cdnjs.cloudflare.com/ajax/libs/web-animations/2.3.1/web-animations.min.js
14 kB URL cdnjs.cloudflare.com/ajax/libs/web-animations/2.3.1/web-animations.min.js
IP
File type ASCII text, with very long lines (47169)
Hash f689a668b5c6078984b93b9f59793c90
83042534752a6d9b0a4a086517e19230416feba4
cbb3c795fd44c83a1200149b18e0df050fe228df4b5b03891373029117d8bd6b
GET /ajax/libs/web-animations/2.3.1/web-animations.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 13763
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402f-bad6"
last-modified: Mon, 04 May 2020 16:17:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 687609
expires: Sat, 23 Nov 2024 03:32:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JIAb3gQeOZU%2FFyNvYPgmN7HlaGGZHqHUScsXtW3wYtdRDEzyv7%2BZUJiUqqmBS6TznlLWsPc3sagwrpRR43dFE8jfpjQDDc8R6VE4VligEaZ0UpKOBu7eq2NXkAKPDDTrqHuRfWuz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8300fba29dad56af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/launch-a0e5cece2585.min.js
154 kB URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/launch-a0e5cece2585.min.js
IP
File type ASCII text, with very long lines (32742)
Size 154 kB (154411 bytes)
Hash 9f22d37eff0340108e8e839a349263cc
0cabbc873195e92a33ed4694d49048ef05f52eee
47212462490d0b8fbf15a409fd8a79bd1a1f37c93790055517c1dc629bc9082f
GET /a281455e4dfe/86f9b29df5eb/launch-a0e5cece2585.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "9f22d37eff0340108e8e839a349263cc:1700230291.849047"
last-modified: Fri, 17 Nov 2023 14:11:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 154411
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:34 GMT
date: Mon, 04 Dec 2023 03:32:34 GMT
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/css/bootstrap.min.css
26 kB URL cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65326)
Hash 023b3876bb73aa541367fc40a193d2b7
8ed2d6350d23f857d92805737d0f97c675de666b
f77c0d1739b618edc4a01ca3f6b2990b01a3009030af49ee8cf68e83052df194
GET /npm/bootstrap@4.5.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.5.3
x-jsd-version-type: version
etag: W/"27288-jtLWNQ0j+FfZKAVzfQ+XxnXeZms"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 03:32:34 GMT
age: 21974464
x-served-by: cache-fra-eddf8230071-FRA, cache-bma1675-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26099
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js?client=gme-entertainmentbenefits&libraries=places
66 kB URL maps.googleapis.com/maps/api/js?client=gme-entertainmentbenefits&libraries=places
IP
File type ASCII text, with very long lines (2928)
Hash 59b64ce85b33a556c7372400096319f0
2150f1e1e4132e89bb0859d74e8c6468e981bef4
6bc8edf20fa26484c5a1e9a7e825ca66b5aa394a827f204dd9b6860e7d3ed264
GET /maps/api/js?client=gme-entertainmentbenefits&libraries=places HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
vary: Accept-Language, Origin, X-Origin, Referer
timing-allow-origin: *
content-type: text/javascript; charset=UTF-8
cache-control: public, max-age=1800
content-encoding: gzip
date: Mon, 04 Dec 2023 03:32:34 GMT
server: scaffolding on HTTPServer2
content-length: 65931
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5QN8HWM
79 kB URL www.googletagmanager.com/gtm.js?id=GTM-5QN8HWM
IP
File type ASCII text, with very long lines (19808)
Hash 13f48589805842506f920f45758b2cef
519b2175119ad7337f9dcf856421f8bbb1ecf3f9
23398043c89fbeda8d1fc57c978a23e2c05eea3ba910c8f96208f24b25ad2d03
GET /gtm.js?id=GTM-5QN8HWM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:34 GMT
expires: Mon, 04 Dec 2023 03:32:34 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79019
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
12 kB URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32768)
Hash d860c16ac938f7d839f0ec158d02d0f0
8710f81ed151233677f7e32b229cb35293dd6840
9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12163
expires: Mon, 04 Dec 2023 04:32:34 GMT
date: Mon, 04 Dec 2023 03:32:34 GMT
cache-control: no-cache
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/assets/new-relic/new-relic-integration.js
20 kB URL cenlar.savings.workingadvantage.com/assets/new-relic/new-relic-integration.js
IP
File type ASCII text, with very long lines (51930)
Hash 0cd967d483680340e1c5d0f1c3b34662
4f6121c35c81f16302bdb45a3a00ee708896a72c
bc49c009b33e66a59f057cf4ada682b80d4401d919ddf0f8d3ef2bb0415f0b23
GET /assets/new-relic/new-relic-integration.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:34 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:55 GMT
vary: Accept-Encoding
etag: W/"65669f8f-ccde"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fba27c20b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2
14 kB URL fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13980, version 1.0\012- data
Hash b7d6b48d8d12946dc808ff39aed6c460
3f18028a04b3fb39bb1cc33dce401d04e9207970
d4ae5188a65370ecfe28f42293bbee8297cfd5712c6aadfdb270d48f2bcd88b0
GET /s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13980
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:27:40 GMT
expires: Fri, 29 Nov 2024 01:27:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:19 GMT
content-type: font/woff2
age: 353094
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
23 B URL maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 04 Dec 2023 03:32:34 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cenlar.savings.workingadvantage.com/styles.470895e6035d0005.css
18 kB URL cenlar.savings.workingadvantage.com/styles.470895e6035d0005.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e5139ecca342c6c60da1c222d8b1c415
3327b2ed795950f5459d82952d7e9c73d59e6a95
7678fff11f92c598d89035e7f1e5ae839902925df05059daa23901b914765975
GET /styles.470895e6035d0005.css HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CvVersion%7C5.4.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:34 GMT
content-type: text/css
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-187ec"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fba4dcdfb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RCea9d317d3a374e44b3f0f8711e38765e-source.min.js
752 B URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RCea9d317d3a374e44b3f0f8711e38765e-source.min.js
IP
File type ASCII text, with very long lines (1539)
Hash 577157aef198d284c2607950ca5103d7
88794ccaa4bd1ebe47ef9c7bc8b8d29e8745d59e
79be51fc272496787a050c87a75d582d640039eb2a6f7e080f64f6e5ec2fc6ca
GET /a281455e4dfe/86f9b29df5eb/99058982850f/RCea9d317d3a374e44b3f0f8711e38765e-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "52b5e7d86e1980765da3e075758f5e02:1700230292.716631"
last-modified: Fri, 17 Nov 2023 14:11:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 752
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:34 GMT
date: Mon, 04 Dec 2023 03:32:34 GMT
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-FD2X5ZMELR&l=dataLayer&cx=c
93 kB URL www.googletagmanager.com/gtag/js?id=G-FD2X5ZMELR&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (5955)
Hash 998abfbee7e7ce32778a203328541dfa
6fb65119a14377d9e266cfab1940ecfdd67049c6
3a6392b259feec45a52fae9465aca7101ae745ab637a012cced6358e21a2a5d5
GET /gtag/js?id=G-FD2X5ZMELR&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:34 GMT
expires: Mon, 04 Dec 2023 03:32:34 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93083
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=5ef4f9c1e806678f2ab0275df01d5ff4&zmpID=ebg-wag3&cache_buster=1701660760428&k=ebg-wag3-pixel-0988
6.4 kB URL live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=5ef4f9c1e806678f2ab0275df01d5ff4&zmpID=ebg-wag3&cache_buster=1701660760428&k=ebg-wag3-pixel-0988
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2300)
Hash a934f12d53c2c741ad89112baf602f67
21fb9fc653f28a476bf850a81baefbe024e33457
3042ff05cbaa818b26bf59c7c32d6515a720ca5f25bde589cb0ef1e91ae51def
GET /sync?c=16b6410431b6374e780104abb0443ca8&p=5ef4f9c1e806678f2ab0275df01d5ff4&zmpID=ebg-wag3&cache_buster=1701660760428&k=ebg-wag3-pixel-0988 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 6373
date: Mon, 04 Dec 2023 03:32:35 GMT
set-cookie: zync-uuid=3ea40035-b345-4ea6-8340-b0840d923b4a:1701660755.2226877; Domain=rezync.com; Expires=Sat, 01 Jun 2024 03:32:35 GMT; Path=/; SameSite=None; Secure
sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiM2VhNDAwMzUtYjM0NS00ZWE2LTgzNDAtYjA4NDBkOTIzYjRhOjE3MDE2NjA3NTUuMjIyNjg3NyJ9.ZW1IUw.U7db4YCKo4Uwig4V6_fcGk7s-8s; Expires=Sat, 01 Jun 2024 03:32:35 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
accept-ranges: bytes
server: lighttpd/1.4.69
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BtDSPn4Vlchano_wBltfa9RbalhBf0QmgdOhs_JAmtn1yC-POScqBg==
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/scripts.b785e07ef29de485.js
56 kB URL cenlar.savings.workingadvantage.com/scripts.b785e07ef29de485.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 46c966376ef0860c9f256d7701100634
7cf0609623ef764b6c28e3778565084628881241
ac3e5cf9dbf7e7d8afbde8193602e353a531e05ea3ed89990432248a8c73ee18
GET /scripts.b785e07ef29de485.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:34 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-29710"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fba28c2db4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/main.5139e63dcaa68cb8.js
1.1 MB URL cenlar.savings.workingadvantage.com/main.5139e63dcaa68cb8.js
IP
File type Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Size 1.1 MB (1091243 bytes)
Hash 95bfd7911ea2afc23eda60fb065f7fa8
6b39d5dbb053484b6ffa3d36932fcd61744f8c75
e57f1978d4478f1baf0978eb135cbf7da6bc2fb5cef9e0c3b6ef7df8d25f2a26
GET /main.5139e63dcaa68cb8.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:34 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-5058de"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fba28c2fb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=DC-12084042
70 kB URL www.googletagmanager.com/gtag/js?id=DC-12084042
IP
File type ASCII text, with very long lines (4179)
Hash c27c120a99b7945a81a2f7a4c754d0db
7f74b32115830c478a6fb2151a0713e6d8d52a59
3991bf35f7e4c2bd78b28dac23a3c62717e0293ea3eaf30b97fa72d8cce0f645
GET /gtag/js?id=DC-12084042 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:35 GMT
expires: Mon, 04 Dec 2023 03:32:35 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70481
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=DC-12084042&l=dataLayer&cx=c
71 kB URL www.googletagmanager.com/gtag/js?id=DC-12084042&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (4179)
Hash 85c15d5ded1bb54543b64a04c7406531
2044ca16a9c78d58adf0d3e7796cd0593cdd20f4
44e78a09c2c088e32f3649bef572f92b2414c14d5cd0866fde287a7c289d5a43
GET /gtag/js?id=DC-12084042&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:35 GMT
expires: Mon, 04 Dec 2023 03:32:35 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70554
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.boomtrain.com/p13n/ebg-wag3/p13n.min.js
30 kB URL cdn.boomtrain.com/p13n/ebg-wag3/p13n.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7e025917ec081cb179b24e9b42269588
a6522f88185982ebde143a2b1e399034962c6eba
cd6c50080cda668d0e858886b870ff15124d16be997d5b0d43e97d4788a20879
GET /p13n/ebg-wag3/p13n.min.js HTTP/1.1
Host: cdn.boomtrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 03 Dec 2023 04:36:21 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: l04UFkooc_cpGNqh.9nfCARIbuQ4HwRZ
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 04 Dec 2023 03:31:33 GMT
Cache-Control: public, max-age=3600
ETag: W/"7e025917ec081cb179b24e9b42269588"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WvfsXh3d32RYon0fE84sNNLYoomlxfyyJaSwc5YwfclJbRvXcBCTHw==
Age: 2230
cenlar.savings.workingadvantage.com/api/info
2.7 kB URL cenlar.savings.workingadvantage.com/api/info
IP
File type JSON data\012- , ASCII text, with very long lines (7014), with no line terminators
Hash 134fa6e83061ba5e2d884d1d22d9da4d
a1ebb677a936f1c610aec1b495cb7ea07942325f
e404a37493abf1ca5b11c580c98e503d7c4ecabc1ca56088bba017f90f05cdbd
GET /api/info HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImMxNzRhNWE0OWMyMWMyY2EiLCJ0ciI6ImIzZWZmNmYyMzRkNjIwZjBkYzJmN2FkYmQ0MTA2NzAwIiwidGkiOjE3MDE2NjA3NjA5NjgsInRrIjoiODg4MzEifX0=
traceparent: 00-b3eff6f234d620f0dc2f7adbd4106700-c174a5a49c21c2ca-01
tracestate: 88831@nr=0-1-2647367-1120218725-c174a5a49c21c2ca----1701660760968
