud.com/bioleptin/files/css/stylesheetuglyduckling.css
200 OK 0 B URL HTTP/2 cdn.truegcloud.com/bioleptin/files/css/stylesheetuglyduckling.css
IP
GET /bioleptin/files/css/stylesheetuglyduckling.css HTTP/1.1
Host: cdn.truegcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 05 Mar 2019 11:10:16 GMT
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Wed, 21 Sep 2022 03:44:27 GMT
etag: W/"f2e50fcb73a1fc8d85aa22e31709c2d5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -EQt_B8jOnpURthy-x1Rcf-dbpvtmgduJySGm8p8LQw592OLnEcnqA==
age: 43729
X-Firefox-Spdy: h2
d10lpsik1i8c69.cloudfront.net/css/reset.css
200 OK 0 B URL HTTP/2 d10lpsik1i8c69.cloudfront.net/css/reset.css
IP
GET /css/reset.css HTTP/1.1
Host: d10lpsik1i8c69.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bioleptin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Fri, 02 Sep 2022 19:59:50 GMT
last-modified: Fri, 02 Sep 2022 19:59:47 GMT
etag: W/"7144eaceff0b31347712515a6116074e"
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gCCVj-_5razlWE8zQ2NIJbnTi3Ie349qv1T8Tjt_AAxO4PhRgSBawg==
age: 1626808
X-Firefox-Spdy: h2
mwebnice.com/5561/1967/6/?subid=dfegrthujtrfeadfeethryju
302 Found 0 B URL HTTP/2 mwebnice.com/5561/1967/6/?subid=dfegrthujtrfeadfeethryju
IP
Analyzer Verdict Alert fortinet Phishing
GET /5561/1967/6/?subid=dfegrthujtrfeadfeethryju HTTP/1.1
Host: mwebnice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Wed, 21 Sep 2022 15:53:13 GMT
content-type: text/html; charset=UTF-8
location: http://tracking.bioleptin-at.com/aff_c?offer_id=64&aff_id=2629&url_id=1517&aff_sub5=5561_sessid20220921155313403&aff_sub=1967
cache-control: max-age=3600, private
pragma: no-cache
expires: Wed, 21 Sep 2022 16:53:13 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74e3f8f218a6b500-OSL
X-Firefox-Spdy: h2
149.102.130.196
52.219.128.67
93.184.220.29
52.210.174.128
151.101.86.110
23.36.76.226
157.240.200.14
0.0.0.0