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.0.1701660760.0.0.0; _ga=GA1.1.867582582.1701660761
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:35 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Origin
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
expires: Mon, 04 Dec 2023 03:32:34 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fba9ce63b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/api/known/dlk-compare?guid=9295s2tu1rs9qlf5l8edmdxwm
182 B URL cenlar.savings.workingadvantage.com/api/known/dlk-compare?guid=9295s2tu1rs9qlf5l8edmdxwm
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d31f438ae4da135e79cb20d87893151d
946148505e7d6720180213a5fc82cdf4dd8ebc15
170287bbbfc14739c9b3aa6ce30abb0669d418f01118028f4b06c198fdbdde1d
GET /api/known/dlk-compare?guid=9295s2tu1rs9qlf5l8edmdxwm HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjlhMzMyZGU1ZTYwMDA0N2MiLCJ0ciI6ImViOWQ5Yjc1YjU4N2E5MTFkODU4ZDU3ZWNhNWJlMzAwIiwidGkiOjE3MDE2NjA3NjE1NzAsInRrIjoiODg4MzEifX0=
traceparent: 00-eb9d9b75b587a911d858d57eca5be300-9a332de5e600047c-01
tracestate: 88831@nr=0-1-2647367-1120218725-9a332de5e600047c----1701660761570
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667961s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.0.1701660761.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Mon, 04 Dec 2023 03:32:36 GMT
content-type: application/json; charset=utf-8
content-length: 182
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"b6-lGFIUF59ZyAYAhOl/ILN9N2OvBU"
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbad9f5eb4f9-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/socket.io/?EIO=3&transport=websocket
0 B URL cenlar.savings.workingadvantage.com/socket.io/?EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cenlar.savings.workingadvantage.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: V8FQH5qqOgFtiE8Uf5lVgA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667961s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.0.1701660761.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 04 Dec 2023 03:32:36 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 26xyOHFcqsxLXMVkaONOx5mOBSI=
Access-Control-Allow-Origin: https://cenlar.savings.workingadvantage.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
CF-Cache-Status: DYNAMIC
Strict-Transport-Security: max-age=5184000; includeSubDomains
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8300fbad993956ae-OSL
alt-svc: h3=":443"; ma=86400
auth.savings.workingadvantage.com/auth/authorize?subdomain=cenlar&response_type=code&client_id=9ezalirn45mF43imJTdf53&utm_source=email&utm_medium=November-30-2023-mme&utm_campaign=email-mme&utm_content=Ikon%20Pass&redirect_uri=https%3A%2F%2Fcenlar.savings.workingadvantage.com%2Fhome%3Foff_guid%3D0fJajAlDE2gxrIjjeMAHFf%26ebldr_form%3D2.01%26source-id%3Demail%26utm_source%3Demail%26utm_campaign%3Demail-mme%26utm_medium%3DNovember-30-2023-mme%26utm_content%3DIkon%2520Pass%26DLK%3D9295s2tu1rs9qlf5l8edmdxwm
158 kB URL auth.savings.workingadvantage.com/auth/authorize?subdomain=cenlar&response_type=code&client_id=9ezalirn45mF43imJTdf53&utm_source=email&utm_medium=November-30-2023-mme&utm_campaign=email-mme&utm_content=Ikon%20Pass&redirect_uri=https%3A%2F%2Fcenlar.savings.workingadvantage.com%2Fhome%3Foff_guid%3D0fJajAlDE2gxrIjjeMAHFf%26ebldr_form%3D2.01%26source-id%3Demail%26utm_source%3Demail%26utm_campaign%3Demail-mme%26utm_medium%3DNovember-30-2023-mme%26utm_content%3DIkon%2520Pass%26DLK%3D9295s2tu1rs9qlf5l8edmdxwm
IP
Size 158 kB (158116 bytes)
Hash b7c278ecb8e915862567da5241f134ae
0d14cae6aadc90ef2622fccc6cdfc5a5b6aae4f0
50401f3b6c8570877d45f337339755df56528c90840f0aadb2525ca19e21b99b
GET /auth/authorize?subdomain=cenlar&response_type=code&client_id=9ezalirn45mF43imJTdf53&utm_source=email&utm_medium=November-30-2023-mme&utm_campaign=email-mme&utm_content=Ikon%20Pass&redirect_uri=https%3A%2F%2Fcenlar.savings.workingadvantage.com%2Fhome%3Foff_guid%3D0fJajAlDE2gxrIjjeMAHFf%26ebldr_form%3D2.01%26source-id%3Demail%26utm_source%3Demail%26utm_campaign%3Demail-mme%26utm_medium%3DNovember-30-2023-mme%26utm_content%3DIkon%2520Pass%26DLK%3D9295s2tu1rs9qlf5l8edmdxwm HTTP/1.1
Host: auth.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667961s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.0.1701660761.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Mon, 04 Dec 2023 03:32:36 GMT
content-type: text/html; charset=utf-8
x-powered-by:
access-control-allow-origin: http://auth.savings.workingadvantage.com
vary: Origin, Accept
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
location: /cenlar/sign-in?response_type=code&client_id=9ezalirn45mF43imJTdf53&utm_source=email&utm_medium=November-30-2023-mme&utm_campaign=email-mme&utm_content=Ikon%20Pass&redirect_uri=https%3A%2F%2Fcenlar.savings.workingadvantage.com%2Fhome%3Foff_guid%3D0fJajAlDE2gxrIjjeMAHFf%26ebldr_form%3D2.01%26source-id%3Demail%26utm_source%3Demail%26utm_campaign%3Demail-mme%26utm_medium%3DNovember-30-2023-mme%26utm_content%3DIkon%2520Pass%26DLK%3D9295s2tu1rs9qlf5l8edmdxwm
expires: Mon, 04 Dec 2023 03:32:35 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbaebfbbb4f9-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/web-animations/2.3.1/web-animations.min.js
14 kB URL cdnjs.cloudflare.com/ajax/libs/web-animations/2.3.1/web-animations.min.js
IP
File type ASCII text, with very long lines (47169)
Hash f689a668b5c6078984b93b9f59793c90
83042534752a6d9b0a4a086517e19230416feba4
cbb3c795fd44c83a1200149b18e0df050fe228df4b5b03891373029117d8bd6b
GET /ajax/libs/web-animations/2.3.1/web-animations.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 13763
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402f-bad6"
last-modified: Mon, 04 May 2020 16:17:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 687611
expires: Sat, 23 Nov 2024 03:32:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3phwih6zaOIFgI7tZihAppf%2Fx3WB%2FHC4JdVmexCJi9yEeIUkfMcFyYNoM8ZUbeEC57rv5JGfyFxiNkMqnRE6zCXQHL3fqHu0aA9f8SUUw%2FNiUwLiIJ3M%2FIvctX6bEIe6dzp%2Frg4G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8300fbb0aab6b521-OSL
alt-svc: h3=":443"; ma=86400
cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/css/bootstrap.min.css
26 kB URL cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65326)
Hash 023b3876bb73aa541367fc40a193d2b7
8ed2d6350d23f857d92805737d0f97c675de666b
f77c0d1739b618edc4a01ca3f6b2990b01a3009030af49ee8cf68e83052df194
GET /npm/bootstrap@4.5.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auth.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.5.3
x-jsd-version-type: version
etag: W/"27288-jtLWNQ0j+FfZKAVzfQ+XxnXeZms"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 03:32:36 GMT
age: 21974467
x-served-by: cache-fra-eddf8230071-FRA, cache-bma1675-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26099
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js?client=gme-entertainmentbenefits&libraries=places
66 kB URL maps.googleapis.com/maps/api/js?client=gme-entertainmentbenefits&libraries=places
IP
File type ASCII text, with very long lines (2928)
Hash 59b64ce85b33a556c7372400096319f0
2150f1e1e4132e89bb0859d74e8c6468e981bef4
6bc8edf20fa26484c5a1e9a7e825ca66b5aa394a827f204dd9b6860e7d3ed264
GET /maps/api/js?client=gme-entertainmentbenefits&libraries=places HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
vary: Accept-Language, Origin, X-Origin, Referer
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
timing-allow-origin: *
content-encoding: gzip
date: Mon, 04 Dec 2023 03:32:36 GMT
server: scaffolding on HTTPServer2
content-length: 65931
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtm.js?id=GTM-5QN8HWM
79 kB URL www.googletagmanager.com/gtm.js?id=GTM-5QN8HWM
IP
File type ASCII text, with very long lines (19808)
Hash 17374ea9262d0cad130afc769c683a34
a7ee8cb6be7295ac470a311766c5fe1c6c2c3df2
126598c1a37d78903538d71584bba74d6e401bff53fc6b1675f03619fe0d04ba
GET /gtm.js?id=GTM-5QN8HWM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:36 GMT
expires: Mon, 04 Dec 2023 03:32:36 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79020
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
12 kB URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32768)
Hash d860c16ac938f7d839f0ec158d02d0f0
8710f81ed151233677f7e32b229cb35293dd6840
9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12163
expires: Mon, 04 Dec 2023 04:32:36 GMT
date: Mon, 04 Dec 2023 03:32:36 GMT
cache-control: no-cache
access-control-allow-origin: https://auth.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
auth.savings.workingadvantage.com/assets/new-relic/new-relic-integration.js
20 kB URL auth.savings.workingadvantage.com/assets/new-relic/new-relic-integration.js
IP
File type ASCII text, with very long lines (51930)
Hash 0cd967d483680340e1c5d0f1c3b34662
4f6121c35c81f16302bdb45a3a00ee708896a72c
bc49c009b33e66a59f057cf4ada682b80d4401d919ddf0f8d3ef2bb0415f0b23
GET /assets/new-relic/new-relic-integration.js HTTP/1.1
Host: auth.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/cenlar/sign-in?response_type=code&client_id=9ezalirn45mF43imJTdf53&utm_source=email&utm_medium=November-30-2023-mme&utm_campaign=email-mme&utm_content=Ikon%20Pass&redirect_uri=https%3A%2F%2Fcenlar.savings.workingadvantage.com%2Fhome%3Foff_guid%3D0fJajAlDE2gxrIjjeMAHFf%26ebldr_form%3D2.01%26source-id%3Demail%26utm_source%3Demail%26utm_campaign%3Demail-mme%26utm_medium%3DNovember-30-2023-mme%26utm_content%3DIkon%2520Pass%26DLK%3D9295s2tu1rs9qlf5l8edmdxwm
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667961s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.0.1701660761.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:36 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:24:58 GMT
vary: Accept-Encoding
etag: W/"6566a0fa-ccde"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbb09858b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
23 B URL maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auth.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 04 Dec 2023 03:32:36 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://auth.savings.workingadvantage.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2
14 kB URL fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13980, version 1.0\012- data
Hash b7d6b48d8d12946dc808ff39aed6c460
3f18028a04b3fb39bb1cc33dce401d04e9207970
d4ae5188a65370ecfe28f42293bbee8297cfd5712c6aadfdb270d48f2bcd88b0
GET /s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auth.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13980
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:27:40 GMT
expires: Fri, 29 Nov 2024 01:27:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:19 GMT
content-type: font/woff2
age: 353096
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-FD2X5ZMELR&l=dataLayer&cx=c
93 kB URL www.googletagmanager.com/gtag/js?id=G-FD2X5ZMELR&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (5955)
Hash 84b3cc94468ca46fb726313c5b313613
771dfa145cc0fe9d92be38044ab3ce8c1a3cc988
bc744146a1e6027e3e5b739b62c6d274bd1f72efbff5f64d74d1be5479418708
GET /gtag/js?id=G-FD2X5ZMELR&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:37 GMT
expires: Mon, 04 Dec 2023 03:32:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93085
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cenlar.savings.beneplace.com/api/notifications/system-wide
2 B URL cenlar.savings.beneplace.com/api/notifications/system-wide
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /api/notifications/system-wide HTTP/1.1
Host: cenlar.savings.beneplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auth.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:37 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-powered-by:
access-control-allow-origin: https://auth.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w"
expires: Mon, 04 Dec 2023 03:32:36 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=8NmOCLMyxgiwxRPeoegJID6LRXZCghQawf63GdOk5fw-1701660757-0-Aelal67rPWt209FIlcvxvXi6OAn4chHZDYrRTv8+2bUYu6oMR1WQMDirsWX6lp6RPQscxQNU6q26vKRUUjuTwAE=; path=/; expires=Mon, 04-Dec-23 04:02:37 GMT; domain=.beneplace.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbb54f8fb500-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RCfc27f81c245c44b78fbb03ff4af1a6be-source.min.js
214 B URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RCfc27f81c245c44b78fbb03ff4af1a6be-source.min.js
IP
Hash 9de49b0d72b52bcff35a575dcbf3a505
67b61404e3f0bf10d1aa5a8895b5f0840a2b8f4d
c8ab5af61a41599d2375ab31a82cc778a38e29b25049ac57f1e6fcd60c004afe
GET /a281455e4dfe/86f9b29df5eb/99058982850f/RCfc27f81c245c44b78fbb03ff4af1a6be-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "52b5e7d86e1980765da3e075758f5e02:1700230292.716631"
last-modified: Fri, 17 Nov 2023 14:11:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:38 GMT
date: Mon, 04 Dec 2023 03:32:38 GMT
content-length: 214
access-control-allow-origin: https://auth.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC986b4d5825364bd4887033e40e20c549-source.min.js
429 B URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC986b4d5825364bd4887033e40e20c549-source.min.js
IP
File type ASCII text, with very long lines (610)
Hash 312cb3e912e23ae79d6f14e1f73679ac
a3303715a66d325886a96badf99dc1111dbffa2c
d56b6db4e16388149899dcea8f2bcbf6856bb84e7b9b866ddf3c388e5d12e8d6
Analyzer Verdict Alert Public Nextron YARA rules malware Webshells iisstart.aspx and Logout.aspx
GET /a281455e4dfe/86f9b29df5eb/99058982850f/RC986b4d5825364bd4887033e40e20c549-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "52b5e7d86e1980765da3e075758f5e02:1700230292.716631"
last-modified: Fri, 17 Nov 2023 14:11:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:38 GMT
date: Mon, 04 Dec 2023 03:32:38 GMT
content-length: 429
access-control-allow-origin: https://auth.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cenlar.savings.beneplace.com/api/info?authInfo=true
2.5 kB URL cenlar.savings.beneplace.com/api/info?authInfo=true
IP
File type JSON data\012- , ASCII text, with very long lines (8458), with no line terminators
Hash abe47dcbecc491356d30173e229bca58
3b92a9e7bf96050e7a931d92ef5238fdab30a991
820af9ff429c9e239f20febd6b207557dd91f8fdf1d6a23a1091becc4fa0a607
GET /api/info?authInfo=true HTTP/1.1
Host: cenlar.savings.beneplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auth.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:38 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Origin
x-powered-by:
access-control-allow-origin: https://auth.savings.workingadvantage.com
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
expires: Mon, 04 Dec 2023 03:32:37 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=VeYQQZn2LE6_r.XbScfupFM1LHMOQHp7ULp9sZiGFhQ-1701660758-0-AeoSQ8l57i8Rc3X2DMMQLp0sK27TMBKHvj14HqgV+EOTif04KeDW7/MccEXYm8dgcEi+H30vJaNC9ft7Ed4Z7pg=; path=/; expires=Mon, 04-Dec-23 04:02:38 GMT; domain=.beneplace.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbba0edcb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/launch-a0e5cece2585.min.js
154 kB URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/launch-a0e5cece2585.min.js
IP
File type ASCII text, with very long lines (32742)
Size 154 kB (154411 bytes)
Hash 9f22d37eff0340108e8e839a349263cc
0cabbc873195e92a33ed4694d49048ef05f52eee
47212462490d0b8fbf15a409fd8a79bd1a1f37c93790055517c1dc629bc9082f
GET /a281455e4dfe/86f9b29df5eb/launch-a0e5cece2585.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "9f22d37eff0340108e8e839a349263cc:1700230291.849047"
last-modified: Fri, 17 Nov 2023 14:11:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 154411
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:38 GMT
date: Mon, 04 Dec 2023 03:32:38 GMT
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cenlar.savings.beneplace.com/api/platform/options/onetrust
58 kB URL cenlar.savings.beneplace.com/api/platform/options/onetrust
IP
File type JSON data\012- , ASCII text, with very long lines (501), with no line terminators
Hash 323b183e15b47425a7830d61290d9dd4
ee9f6c9554c7ff236eebfc58d0697412477959db
05f687735d78286be14d4e10a1fb29138cddcf927835e5441b61406512db7c8e
GET /api/platform/options/onetrust HTTP/1.1
Host: cenlar.savings.beneplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auth.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:38 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: https://auth.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"1f5-7p9slVTH/yNu6/xY0Gl0Ekd5Wds"
expires: Mon, 04 Dec 2023 03:32:37 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=.d1LU9S1vtdJ9.rhcSPbTySExg0cHf67taNBWc5iwd4-1701660758-0-AcUeiFliokg+rCO7MxYajIWE9kpFQiYYNwlO/rwiUXTuVMfqzfzRdFr74CrNjXL8DHKjcdPDswUYvqtwGpLj+F4=; path=/; expires=Mon, 04-Dec-23 04:02:38 GMT; domain=.beneplace.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbb9bec8b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/web-animations/2.3.1/web-animations.min.js
14 kB URL cdnjs.cloudflare.com/ajax/libs/web-animations/2.3.1/web-animations.min.js
IP
File type ASCII text, with very long lines (47169)
Hash f689a668b5c6078984b93b9f59793c90
83042534752a6d9b0a4a086517e19230416feba4
cbb3c795fd44c83a1200149b18e0df050fe228df4b5b03891373029117d8bd6b
GET /ajax/libs/web-animations/2.3.1/web-animations.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:38 GMT
content-type: application/javascript; charset=utf-8
content-length: 13763
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402f-bad6"
last-modified: Mon, 04 May 2020 16:17:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 687613
expires: Sat, 23 Nov 2024 03:32:38 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i1GKM9L5zx6lOy3gRSHaUWTPCjPHc9njeL6k3b5CoieQ5wpdquQUMj1YQ3BitJx3XszYj1VN0KyVmaJa725hyNQzCxvR8I0Bc29ah7moWVoI3M5sFhIlMsKkO8%2B8ooIvcfTsiA64"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8300fbbc0dceb521-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&&known_email=afsoutherlin%40cenlar.com&known_user_type=known_set_confirmed&known_user=true&known_user_guid=9295s2tu1rs9qlf5l8edmdxwm&known_email_contact=afsoutherlin%40cenlar.com
68 kB URL cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&&known_email=afsoutherlin%40cenlar.com&known_user_type=known_set_confirmed&known_user=true&known_user_guid=9295s2tu1rs9qlf5l8edmdxwm&known_email_contact=afsoutherlin%40cenlar.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2673)
Hash 24a552b5b6c178308daf7a050741593e
6ec1080805278525ecdf8b8ea25eb4f88c3e668e
3a55e8419cc8ab7e38bea69e5498963debe3c71075241deaee04eeddd3df4708
GET /home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&&known_email=afsoutherlin%40cenlar.com&known_user_type=known_set_confirmed&known_user=true&known_user_guid=9295s2tu1rs9qlf5l8edmdxwm&known_email_contact=afsoutherlin%40cenlar.com HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667963s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660762.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; sat_domain=A; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:38 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:56 GMT
vary: Accept-Encoding
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbbb0c3db4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtm.js?id=GTM-5QN8HWM
79 kB URL www.googletagmanager.com/gtm.js?id=GTM-5QN8HWM
IP
File type ASCII text, with very long lines (19808)
Hash 6aeb33709ae16fa8a2f1f6fefa58a67d
2132be487f512f91d0814f43026458d26f759ed4
b024b5a0fa428a8a500a5c9f27403d85a221a2c26d22daadc1d611c3e3813946
GET /gtm.js?id=GTM-5QN8HWM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:38 GMT
expires: Mon, 04 Dec 2023 03:32:38 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79021
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
auth.savings.workingadvantage.com/socket.io/?subdomain=cenlar&EIO=3&transport=websocket
0 B URL auth.savings.workingadvantage.com/socket.io/?subdomain=cenlar&EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?subdomain=cenlar&EIO=3&transport=websocket HTTP/1.1
Host: auth.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://auth.savings.workingadvantage.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: b4LzbkPlg6vZa7ix+NSnDA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667962s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660762.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 04 Dec 2023 03:32:38 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 81CMZ/lrk/V4mcgaGaICYppgvFo=
Access-Control-Allow-Origin: https://auth.savings.workingadvantage.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
CF-Cache-Status: DYNAMIC
Strict-Transport-Security: max-age=5184000; includeSubDomains
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8300fbb9c9d5b4f3-OSL
alt-svc: h3=":443"; ma=86400
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
12 kB URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32768)
Hash d860c16ac938f7d839f0ec158d02d0f0
8710f81ed151233677f7e32b229cb35293dd6840
9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12163
expires: Mon, 04 Dec 2023 04:32:38 GMT
date: Mon, 04 Dec 2023 03:32:38 GMT
cache-control: no-cache
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/assets/new-relic/new-relic-integration.js
20 kB URL cenlar.savings.workingadvantage.com/assets/new-relic/new-relic-integration.js
IP
File type ASCII text, with very long lines (51930)
Hash 0cd967d483680340e1c5d0f1c3b34662
4f6121c35c81f16302bdb45a3a00ee708896a72c
bc49c009b33e66a59f057cf4ada682b80d4401d919ddf0f8d3ef2bb0415f0b23
GET /assets/new-relic/new-relic-integration.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&&known_email=afsoutherlin%40cenlar.com&known_user_type=known_set_confirmed&known_user=true&known_user_guid=9295s2tu1rs9qlf5l8edmdxwm&known_email_contact=afsoutherlin%40cenlar.com
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667963s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660762.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; sat_domain=A; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:38 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:55 GMT
vary: Accept-Encoding
etag: W/"65669f8f-ccde"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbbc0c88b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
auth.savings.workingadvantage.com/favicon.ico
2.8 kB URL auth.savings.workingadvantage.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2673)
Hash 9dc741cceb3e6196fc51aaf393ba667d
4bc2d73332ea98260ff182810915604317328de8
71acbca9b831f8a47366482c0664f975f7a4bc3d9db4fe8cda3fb5036ac2f001
GET /favicon.ico HTTP/1.1
Host: auth.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/cenlar/sign-in?response_type=code&client_id=9ezalirn45mF43imJTdf53&utm_source=email&utm_medium=November-30-2023-mme&utm_campaign=email-mme&utm_content=Ikon%20Pass&redirect_uri=https%3A%2F%2Fcenlar.savings.workingadvantage.com%2Fhome%3Foff_guid%3D0fJajAlDE2gxrIjjeMAHFf%26ebldr_form%3D2.01%26source-id%3Demail%26utm_source%3Demail%26utm_campaign%3Demail-mme%26utm_medium%3DNovember-30-2023-mme%26utm_content%3DIkon%2520Pass%26DLK%3D9295s2tu1rs9qlf5l8edmdxwm
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667962s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660762.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:38 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:24:58 GMT
vary: Accept-Encoding
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbb91bbfb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2
14 kB URL fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13980, version 1.0\012- data
Hash b7d6b48d8d12946dc808ff39aed6c460
3f18028a04b3fb39bb1cc33dce401d04e9207970
d4ae5188a65370ecfe28f42293bbee8297cfd5712c6aadfdb270d48f2bcd88b0
GET /s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13980
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:27:40 GMT
expires: Fri, 29 Nov 2024 01:27:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:19 GMT
content-type: font/woff2
age: 353098
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RCea9d317d3a374e44b3f0f8711e38765e-source.min.js
752 B URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RCea9d317d3a374e44b3f0f8711e38765e-source.min.js
IP
File type ASCII text, with very long lines (1539)
Hash 577157aef198d284c2607950ca5103d7
88794ccaa4bd1ebe47ef9c7bc8b8d29e8745d59e
79be51fc272496787a050c87a75d582d640039eb2a6f7e080f64f6e5ec2fc6ca
GET /a281455e4dfe/86f9b29df5eb/99058982850f/RCea9d317d3a374e44b3f0f8711e38765e-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "52b5e7d86e1980765da3e075758f5e02:1700230292.716631"
last-modified: Fri, 17 Nov 2023 14:11:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 752
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:38 GMT
date: Mon, 04 Dec 2023 03:32:38 GMT
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-FD2X5ZMELR&l=dataLayer&cx=c
93 kB URL www.googletagmanager.com/gtag/js?id=G-FD2X5ZMELR&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (5955)
Hash 998abfbee7e7ce32778a203328541dfa
6fb65119a14377d9e266cfab1940ecfdd67049c6
3a6392b259feec45a52fae9465aca7101ae745ab637a012cced6358e21a2a5d5
GET /gtag/js?id=G-FD2X5ZMELR&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:38 GMT
expires: Mon, 04 Dec 2023 03:32:38 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93083
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cenlar.savings.workingadvantage.com/styles.470895e6035d0005.css
23 kB URL cenlar.savings.workingadvantage.com/styles.470895e6035d0005.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e5139ecca342c6c60da1c222d8b1c415
3327b2ed795950f5459d82952d7e9c73d59e6a95
7678fff11f92c598d89035e7f1e5ae839902925df05059daa23901b914765975
GET /styles.470895e6035d0005.css HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&&known_email=afsoutherlin%40cenlar.com&known_user_type=known_set_confirmed&known_user=true&known_user_guid=9295s2tu1rs9qlf5l8edmdxwm&known_email_contact=afsoutherlin%40cenlar.com
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667963s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660762.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:38 GMT
content-type: text/css
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-187ec"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbbd8cfab4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.boomtrain.com/p13n/ebg-wag3/p13n.min.js
30 kB URL cdn.boomtrain.com/p13n/ebg-wag3/p13n.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7e025917ec081cb179b24e9b42269588
a6522f88185982ebde143a2b1e399034962c6eba
cd6c50080cda668d0e858886b870ff15124d16be997d5b0d43e97d4788a20879
GET /p13n/ebg-wag3/p13n.min.js HTTP/1.1
Host: cdn.boomtrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 03 Dec 2023 04:36:21 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: l04UFkooc_cpGNqh.9nfCARIbuQ4HwRZ
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 04 Dec 2023 03:31:33 GMT
Cache-Control: public, max-age=3600
ETag: W/"7e025917ec081cb179b24e9b42269588"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9330F_iNyuG8J4TiS_SIp7a3WFve_ePPa0upKEvpkdvJF9BRnrpKow==
Age: 2233
www.googletagmanager.com/gtag/js?id=DC-12084042
70 kB URL www.googletagmanager.com/gtag/js?id=DC-12084042
IP
File type ASCII text, with very long lines (4179)
Hash c27c120a99b7945a81a2f7a4c754d0db
7f74b32115830c478a6fb2151a0713e6d8d52a59
3991bf35f7e4c2bd78b28dac23a3c62717e0293ea3eaf30b97fa72d8cce0f645
GET /gtag/js?id=DC-12084042 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:39 GMT
expires: Mon, 04 Dec 2023 03:32:39 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70481
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=DC-12084042&l=dataLayer&cx=c
71 kB URL www.googletagmanager.com/gtag/js?id=DC-12084042&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (4179)
Hash ca4fc811db63d28081ceaec2a2d2c037
e4d046aed9d4e9e5e32e5dd385887a235bed0707
4a8275e3168396ef6165cb5d524b2d440c2871972bb5382de39e3e7ecbf1307c
GET /gtag/js?id=DC-12084042&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:39 GMT
expires: Mon, 04 Dec 2023 03:32:39 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70555
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
people.api.boomtrain.com/identify/resolve?data=eyJjb29raWUiOnsiYnNpbiI6IiJ9LCJxdWVyeXN0cmluZyI6e30sImV4dGVybmFsX2lkcyI6eyJ6eW5jIjoiM2VhNDAwMzUtYjM0NS00ZWE2LTgzNDAtYjA4NDBkOTIzYjRhOjE3MDE2NjA3NTUuMjIyNjg3NyJ9fQ%3D%3D&site_id=ebg-wag3
82 B URL people.api.boomtrain.com/identify/resolve?data=eyJjb29raWUiOnsiYnNpbiI6IiJ9LCJxdWVyeXN0cmluZyI6e30sImV4dGVybmFsX2lkcyI6eyJ6eW5jIjoiM2VhNDAwMzUtYjM0NS00ZWE2LTgzNDAtYjA4NDBkOTIzYjRhOjE3MDE2NjA3NTUuMjIyNjg3NyJ9fQ%3D%3D&site_id=ebg-wag3
IP
File type JSON data\012- , ASCII text
Hash f6e7067f1e105506055cd2d84033466d
37384bda1bb953e77a98441d2cc53ac5a22b932c
ff3a6a36a39826d94e9e677f97d8953eeac889adc9c1b79295d9b69b14a6e5c5
GET /identify/resolve?data=eyJjb29raWUiOnsiYnNpbiI6IiJ9LCJxdWVyeXN0cmluZyI6e30sImV4dGVybmFsX2lkcyI6eyJ6eW5jIjoiM2VhNDAwMzUtYjM0NS00ZWE2LTgzNDAtYjA4NDBkOTIzYjRhOjE3MDE2NjA3NTUuMjIyNjg3NyJ9fQ%3D%3D&site_id=ebg-wag3 HTTP/1.1
Host: people.api.boomtrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 400 BAD REQUEST
Access-Control-Allow-Headers: X-Requested-With,Content-Type,Authorization,x-app-id
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Mon, 04 Dec 2023 03:32:39 GMT
Server: nginx
Content-Length: 82
Connection: keep-alive
cenlar.savings.workingadvantage.com/api/info
2.5 kB URL cenlar.savings.workingadvantage.com/api/info
IP
File type JSON data\012- , ASCII text, with very long lines (7014), with no line terminators
Hash 134fa6e83061ba5e2d884d1d22d9da4d
a1ebb677a936f1c610aec1b495cb7ea07942325f
e404a37493abf1ca5b11c580c98e503d7c4ecabc1ca56088bba017f90f05cdbd
GET /api/info HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjQ4Y2ZmMTQ0YzY5ZGJiMTEiLCJ0ciI6ImVkMzU4ZTU1N2IwODM0NzYwMjlhZGY5NGM5ZDljMjAwIiwidGkiOjE3MDE2NjA3NjQ4NzYsInRrIjoiODg4MzEifX0=
traceparent: 00-ed358e557b083476029adf94c9d9c200-48cff144c69dbb11-01
tracestate: 88831@nr=0-1-2647367-1120218725-48cff144c69dbb11----1701660764876
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&&known_email=afsoutherlin%40cenlar.com&known_user_type=known_set_confirmed&known_user=true&known_user_guid=9295s2tu1rs9qlf5l8edmdxwm&known_email_contact=afsoutherlin%40cenlar.com
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667964s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:39 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"1b66-oeu2d6k28cYQrsG0lct+oHlCMl8"
expires: Mon, 04 Dec 2023 03:32:38 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbc23e7eb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC668a267ca36c45b5acca38f3e4360a76-source.min.js
215 B URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC668a267ca36c45b5acca38f3e4360a76-source.min.js
IP
Hash 74f251b2226edb2c9e4e190ca2d1fccb
ff50ff57d401f31803f19ebb65c9307f9dda35da
aaa66fd99c79e6009a990dda2b89b5d2419f07344577f4c1609064b67d43bcf0
GET /a281455e4dfe/86f9b29df5eb/99058982850f/RC668a267ca36c45b5acca38f3e4360a76-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "52b5e7d86e1980765da3e075758f5e02:1700230292.716631"
last-modified: Fri, 17 Nov 2023 14:11:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 215
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:39 GMT
date: Mon, 04 Dec 2023 03:32:39 GMT
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/socket.io/?EIO=3&transport=websocket
0 B URL cenlar.savings.workingadvantage.com/socket.io/?EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://cenlar.savings.workingadvantage.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fx/xcMxcZu4i3UB78N7O5A==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667964s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 04 Dec 2023 03:32:40 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: a6gdYtRuxtpkjZ3XjVexa67xh18=
Access-Control-Allow-Origin: https://cenlar.savings.workingadvantage.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
CF-Cache-Status: DYNAMIC
Strict-Transport-Security: max-age=5184000; includeSubDomains
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8300fbc47875b517-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/api/info?authInfo=true
160 kB URL cenlar.savings.workingadvantage.com/api/info?authInfo=true
IP
File type JSON data\012- , ASCII text, with very long lines (8458), with no line terminators
Size 160 kB (160349 bytes)
Hash abe47dcbecc491356d30173e229bca58
3b92a9e7bf96050e7a931d92ef5238fdab30a991
820af9ff429c9e239f20febd6b207557dd91f8fdf1d6a23a1091becc4fa0a607
GET /api/info?authInfo=true HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImM0YmM4NDNkNTc3YzcxZmYiLCJ0ciI6IjhkYTI3NGY5ZjdlZjMzMzY2MjlkOGI4OWE5MmE3NTAwIiwidGkiOjE3MDE2NjA3NjUyNjQsInRrIjoiODg4MzEifX0=
traceparent: 00-8da274f9f7ef3336629d8b89a92a7500-c4bc843d577c71ff-01
tracestate: 88831@nr=0-1-2647367-1120218725-c4bc843d577c71ff----1701660765264
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667964s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:39 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Origin
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
expires: Mon, 04 Dec 2023 03:32:38 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbc4bf3bb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/api/controls/cenlar
27 kB URL cenlar.savings.workingadvantage.com/api/controls/cenlar
IP
File type JSON data\012- , ASCII text, with very long lines (2050), with no line terminators
Hash 66a41fb5c208b7a7036321fcc1a1309a
976240b9b349f4cd7f3eb4473feb2a6698442dce
341083bce636014fe77945e54a94e8cce5c1a34cfe400bffe146af1e78e73cae
GET /api/controls/cenlar HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjI5NDYwOWM3YzZkM2U2NzciLCJ0ciI6ImViNjJkMjY1NTliMjJiYTg3OGU2ZjYwNTQ2ODZkNTAwIiwidGkiOjE3MDE2NjA3NjUwNDQsInRrIjoiODg4MzEifX0=
traceparent: 00-eb62d26559b22ba878e6f6054686d500-294609c7c6d3e677-01
tracestate: 88831@nr=0-1-2647367-1120218725-294609c7c6d3e677----1701660765044
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&&known_email=afsoutherlin%40cenlar.com&known_user_type=known_set_confirmed&known_user=true&known_user_guid=9295s2tu1rs9qlf5l8edmdxwm&known_email_contact=afsoutherlin%40cenlar.com
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667964s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:39 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"802-l2JAubNJ9M1/PrRHP+sqZphELc4"
expires: Mon, 04 Dec 2023 03:32:38 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbc34ed1b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.beneplace.com/api/google-experiments/auth-v2
1.1 MB URL cenlar.savings.beneplace.com/api/google-experiments/auth-v2
IP
File type JSON data\012- , ASCII text, with very long lines (4056), with no line terminators
Size 1.1 MB (1107364 bytes)
Hash 1b8008d29de8cf1e4178b27c2ef2c120
c53ae45c4e7cd5fd5240ca141b031f080999bc98
a83eaf590f2c078872c01c0f332037dc8fef2a3a2f925d9d8ea5425d0172cf99
GET /api/google-experiments/auth-v2 HTTP/1.1
Host: cenlar.savings.beneplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auth.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:37 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: https://auth.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"fd8-xTrkXE581f1SQMoUGwMfCAmZvJg"
expires: Mon, 04 Dec 2023 03:32:36 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=IwpbhD9hPn2LfxZWpsu3C8SBXMysud1zexsbXymx.Lo-1701660757-0-AX3nJB28ptxHVF9ZHBEqAHjHPkzP+VtPD+Mlui1JudteS0ODnRV2TMvEMw9R5RwNnhUn3VeX/hISk9Vsj+wy4CI=; path=/; expires=Mon, 04-Dec-23 04:02:37 GMT; domain=.beneplace.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbb53f8bb500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/cenlar/marketplace-styles.css
71 kB URL cenlar.savings.workingadvantage.com/api/cenlar/marketplace-styles.css
IP
Hash 03757078e96addc8e27642c2f6aca87d
33bf458bb6c31159439fd0c5eee7ed7a3a576bf0
1855753c553a53ce37ff94f7d9204db18175dfd4f135b402e15aec9675086819
GET /api/cenlar/marketplace-styles.css HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjU1NTRjMmE2OTM0MDVkYjIiLCJ0ciI6IjNmNTk3ZDFmYmFiNzYwOTkwNGUzMDNhZmUyYmVjMzAwIiwidGkiOjE3MDE2NjA3NjQ4ODAsInRrIjoiODg4MzEifX0=
traceparent: 00-3f597d1fbab7609904e303afe2bec300-5554c2a693405db2-01
tracestate: 88831@nr=0-1-2647367-1120218725-5554c2a693405db2----1701660764880
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&&known_email=afsoutherlin%40cenlar.com&known_user_type=known_set_confirmed&known_user=true&known_user_guid=9295s2tu1rs9qlf5l8edmdxwm&known_email_contact=afsoutherlin%40cenlar.com
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667964s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:39 GMT
content-type: text/css; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"8161-M79Fi7bDEVlDn9DF7uftejpXa/A"
expires: Mon, 04 Dec 2023 03:32:38 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbc24e86b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtm.js?id=GTM-5QN8HWM
79 kB URL www.googletagmanager.com/gtm.js?id=GTM-5QN8HWM
IP
File type ASCII text, with very long lines (19808)
Hash 13f48589805842506f920f45758b2cef
519b2175119ad7337f9dcf856421f8bbb1ecf3f9
23398043c89fbeda8d1fc57c978a23e2c05eea3ba910c8f96208f24b25ad2d03
GET /gtm.js?id=GTM-5QN8HWM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:40 GMT
expires: Mon, 04 Dec 2023 03:32:40 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79019
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
12 kB URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32768)
Hash d860c16ac938f7d839f0ec158d02d0f0
8710f81ed151233677f7e32b229cb35293dd6840
9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12163
expires: Mon, 04 Dec 2023 04:32:40 GMT
date: Mon, 04 Dec 2023 03:32:40 GMT
cache-control: no-cache
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/assets/new-relic/new-relic-integration.js
20 kB URL cenlar.savings.workingadvantage.com/assets/new-relic/new-relic-integration.js
IP
File type ASCII text, with very long lines (51930)
Hash 0cd967d483680340e1c5d0f1c3b34662
4f6121c35c81f16302bdb45a3a00ee708896a72c
bc49c009b33e66a59f057cf4ada682b80d4401d919ddf0f8d3ef2bb0415f0b23
GET /assets/new-relic/new-relic-integration.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667964s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:55 GMT
vary: Accept-Encoding
etag: W/"65669f8f-ccde"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbc76802b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
23 B URL maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 04 Dec 2023 03:32:40 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2
14 kB URL fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13980, version 1.0\012- data
Hash b7d6b48d8d12946dc808ff39aed6c460
3f18028a04b3fb39bb1cc33dce401d04e9207970
d4ae5188a65370ecfe28f42293bbee8297cfd5712c6aadfdb270d48f2bcd88b0
GET /s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13980
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 01:27:40 GMT
expires: Fri, 29 Nov 2024 01:27:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:19 GMT
content-type: font/woff2
age: 353100
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cenlar.savings.workingadvantage.com/styles.470895e6035d0005.css
110 kB URL cenlar.savings.workingadvantage.com/styles.470895e6035d0005.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 110 kB (110087 bytes)
Hash e5139ecca342c6c60da1c222d8b1c415
3327b2ed795950f5459d82952d7e9c73d59e6a95
7678fff11f92c598d89035e7f1e5ae839902925df05059daa23901b914765975
GET /styles.470895e6035d0005.css HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:40 GMT
content-type: text/css
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-187ec"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbc9f89db4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RCea9d317d3a374e44b3f0f8711e38765e-source.min.js
752 B URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RCea9d317d3a374e44b3f0f8711e38765e-source.min.js
IP
File type ASCII text, with very long lines (1539)
Hash 577157aef198d284c2607950ca5103d7
88794ccaa4bd1ebe47ef9c7bc8b8d29e8745d59e
79be51fc272496787a050c87a75d582d640039eb2a6f7e080f64f6e5ec2fc6ca
GET /a281455e4dfe/86f9b29df5eb/99058982850f/RCea9d317d3a374e44b3f0f8711e38765e-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "52b5e7d86e1980765da3e075758f5e02:1700230292.716631"
last-modified: Fri, 17 Nov 2023 14:11:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 752
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:41 GMT
date: Mon, 04 Dec 2023 03:32:41 GMT
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=5ef4f9c1e806678f2ab0275df01d5ff4&zmpID=ebg-wag3&cache_buster=1701660766923&k=ebg-wag3-pixel-0988
6.4 kB URL live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=5ef4f9c1e806678f2ab0275df01d5ff4&zmpID=ebg-wag3&cache_buster=1701660766923&k=ebg-wag3-pixel-0988
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2300)
Hash b77f23018ef4895b2ce87317fb5831da
10ac7e1fdb54472da68284be697dff649556ce1b
acbfa23418115caca61193db187c5c01ab3968b3011573a623e44b53aba26e7b
GET /sync?c=16b6410431b6374e780104abb0443ca8&p=5ef4f9c1e806678f2ab0275df01d5ff4&zmpID=ebg-wag3&cache_buster=1701660766923&k=ebg-wag3-pixel-0988 HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Cookie: zync-uuid=3ea40035-b345-4ea6-8340-b0840d923b4a:1701660755.2226877; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiM2VhNDAwMzUtYjM0NS00ZWE2LTgzNDAtYjA4NDBkOTIzYjRhOjE3MDE2NjA3NTUuMjIyNjg3NyJ9.ZW1IVg.uYfLoCKs89aM5zOeHKKpkPTB9Dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 6373
date: Mon, 04 Dec 2023 03:32:41 GMT
set-cookie: zync-uuid=3ea40035-b345-4ea6-8340-b0840d923b4a:1701660755.2226877; Domain=rezync.com; Expires=Sat, 01 Jun 2024 03:32:41 GMT; Path=/; SameSite=None; Secure
sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiM2VhNDAwMzUtYjM0NS00ZWE2LTgzNDAtYjA4NDBkOTIzYjRhOjE3MDE2NjA3NTUuMjIyNjg3NyJ9.ZW1IWQ.--xE8jNuwBuFNvPlNe47ymjIODE; Expires=Sat, 01 Jun 2024 03:32:41 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
accept-ranges: bytes
server: lighttpd/1.4.69
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mGfYiZ42WubbJKb0evgRGY8SKCqHwIZpts7ZFONv7lT7EsTaBr6yAg==
X-Firefox-Spdy: h2
cdn.boomtrain.com/p13n/ebg-wag3/p13n.min.js
30 kB URL cdn.boomtrain.com/p13n/ebg-wag3/p13n.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7e025917ec081cb179b24e9b42269588
a6522f88185982ebde143a2b1e399034962c6eba
cd6c50080cda668d0e858886b870ff15124d16be997d5b0d43e97d4788a20879
GET /p13n/ebg-wag3/p13n.min.js HTTP/1.1
Host: cdn.boomtrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 03 Dec 2023 04:36:21 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: l04UFkooc_cpGNqh.9nfCARIbuQ4HwRZ
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 04 Dec 2023 03:31:33 GMT
Cache-Control: public, max-age=3600
ETag: W/"7e025917ec081cb179b24e9b42269588"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GqZg_gaJKo73UFuIML_ZwoETzCPYCqCZpu4O_08XsRBYAd95OEVxHw==
Age: 2236
cenlar.savings.workingadvantage.com/api/cenlar/colors.css?scope=:root,app-logged-in,ngb-modal-window
71 kB URL cenlar.savings.workingadvantage.com/api/cenlar/colors.css?scope=:root,app-logged-in,ngb-modal-window
IP
Hash ca0bc5233d4139dd7ee241248023dc9d
0feb8ee57d8265fff0a62830c19cf3bf0ab4a81f
43421a4c45a5eb6d5980351f547de5708e61f06422c21474d8c220fe9e50e2a3
GET /api/cenlar/colors.css?scope=:root,app-logged-in,ngb-modal-window HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjcxZmVkNzdkZTU1YmIwMTAiLCJ0ciI6ImUzNDY4ODczZmIzZWQ5Nzc1ZjJjMjllYjlhMmZiZjAwIiwidGkiOjE3MDE2NjA3NjA5NzQsInRrIjoiODg4MzEifX0=
traceparent: 00-e3468873fb3ed9775f2c29eb9a2fbf00-71fed77de55bb010-01
tracestate: 88831@nr=0-1-2647367-1120218725-71fed77de55bb010----1701660760974
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.0.1701660760.0.0.0; _ga=GA1.1.867582582.1701660761
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:35 GMT
content-type: text/css; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"a9d-D+uO5X2CZf/wpigwwZzzvwq0qB8"
expires: Mon, 04 Dec 2023 03:32:34 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fba9de65b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=DC-12084042&l=dataLayer&cx=c
71 kB URL www.googletagmanager.com/gtag/js?id=DC-12084042&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (4179)
Hash 05c7219d08ab4b37f432b476c37db258
7354db1d275d33bfb7907a9038707e0ad0f37209
593359673eab551c10c216ea9350edbfb6140deaaacd0f349b736ee3977555dd
GET /gtag/js?id=DC-12084042&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:32:41 GMT
expires: Mon, 04 Dec 2023 03:32:41 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70554
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cenlar.savings.workingadvantage.com/main.5139e63dcaa68cb8.js
1.1 MB URL cenlar.savings.workingadvantage.com/main.5139e63dcaa68cb8.js
IP
File type Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Size 1.1 MB (1091721 bytes)
Hash 95bfd7911ea2afc23eda60fb065f7fa8
6b39d5dbb053484b6ffa3d36932fcd61744f8c75
e57f1978d4478f1baf0978eb135cbf7da6bc2fb5cef9e0c3b6ef7df8d25f2a26
GET /main.5139e63dcaa68cb8.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667964s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-5058de"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbc77806b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/415.1e570e2136c04285.js
22 kB URL cenlar.savings.workingadvantage.com/415.1e570e2136c04285.js
IP
File type ASCII text, with very long lines (56240), with no line terminators
Hash 606e92e2b377666e29f7cf7be202dc2b
689ee8c57c1c33e09c33a391a3ace0f56ce7877d
db9b35452cc0fe6ed61fdd8e98319d4410a73b58411dba61e0c1919269008ee1
GET /415.1e570e2136c04285.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-dbb0"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd1aaa5b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm
480 kB URL cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2673)
Size 480 kB (479490 bytes)
Hash dca274e713a9e99fb9662c3b2551601f
3993681ca13b5afb9ff087abd1fdc9416b22ced9
486d1338591aa8f16ae8c1d1457a6db40ac7b22f9c3b7e3b87f5fa557fcebebc
GET /home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass&DLK=9295s2tu1rs9qlf5l8edmdxwm HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:34 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:56 GMT
vary: Accept-Encoding
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; path=/; expires=Mon, 04-Dec-23 04:02:34 GMT; domain=.workingadvantage.com; HttpOnly; Secure; SameSite=None
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fb9e5b1bb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cenlar.savings.beneplace.com/api/navigation/cenlar/auth_footer/US/auth
5.4 kB URL cenlar.savings.beneplace.com/api/navigation/cenlar/auth_footer/US/auth
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (958), with no line terminators
Hash 4274ef7bb89f4b83c5ad48541f7cbaa6
7d3ad8fcf3b1a7cc4b13bb4939cad5e09eb9a05e
986bf6d062a9495c5b1f31a4f143c8ce0d48ceb09ff37f5032d63c990d060d9f
GET /api/navigation/cenlar/auth_footer/US/auth HTTP/1.1
Host: cenlar.savings.beneplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auth.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:37 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: https://auth.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"3bf-fTrY/POxp8xLE7tJOcrV4J65oF4"
expires: Mon, 04 Dec 2023 03:32:36 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=_T08HLt13u0WrUxyM2136wQa6vasos0oYc_PTe7Ahvs-1701660757-0-AWVOqa/e7xaZiLHrXob9Ff9XpymLmsE7F8QPzy0AC5pW4dauudxg2QvKDH5EhbWjV5AHJWKM/WYk3HXRRKE0Ivs=; path=/; expires=Mon, 04-Dec-23 04:02:37 GMT; domain=.beneplace.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbb6a810b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/platform/options/onetrust
70 kB URL cenlar.savings.workingadvantage.com/api/platform/options/onetrust
IP
File type JSON data\012- , ASCII text, with very long lines (501), with no line terminators
Hash 323b183e15b47425a7830d61290d9dd4
ee9f6c9554c7ff236eebfc58d0697412477959db
05f687735d78286be14d4e10a1fb29138cddcf927835e5441b61406512db7c8e
GET /api/platform/options/onetrust HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjRkZDY2MTQzMTdiZmY2ZmIiLCJ0ciI6ImFjNjBmZmNmYWQyNWYzNWUyNjViNmFkODc1NGYwODAwIiwidGkiOjE3MDE2NjA3NjcyNzIsInRrIjoiODg4MzEifX0=
traceparent: 00-ac60ffcfad25f35e265b6ad8754f0800-4dd6614317bff6fb-01
tracestate: 88831@nr=0-1-2647367-1120218725-4dd6614317bff6fb----1701660767272
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:41 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"1f5-7p9slVTH/yNu6/xY0Gl0Ekd5Wds"
expires: Mon, 04 Dec 2023 03:32:40 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd13a86b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/api/marketplace/enrollment-info?draft=false&known_user_email=afsoutherlin@cenlar.com&country=US
0 B URL cenlar.savings.workingadvantage.com/api/marketplace/enrollment-info?draft=false&known_user_email=afsoutherlin@cenlar.com&country=US
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/marketplace/enrollment-info?draft=false&known_user_email=afsoutherlin@cenlar.com&country=US HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjEwODhlNTg4NzA5MDMyZjQiLCJ0ciI6IjY0N2YzMDBmZTQxZjc5ZjBmYWIzY2YwODY3YzhjNzAwIiwidGkiOjE3MDE2NjA3Njc3NTEsInRrIjoiODg4MzEifX0=
traceparent: 00-647f300fe41f79f0fab3cf0867c8c700-1088e588709032f4-01
tracestate: 88831@nr=0-1-2647367-1120218725-1088e588709032f4----1701660767751
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-length: 0
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
expires: Mon, 04 Dec 2023 03:32:41 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd46b6ab4f9-OSL
alt-svc: h3=":443"; ma=86400
znbpitzqupa333rvi-ebg.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_bpItZqUpA333RVI
18 kB URL znbpitzqupa333rvi-ebg.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_bpItZqUpA333RVI
IP
File type ASCII text, with very long lines (7475)
Hash 7a5f3b10350a9d87dd2b3770a0dd4c6a
50bf4c06ceadbf177d8fadeca761b3821a797eec
e611d3507debde576e3e5ac8bb552031040a1a5f3c9ac5807fd833a034e25dc3
GET /SIE/?Q_ZID=ZN_bpItZqUpA333RVI HTTP/1.1
Host: znbpitzqupa333rvi-ebg.siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 8300fbd47a82569b-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 98758
cache-control: public, max-age=3600, s-maxage=604800
etag: W/"23c3-O0xUY2B+aSq8/HT6UES6YbUFmR0"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=9155
content-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/645.d10b39b88c521ee0.js
125 kB URL cenlar.savings.workingadvantage.com/645.d10b39b88c521ee0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 125 kB (125176 bytes)
Hash 387b7e87338935e41170f0c7bb0d4e66
88f9f7944090db24bf26eed155a8eb92d88d0759
5df81daed9e7d20f2a08df661ec31679d481a223061b1daea21cc9a3b55a4e47
GET /645.d10b39b88c521ee0.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-396d1"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd1eac0b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/497.b388b30904fb314a.js
200 OK 14 kB URL GET HTTP/3 cenlar.savings.workingadvantage.com/497.b388b30904fb314a.js
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 568d23f140990a2c8e23ce4efc8a46d5
0b89e8c343bfd7c609513bb42c37e8b214d4b910
c7f01e5f7f8d9bdaff9775cf64a8cfc6f3d6d59825f4221d3eac4a1386c24db3
GET /497.b388b30904fb314a.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-131c2"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd1aaa6b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/669.756ef4d81bfcd386.js
96 kB URL cenlar.savings.workingadvantage.com/669.756ef4d81bfcd386.js
IP
File type ASCII text, with very long lines (24790), with no line terminators
Hash 50c9009920ce91f5d59f2403f4cf515f
f7f06e8a21f8a5894b194f41cba6bf452cf84da6
3b72cd86fa2fdbd4e84b9769991e4a93b5c19fde367cd456dfae036cdfb3bdc5
GET /669.756ef4d81bfcd386.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-60d6"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd1dabab4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC6b40217ba8b34b5c95f7ac097beadf09-source.min.js
286 B URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC6b40217ba8b34b5c95f7ac097beadf09-source.min.js
IP
File type ASCII text, with very long lines (304)
Hash 9d329853a801c00019899598da50a762
fddbe70abdf0251ce3c72b34899bc1f93dee758c
177b9dbf2cb10e29041b0446aec0ac0d478d2cc420144dd745a4fe5a7c1fd360
GET /a281455e4dfe/86f9b29df5eb/99058982850f/RC6b40217ba8b34b5c95f7ac097beadf09-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "52b5e7d86e1980765da3e075758f5e02:1700230292.716631"
last-modified: Fri, 17 Nov 2023 14:11:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 286
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:42 GMT
date: Mon, 04 Dec 2023 03:32:42 GMT
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/auth/token?grant_type=authorization_code&client_id=9ezalirn45mF43imJTdf53&code=2mPgxnQbioibKRp3zMJuPf&user_guid=9295s2tu1rs9qlf5l8edmdxwm
5.6 kB URL cenlar.savings.workingadvantage.com/auth/token?grant_type=authorization_code&client_id=9ezalirn45mF43imJTdf53&code=2mPgxnQbioibKRp3zMJuPf&user_guid=9295s2tu1rs9qlf5l8edmdxwm
IP
File type JSON data\012- , ASCII text, with very long lines (694), with no line terminators
Hash fcd4d0009228c7bd473d6f475731617e
58c761a58545675fad8a6b5c16fb86f67e3e9d75
7efa1931f2771831d5d174e32b05178dd7893cf1842877b08f8a60b434564d79
GET /auth/token?grant_type=authorization_code&client_id=9ezalirn45mF43imJTdf53&code=2mPgxnQbioibKRp3zMJuPf&user_guid=9295s2tu1rs9qlf5l8edmdxwm HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImM4MjViNzRjZGE5OWEyZGIiLCJ0ciI6ImNlMTcyMDA1MzNmMDE2MmRjNTk1ZDIxYTRiMGE2MjAwIiwidGkiOjE3MDE2NjA3NjY5NzAsInRrIjoiODg4MzEifX0=
traceparent: 00-ce17200533f0162dc595d21a4b0a6200-c825b74cda99a2db-01
tracestate: 88831@nr=0-1-2647367-1120218725-c825b74cda99a2db----1701660766970
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:41 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
set-cookie: access_token=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
user_guid=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
etag: W/"2b6-WMdhpYVFZ1+timtcFvuG9n4+nXU"
expires: Mon, 04 Dec 2023 03:32:40 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbcf5a0ab4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC668a267ca36c45b5acca38f3e4360a76-source.min.js
215 B URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC668a267ca36c45b5acca38f3e4360a76-source.min.js
IP
Hash 74f251b2226edb2c9e4e190ca2d1fccb
ff50ff57d401f31803f19ebb65c9307f9dda35da
aaa66fd99c79e6009a990dda2b89b5d2419f07344577f4c1609064b67d43bcf0
GET /a281455e4dfe/86f9b29df5eb/99058982850f/RC668a267ca36c45b5acca38f3e4360a76-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "52b5e7d86e1980765da3e075758f5e02:1700230292.716631"
last-modified: Fri, 17 Nov 2023 14:11:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 215
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:42 GMT
date: Mon, 04 Dec 2023 03:32:42 GMT
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/scripts.b785e07ef29de485.js
100 kB URL cenlar.savings.workingadvantage.com/scripts.b785e07ef29de485.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 46c966376ef0860c9f256d7701100634
7cf0609623ef764b6c28e3778565084628881241
ac3e5cf9dbf7e7d8afbde8193602e353a531e05ea3ed89990432248a8c73ee18
GET /scripts.b785e07ef29de485.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667964s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-29710"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbc77805b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
siteintercept.qualtrics.com/dxjsmodule/12.20b1d36d36c1dfbe70fa.chunk.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=cenlar.savings.workingadvantage.com
21 kB URL siteintercept.qualtrics.com/dxjsmodule/12.20b1d36d36c1dfbe70fa.chunk.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=cenlar.savings.workingadvantage.com
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 276e605c2b955c7c60c8e862e3de6d0d
0ae90076a0e748a9dc50a86d7e38a67268b8eda4
c5b5c93f6affe076aa846f63596819be1a4b6ca73e58baf41f4b01db979fdb4f
GET /dxjsmodule/12.20b1d36d36c1dfbe70fa.chunk.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=cenlar.savings.workingadvantage.com HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript
cf-ray: 8300fbd55acb569b-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 352496
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"11ceb-18bacbdecd0"
last-modified: Wed, 08 Nov 2023 02:23:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=72939
content-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/decisions/search
200 OK 12 B URL POST HTTP/3 cenlar.savings.workingadvantage.com/decisions/search
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 52f30c97cbacaf796aed3ba46af9737b
17a83bb01c89bae39c6189204e7ce3f78ca0f991
eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1
POST /decisions/search HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImMzNzNjZjQxZTBiMTEwNTIiLCJ0ciI6IjkzMjI3MzlmOWIzNDNmYWRkNzkxZTc3NGQxNjdkYTAwIiwidGkiOjE3MDE2NjA3NjgxODQsInRrIjoiODg4MzEifX0=
traceparent: 00-9322739f9b343fadd791e774d167da00-c373cf41e0b11052-01
tracestate: 88831@nr=0-1-2647367-1120218725-c373cf41e0b11052----1701660768184
Content-Type: application/json
Content-Length: 168
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/json; charset=utf-8
content-length: 12
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"c-F6g7sByJuuOcYYkgTnzj94yg+ZE"
expires: Mon, 04 Dec 2023 03:32:41 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd6ec4eb4f9-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/341.8f448c9eda7a0f97.js
4.9 kB URL cenlar.savings.workingadvantage.com/341.8f448c9eda7a0f97.js
IP
File type ASCII text, with very long lines (8742), with no line terminators
Hash d09cbad05c180734ecc861332facbd08
64303d9018266439fcb7159f91b91e45190365dc
4518e224225a4bd17b0ec7e1501795d5de41e494c56ee20966a766fc9e082ab0
GET /341.8f448c9eda7a0f97.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-2226"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd1eac1b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/CS-7658-Corp-Cyber-Week-2022-Campaign-Banners-352x352.png?w=26&h=26&crop=entropy&fit=crop
200 OK 656 B URL GET HTTP/2 g3i.imgix.net/uploads/CS-7658-Corp-Cyber-Week-2022-Campaign-Banners-352x352.png?w=26&h=26&crop=entropy&fit=crop
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data
Hash bc84e05bc6215415cd3720af991055ba
d92a6ee5dc3982d32fe9039927585a4d89a8b587
3a4e52835aa4e5a20d13ab101abbe01b5e80a31773b350a7249e1bfc3f4556fc
GET /uploads/CS-7658-Corp-Cyber-Week-2022-Campaign-Banners-352x352.png?w=26&h=26&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 27 Nov 2023 08:52:09 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 807e12a42b2111180fc0beee2881d5573d48507d
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:42 GMT
age: 585633
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000115-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 656
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/ep/access
26 B URL cenlar.savings.workingadvantage.com/api/ep/access
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d59eaa0b49b0867766ac730b2a907be8
7b83fca23183704adc097adb92986432b1bb7191
44082359ddda53310b22c42bc40135a49688737582598bf9be5fb31136fcc88b
GET /api/ep/access HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjI1MzBmOThmNmM0YmNjMDMiLCJ0ciI6IjJhMWZjMTJjYjE2Mzk4ZmUxNGZjOGZhYjk2ZjY3ZDAwIiwidGkiOjE3MDE2NjA3NjgyODYsInRrIjoiODg4MzEifX0=
traceparent: 00-2a1fc12cb16398fe14fc8fab96f67d00-2530f98f6c4bcc03-01
tracestate: 88831@nr=0-1-2647367-1120218725-2530f98f6c4bcc03----1701660768286
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/json; charset=utf-8
content-length: 26
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"1a-e4P8ojGDcErcCXrbkphkMrG7cZE"
expires: Mon, 04 Dec 2023 03:32:41 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd78c83b4f9-OSL
alt-svc: h3=":443"; ma=86400
siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/wr-dialog-close-btn-black.png
256 B URL siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/wr-dialog-close-btn-black.png
IP
File type PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced\012- data
Hash fd495ca24c74d95ea3d5566a7cb25112
24682c91808ce607ab93b59c3bf7f343eba37e73
2547640cd989b80083eb3ade2a4993c1776a1229cfffd41adeb0fef3e86eaf2b
GET /WRQualtricsShared/Graphics/siteintercept/wr-dialog-close-btn-black.png HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:43 GMT
content-type: image/png
content-length: 256
cf-ray: 8300fbd8cc35569b-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 521909
cache-control: max-age=315360000, public
expires: Sun, 06 Nov 2033 06:11:06 GMT
last-modified: Mon, 06 Nov 2023 19:06:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=757
content-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
servershortname:
trace-id: 50c2b12b1bf32bc8
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/decisions/search
200 OK 12 B URL POST HTTP/3 cenlar.savings.workingadvantage.com/decisions/search
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 52f30c97cbacaf796aed3ba46af9737b
17a83bb01c89bae39c6189204e7ce3f78ca0f991
eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1
POST /decisions/search HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjYwZTljNzAxMTc3OTFmMTEiLCJ0ciI6IjQ4OTJjN2YxYmVhMzM3OTBjZTVjOTlmZjcxMWI2NzAwIiwidGkiOjE3MDE2NjA3NjgzNzYsInRrIjoiODg4MzEifX0=
traceparent: 00-4892c7f1bea33790ce5c99ff711b6700-60e9c70117791f11-01
tracestate: 88831@nr=0-1-2647367-1120218725-60e9c70117791f11----1701660768376
Content-Type: application/json
Content-Length: 168
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true; split_test_groups={}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:43 GMT
content-type: application/json; charset=utf-8
content-length: 12
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"c-F6g7sByJuuOcYYkgTnzj94yg+ZE"
expires: Mon, 04 Dec 2023 03:32:41 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd81cc9b4f9-OSL
alt-svc: h3=":443"; ma=86400
siteintercept.qualtrics.com/dxjsmodule/1.b6ed8c4fe4b3f457815a.chunk.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg
7.2 kB URL siteintercept.qualtrics.com/dxjsmodule/1.b6ed8c4fe4b3f457815a.chunk.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg
IP
File type ASCII text, with very long lines (28623), with no line terminators
Hash ca317fc3261fd97d7ae699ce03f153dd
a79c8a5e05b41f44a6a1176e93b6d321fcee34e9
d420011478b9237ee35799a2ad0c8ec8dd01cb9d5cfc7295fdb48556c240c7b0
GET /dxjsmodule/1.b6ed8c4fe4b3f457815a.chunk.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript
cf-ray: 8300fbd85c0f569b-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 338345
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"72da-18bacbdecd0"
last-modified: Wed, 08 Nov 2023 02:23:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=29402
content-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/zones/search?page=homepage§ion=1&country_last=US&known_user_email=afsoutherlin@cenlar.com
1.1 kB URL cenlar.savings.workingadvantage.com/api/zones/search?page=homepage§ion=1&country_last=US&known_user_email=afsoutherlin@cenlar.com
IP
File type JSON data\012- , ASCII text, with very long lines (3996), with no line terminators
Hash cfc94a86c38d1d7f130d0dc3042e53cb
4a304591a8b89c1bf27b32432e210efd1edc5449
b16f9d8043f7646c1922ca2682bd1fb48bc6728d9f4d57fe54a852603b78890b
GET /api/zones/search?page=homepage§ion=1&country_last=US&known_user_email=afsoutherlin@cenlar.com HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImRiNzEwOWI2MWVkYWExZGQiLCJ0ciI6ImMwNGJjZWVkZDBmMTM1M2ViOGVlMWFjMGVjM2UzYTAwIiwidGkiOjE3MDE2NjA3NjgwMDAsInRrIjoiODg4MzEifX0=
traceparent: 00-c04bceedd0f1353eb8ee1ac0ec3e3a00-db7109b61edaa1dd-01
tracestate: 88831@nr=0-1-2647367-1120218725-db7109b61edaa1dd----1701660768000
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"f9c-SjBFkai4nBvyezJDLiEO/R7cVEk"
expires: Mon, 04 Dec 2023 03:32:41 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd5dbe7b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC986b4d5825364bd4887033e40e20c549-source.min.js
429 B URL assets.adobedtm.com/a281455e4dfe/86f9b29df5eb/99058982850f/RC986b4d5825364bd4887033e40e20c549-source.min.js
IP
File type ASCII text, with very long lines (610)
Hash 312cb3e912e23ae79d6f14e1f73679ac
a3303715a66d325886a96badf99dc1111dbffa2c
d56b6db4e16388149899dcea8f2bcbf6856bb84e7b9b866ddf3c388e5d12e8d6
Analyzer Verdict Alert Public Nextron YARA rules malware Webshells iisstart.aspx and Logout.aspx
GET /a281455e4dfe/86f9b29df5eb/99058982850f/RC986b4d5825364bd4887033e40e20c549-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "52b5e7d86e1980765da3e075758f5e02:1700230292.716631"
last-modified: Fri, 17 Nov 2023 14:11:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Mon, 04 Dec 2023 04:32:43 GMT
date: Mon, 04 Dec 2023 03:32:43 GMT
content-length: 429
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/decisions/search
200 OK 16 kB URL POST HTTP/3 cenlar.savings.workingadvantage.com/decisions/search
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3260), with no line terminators
Hash 5cb217191239fbf131350661cd1ac217
92ecf1d52e15c3e076cc903da1b6058bb1076b5d
bdd757d5320748301fc77cb4ee8d0cbbae0260f5d0ad03b05c5b587e9b4b564c
POST /decisions/search HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjQ5N2RjYzVhN2E2OTA5Y2IiLCJ0ciI6IjM2M2NmZDAwNmIxNDkwZDI4Y2JkZjcyZWU5YWViNjAwIiwidGkiOjE3MDE2NjA3Njg1MjYsInRrIjoiODg4MzEifX0=
traceparent: 00-363cfd006b1490d28cbdf72ee9aeb600-497dcc5a7a6909cb-01
tracestate: 88831@nr=0-1-2647367-1120218725-497dcc5a7a6909cb----1701660768526
Content-Type: application/json
Content-Length: 171
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true; split_test_groups={}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:43 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"cbc-kuzx1S4Vw+B2zJA9obYFi7EHa10"
expires: Mon, 04 Dec 2023 03:32:42 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd90cfcb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.beneplace.com/api/info
3.8 kB URL cenlar.savings.beneplace.com/api/info
IP
File type JSON data\012- , ASCII text, with very long lines (7014), with no line terminators
Hash 134fa6e83061ba5e2d884d1d22d9da4d
a1ebb677a936f1c610aec1b495cb7ea07942325f
e404a37493abf1ca5b11c580c98e503d7c4ecabc1ca56088bba017f90f05cdbd
GET /api/info HTTP/1.1
Host: cenlar.savings.beneplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auth.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://auth.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:37 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: https://auth.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"1b66-oeu2d6k28cYQrsG0lct+oHlCMl8"
expires: Mon, 04 Dec 2023 03:32:36 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=bGVCpjqrhbE4SRkIlbec0qDRYVaZeKujFmk1P2KDdaY-1701660757-0-AWVz4DaG0vUGHiJI631ED4Bq5RiH9S3wqkraP9dO3/dFxt2R9mvcxGmiG3zfVTseJkidWCI37XWGYe2fYrCiQlY=; path=/; expires=Mon, 04-Dec-23 04:02:37 GMT; domain=.beneplace.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbb53f8ab500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/decisions/search
200 OK 12 B URL POST HTTP/3 cenlar.savings.workingadvantage.com/decisions/search
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 52f30c97cbacaf796aed3ba46af9737b
17a83bb01c89bae39c6189204e7ce3f78ca0f991
eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1
POST /decisions/search HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjFiYzk0OTM2YTEzN2I1MDMiLCJ0ciI6IjM0Yzc5MTdlNmFiODFjYmYwNmI3MzVmOGZhZjg2OTAwIiwidGkiOjE3MDE2NjA3Njk3MDMsInRrIjoiODg4MzEifX0=
traceparent: 00-34c7917e6ab81cbf06b735f8faf86900-1bc94936a137b503-01
tracestate: 88831@nr=0-1-2647367-1120218725-1bc94936a137b503----1701660769703
Content-Type: application/json
Content-Length: 169
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; sat_domain=A; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:44 GMT
content-type: application/json; charset=utf-8
content-length: 12
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"c-F6g7sByJuuOcYYkgTnzj94yg+ZE"
expires: Mon, 04 Dec 2023 03:32:43 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbe06f4db4f9-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/decisions/search
200 OK 12 B URL POST HTTP/3 cenlar.savings.workingadvantage.com/decisions/search
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 52f30c97cbacaf796aed3ba46af9737b
17a83bb01c89bae39c6189204e7ce3f78ca0f991
eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1
POST /decisions/search HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjNhNzllODhkZThhNjhmOTkiLCJ0ciI6Ijk4MWU1ODMyZTUwYTA0NGFhMDAzOGRjNzc4M2Q5NTAwIiwidGkiOjE3MDE2NjA3NzAxOTcsInRrIjoiODg4MzEifX0=
traceparent: 00-981e5832e50a044aa0038dc7783d9500-3a79e88de8a68f99-01
tracestate: 88831@nr=0-1-2647367-1120218725-3a79e88de8a68f99----1701660770197
Content-Type: application/json
Content-Length: 114
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:44 GMT
content-type: application/json; charset=utf-8
content-length: 12
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"c-F6g7sByJuuOcYYkgTnzj94yg+ZE"
expires: Mon, 04 Dec 2023 03:32:43 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbe3784db4f9-OSL
alt-svc: h3=":443"; ma=86400
cdn-api-prod.beneplace.com/api/search-natural/cenlar/US?nc=7020,7030,100305,100302&limit=30&orderBy=relevance&dontSaveUserSearch=1&authStatus=known
77 B URL cdn-api-prod.beneplace.com/api/search-natural/cenlar/US?nc=7020,7030,100305,100302&limit=30&orderBy=relevance&dontSaveUserSearch=1&authStatus=known
IP
File type gzip compressed data, from Unix\012- data
Hash 244379518038f99403b767fa0cee8fb9
60b6867ffceb875c2c1604b9261aae01ffa85872
f537e7e4b6085eceb191a7874e2a6befc4733941501570461e66b3e6ec5c35c6
GET /api/search-natural/cenlar/US?nc=7020,7030,100305,100302&limit=30&orderBy=relevance&dontSaveUserSearch=1&authStatus=known HTTP/1.1
Host: cdn-api-prod.beneplace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Mon, 04 Dec 2023 03:31:45 GMT
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS, GET, OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization, DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
etag: W/"33-sf1OfxvlJvonblgzREMVzgN26XY"
cache-control: public, max-age=600, s-maxage=600
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fa6eab482bf7-FRA
content-encoding: gzip
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HSS0rcEzV-v-YCR76Wai_G5HOoBJq63iujRhvsJ1ZvAeJhhoihC4sQ==
age: 59
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/decisions/search
200 OK 12 B URL POST HTTP/3 cenlar.savings.workingadvantage.com/decisions/search
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 52f30c97cbacaf796aed3ba46af9737b
17a83bb01c89bae39c6189204e7ce3f78ca0f991
eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1
POST /decisions/search HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjUzMDYwZDUwNDdkMGVjZmMiLCJ0ciI6IjQzZTQ4N2I5M2M3ZTg5MDAzYmM5OTkwNmI4MDc4NzAwIiwidGkiOjE3MDE2NjA3NzAzNTAsInRrIjoiODg4MzEifX0=
traceparent: 00-43e487b93c7e89003bc99906b8078700-53060d5047d0ecfc-01
tracestate: 88831@nr=0-1-2647367-1120218725-53060d5047d0ecfc----1701660770350
Content-Type: application/json
Content-Length: 114
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:45 GMT
content-type: application/json; charset=utf-8
content-length: 12
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"c-F6g7sByJuuOcYYkgTnzj94yg+ZE"
expires: Mon, 04 Dec 2023 03:32:43 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbe4788ab4f9-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/decisions/search
200 OK 12 B URL POST HTTP/3 cenlar.savings.workingadvantage.com/decisions/search
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 52f30c97cbacaf796aed3ba46af9737b
17a83bb01c89bae39c6189204e7ce3f78ca0f991
eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1
POST /decisions/search HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjYzZjg5MjQ2MDJkYzIwMDUiLCJ0ciI6IjI4ZTIyNzVkNzIxMmVjNGViNzc0MDYxNjA5MDFhMjAwIiwidGkiOjE3MDE2NjA3NzA1MDUsInRrIjoiODg4MzEifX0=
traceparent: 00-28e2275d7212ec4eb77406160901a200-63f8924602dc2005-01
tracestate: 88831@nr=0-1-2647367-1120218725-63f8924602dc2005----1701660770505
Content-Type: application/json
Content-Length: 114
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:45 GMT
content-type: application/json; charset=utf-8
content-length: 12
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"c-F6g7sByJuuOcYYkgTnzj94yg+ZE"
expires: Mon, 04 Dec 2023 03:32:44 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbe568c4b4f9-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/api/cenlar/colors.css?scope=:root,app-logged-in,ngb-modal-window
455 B URL cenlar.savings.workingadvantage.com/api/cenlar/colors.css?scope=:root,app-logged-in,ngb-modal-window
IP
Hash ca0bc5233d4139dd7ee241248023dc9d
0feb8ee57d8265fff0a62830c19cf3bf0ab4a81f
43421a4c45a5eb6d5980351f547de5708e61f06422c21474d8c220fe9e50e2a3
GET /api/cenlar/colors.css?scope=:root,app-logged-in,ngb-modal-window HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImQ3YzhlMDlmMWI0ZjdiNWEiLCJ0ciI6IjExMTA4YTcwNmZkM2E4MzM3ZDllOTAwMDRjZjFkZTAwIiwidGkiOjE3MDE2NjA3NjY4OTEsInRrIjoiODg4MzEifX0=
traceparent: 00-11108a706fd3a8337d9e90004cf1de00-d7c8e09f1b4f7b5a-01
tracestate: 88831@nr=0-1-2647367-1120218725-d7c8e09f1b4f7b5a----1701660766891
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:41 GMT
content-type: text/css; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"a9d-D+uO5X2CZf/wpigwwZzzvwq0qB8"
expires: Mon, 04 Dec 2023 03:32:40 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbced9dcb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/api/info
21 kB URL cenlar.savings.workingadvantage.com/api/info
IP
File type JSON data\012- , ASCII text, with very long lines (7014), with no line terminators
Hash 134fa6e83061ba5e2d884d1d22d9da4d
a1ebb677a936f1c610aec1b495cb7ea07942325f
e404a37493abf1ca5b11c580c98e503d7c4ecabc1ca56088bba017f90f05cdbd
GET /api/info HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjMzNjRhMzA2NzI0MzlkNmQiLCJ0ciI6ImMwZWUzZjhkMTIzNTQxNTFlMWFhYjc5ZjY5MDVkZjAwIiwidGkiOjE3MDE2NjA3NjY4ODYsInRrIjoiODg4MzEifX0=
traceparent: 00-c0ee3f8d12354151e1aab79f6905df00-3364a30672439d6d-01
tracestate: 88831@nr=0-1-2647367-1120218725-3364a30672439d6d----1701660766886
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:41 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"1b66-oeu2d6k28cYQrsG0lct+oHlCMl8"
expires: Mon, 04 Dec 2023 03:32:40 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbcec9d5b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
maps.googleapis.com/maps-api-v3/api/js/54/12a/common.js
57 kB URL maps.googleapis.com/maps-api-v3/api/js/54/12a/common.js
IP
File type ASCII text, with very long lines (4584)
Hash 62dd4694504b9493499887d729e7d456
31e1581fda82bcbe5971f202b686a7f2d16d3394
0b6fb8c2b9ee6b41540fd549a726e431eb8667074da38d94af8a647ae05e9da7
GET /maps-api-v3/api/js/54/12a/common.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 57367
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:48:44 GMT
expires: Thu, 28 Nov 2024 21:48:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 21:27:26 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 366241
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/54/12a/util.js
200 OK 50 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/54/12a/util.js
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (584)
Hash dd9a0890c6719e8bbaf67f14c6032e48
645a019ec207a0c321401b6d0d05da505f9917b7
206b430ad8e96d2f58a4c4cc6d2e5b97b40a1b62d9c1a7b027409b376da8c1de
GET /maps-api-v3/api/js/54/12a/util.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 50370
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:58:14 GMT
expires: Thu, 28 Nov 2024 14:58:14 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 21:27:26 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 390871
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cenlar.savings.workingadvantage.com/api/offers/0fJajAlDE2gxrIjjeMAHFf?excludeClass=Editorial&siteTag=WAG3
93 B URL cenlar.savings.workingadvantage.com/api/offers/0fJajAlDE2gxrIjjeMAHFf?excludeClass=Editorial&siteTag=WAG3
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1ca94887c0fd2a791d098a214b6e46ab
2c711296dcb90a0c4d73ce90e6e638587dc4b2e4
f919c6122c16241acd1778c9990c1ff469e8fe0305bb97f33e4642d7031aa42c
GET /api/offers/0fJajAlDE2gxrIjjeMAHFf?excludeClass=Editorial&siteTag=WAG3 HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImMzMTA0ZTQ4NTVjZjJmYWMiLCJ0ciI6IjJlYTAxMWYxYjE2OTNmYTZjMmYxYmE5OWYyNmQ5MDAwIiwidGkiOjE3MDE2NjA3NjgwMzQsInRrIjoiODg4MzEifX0=
traceparent: 00-2ea011f1b1693fa6c2f1ba99f26d9000-c3104e4855cf2fac-01
tracestate: 88831@nr=0-1-2647367-1120218725-c3104e4855cf2fac----1701660768034
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"6a-LHESlty5CgxNc86Q5uY4WH3EsuQ"
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd5fbf7b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_a3DMTKPsH4osgZw&Version=18&Q_ORIGIN=https://cenlar.savings.workingadvantage.com&Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web
2.6 kB URL siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_a3DMTKPsH4osgZw&Version=18&Q_ORIGIN=https://cenlar.savings.workingadvantage.com&Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web
IP
File type JSON data\012- , ASCII text, with very long lines (2469), with no line terminators
Hash 62109293fee572e88fbffed660e82c70
fcb4975a7e3b58e7d539186cc8b258a3fb462b1c
6aad41f621a2320a6dd8d292ef55a75c43e4610af55a68916978504d1d80a945
GET /WRSiteInterceptEngine/Asset.php?Module=SI_a3DMTKPsH4osgZw&Version=18&Q_ORIGIN=https://cenlar.savings.workingadvantage.com&Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/json
access-control-allow-credentials: false
access-control-allow-origin: *
cache-control: public, max-age=604800, s-maxage=604800, max-age=315360000
edge-control: max-age=604800
expires: Wed, 30 Nov 2033 03:24:36 GMT
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
servershortname:
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
permissions-policy: camera=(), geolocation=(), microphone=()
content-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report
last-modified: Sun, 03 Dec 2023 03:24:36 GMT
cf-cache-status: HIT
age: 86885
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8300fbd86c15569b-OSL
content-encoding: br
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/decisions/impressions
2 B URL cenlar.savings.workingadvantage.com/decisions/impressions
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /decisions/impressions HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjY0ZjkyNTE4MTk2ZDM5NzQiLCJ0ciI6ImYyMWY1MGIyNTA3MDM4ZTM0ZTc3NDgyODI5OGE0OTAwIiwidGkiOjE3MDE2NjA3NzM2ODUsInRrIjoiODg4MzEifX0=
traceparent: 00-f21f50b2507038e34e774828298a4900-64f92518196d3974-01
tracestate: 88831@nr=0-1-2647367-1120218725-64f92518196d3974----1701660773685
Content-Type: application/json
Content-Length: 58
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:48 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
expires: Mon, 04 Dec 2023 03:32:47 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbf94e32b4f9-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/decisions/impressions
2 B URL cenlar.savings.workingadvantage.com/decisions/impressions
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /decisions/impressions HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjE0NWVhOTVjNDczZmM2YWUiLCJ0ciI6ImJjNjYzNmRhZWYwYjRiNGUzNzhjZWFmYTgwYWI4MDAwIiwidGkiOjE3MDE2NjA3NzM2OTksInRrIjoiODg4MzEifX0=
traceparent: 00-bc6636daef0b4b4e378ceafa80ab8000-145ea95c473fc6ae-01
tracestate: 88831@nr=0-1-2647367-1120218725-145ea95c473fc6ae----1701660773699
Content-Type: application/json
Content-Length: 58
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:48 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
expires: Mon, 04 Dec 2023 03:32:47 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbf95e40b4f9-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/889.ecc7b4d6eb47329c.js
1.1 kB URL cenlar.savings.workingadvantage.com/889.ecc7b4d6eb47329c.js
IP
File type ASCII text, with very long lines (2907), with no line terminators
Hash b20ed719f4550cfd549b9bdbf617ea06
8ebcf8152ff096428f2e7bda9b61c212edb9d419
872eaa6e9a17e55a5cc6f87bc33e2c51760a60da6048b4c4f1a0e8a769eaebd7
GET /889.ecc7b4d6eb47329c.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-b5b"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd1dabbb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/api/offers/decisions/cenlar/US?ids=0f75gol3wbF4gq3ncHN7ts,463Y7jKDgK3BzGUmEZTz4b,6LoCPyNjB4cpq4BBkFAIfJ,1C3eu5copBFfLEHpjVocEj,2vWfofqW0MdnwZHma7XZm9,50RXInk3ndc9xKuIdpA89N,7jzRxWKGcAVKJV0WyJ98Zn,6tYrsuImTUYjY8dPX6Foor,02hOY1GUj1j6MOSlWps5Ig,7w6RmmXvQ65aPPLi6IxFBW,4LKVTloky1aySQ1jdemRsL,53WTO8tztf91nqSOlqswlW,0n5hdTpvjg9CcisQa32YnU,2IIFoogHDUeDPKCjeRvVAG,05iVNFelJFrymAADbZmqFl,2AG8CrksUuMdj467kVbCW5&siteTag=WAG3&onlyActive=true&isDynamicData=true&onlyAvailable=true
422 B URL cenlar.savings.workingadvantage.com/api/offers/decisions/cenlar/US?ids=0f75gol3wbF4gq3ncHN7ts,463Y7jKDgK3BzGUmEZTz4b,6LoCPyNjB4cpq4BBkFAIfJ,1C3eu5copBFfLEHpjVocEj,2vWfofqW0MdnwZHma7XZm9,50RXInk3ndc9xKuIdpA89N,7jzRxWKGcAVKJV0WyJ98Zn,6tYrsuImTUYjY8dPX6Foor,02hOY1GUj1j6MOSlWps5Ig,7w6RmmXvQ65aPPLi6IxFBW,4LKVTloky1aySQ1jdemRsL,53WTO8tztf91nqSOlqswlW,0n5hdTpvjg9CcisQa32YnU,2IIFoogHDUeDPKCjeRvVAG,05iVNFelJFrymAADbZmqFl,2AG8CrksUuMdj467kVbCW5&siteTag=WAG3&onlyActive=true&isDynamicData=true&onlyAvailable=true
IP
File type JSON data\012- , ASCII text, with very long lines (1422), with no line terminators
Hash d7dfd0f9318cbbab6b284f6dbd8f27e0
e9be84fd38577db10128578987ffcc388b91e06c
e19148b9fb911e984d3fa447cc1f9626eae345f6e1611d3c8f8064b198c8f572
GET /api/offers/decisions/cenlar/US?ids=0f75gol3wbF4gq3ncHN7ts,463Y7jKDgK3BzGUmEZTz4b,6LoCPyNjB4cpq4BBkFAIfJ,1C3eu5copBFfLEHpjVocEj,2vWfofqW0MdnwZHma7XZm9,50RXInk3ndc9xKuIdpA89N,7jzRxWKGcAVKJV0WyJ98Zn,6tYrsuImTUYjY8dPX6Foor,02hOY1GUj1j6MOSlWps5Ig,7w6RmmXvQ65aPPLi6IxFBW,4LKVTloky1aySQ1jdemRsL,53WTO8tztf91nqSOlqswlW,0n5hdTpvjg9CcisQa32YnU,2IIFoogHDUeDPKCjeRvVAG,05iVNFelJFrymAADbZmqFl,2AG8CrksUuMdj467kVbCW5&siteTag=WAG3&onlyActive=true&isDynamicData=true&onlyAvailable=true HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImY4Y2E1YmZjMDNmM2JlMGIiLCJ0ciI6IjVkOThlMGIyOTZiNjBhMDg4MWM1MmZjMTVmODVlNTAwIiwidGkiOjE3MDE2NjA3NzE5MzUsInRrIjoiODg4MzEifX0=
traceparent: 00-5d98e0b296b60a0881c52fc15f85e500-f8ca5bfc03f3be0b-01
tracestate: 88831@nr=0-1-2647367-1120218725-f8ca5bfc03f3be0b----1701660771935
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:47 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"58e-6b6E/ThXfbEBKFeJh//MOIuR4Gw"
expires: Mon, 04 Dec 2023 03:32:46 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbee5b4eb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/L_2vqdj8cCI2mmuWpudUNnaF_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
9.5 kB URL g3i.imgix.net/uploads/L_2vqdj8cCI2mmuWpudUNnaF_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash c42ae1b514dbd8b229a2731b35ef0cc1
3002a620fb09b9f495be41b46520a95ba73e19b4
153486d6a11614d5274afd5ffe7968a366e455d5643823ccd3a976e9ab84a0ba
GET /uploads/L_2vqdj8cCI2mmuWpudUNnaF_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Nov 2023 07:09:49 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 9593f19ccf207349adc5d24e5eba821d09295c04
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 850979
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000131-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 9500
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_0wotPguI1WqCvEuVJ1KBIg_20.sm.jpg?w=222&h=160&crop=entropy&fit=crop
10 kB URL g3i.imgix.net/uploads/L_0wotPguI1WqCvEuVJ1KBIg_20.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 887d0b813d9c3dc6db1da0c37ab468be
181012d6e7a098a2f5921e169e1d22a04d346c6c
7be566c03de4d6786e0f7e67e49685c47a4b7bfabae6584dfeb2ce21b605c9db
GET /uploads/L_0wotPguI1WqCvEuVJ1KBIg_20.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Nov 2023 13:56:57 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: b8b3b39f0e764f32dbb0c0192d82bb6fe7a96778
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 394551
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10056-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 10497
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/offers/decisions/cenlar/US?ids=0SN6kU00LiTrLPiFFKA7zP,7ivYwV9YeyZAZ1DCKwFem4,36ZTxDbf56nIS2KUNSGrst,0B0tS3WhoJMcPiJq6xroki,2dzrWI6VGYdkgP6DkNXATG,5wg1JJiZoA1QDXGDSNt2zu,5welkpA4VzQsVyQ737HHwL,7pxZApuAnML0jm5IAHkvwD,5ades6nkcZwmOxcvQ3G5Yk,0ndh0fgmJK3EASzYXR9mjE,7g42SQtpdd7zc0IQqWHml2,3ZiZ6XhWHCrlXttsdxWDLN,1BJ9hfXWaW0DNmgOxJHrOy,7p1KjURiBtN4T5SOq6OGj9,4LzQ7w5gfl3ARJPHZQ9ZJT&siteTag=WAG3&onlyActive=true&isDynamicData=true&onlyAvailable=true
23 kB URL cenlar.savings.workingadvantage.com/api/offers/decisions/cenlar/US?ids=0SN6kU00LiTrLPiFFKA7zP,7ivYwV9YeyZAZ1DCKwFem4,36ZTxDbf56nIS2KUNSGrst,0B0tS3WhoJMcPiJq6xroki,2dzrWI6VGYdkgP6DkNXATG,5wg1JJiZoA1QDXGDSNt2zu,5welkpA4VzQsVyQ737HHwL,7pxZApuAnML0jm5IAHkvwD,5ades6nkcZwmOxcvQ3G5Yk,0ndh0fgmJK3EASzYXR9mjE,7g42SQtpdd7zc0IQqWHml2,3ZiZ6XhWHCrlXttsdxWDLN,1BJ9hfXWaW0DNmgOxJHrOy,7p1KjURiBtN4T5SOq6OGj9,4LzQ7w5gfl3ARJPHZQ9ZJT&siteTag=WAG3&onlyActive=true&isDynamicData=true&onlyAvailable=true
IP
File type JSON data\012- , ASCII text, with very long lines (1446), with no line terminators
Hash 7e270124b68fa445da20b01759f83faf
1b669283be85ff6ad7e6b0f63b7e09268ec1a1ff
9c1397e49cd2b49bb588e4412a8c613321b7725008b1e0ab33804872e09579de
GET /api/offers/decisions/cenlar/US?ids=0SN6kU00LiTrLPiFFKA7zP,7ivYwV9YeyZAZ1DCKwFem4,36ZTxDbf56nIS2KUNSGrst,0B0tS3WhoJMcPiJq6xroki,2dzrWI6VGYdkgP6DkNXATG,5wg1JJiZoA1QDXGDSNt2zu,5welkpA4VzQsVyQ737HHwL,7pxZApuAnML0jm5IAHkvwD,5ades6nkcZwmOxcvQ3G5Yk,0ndh0fgmJK3EASzYXR9mjE,7g42SQtpdd7zc0IQqWHml2,3ZiZ6XhWHCrlXttsdxWDLN,1BJ9hfXWaW0DNmgOxJHrOy,7p1KjURiBtN4T5SOq6OGj9,4LzQ7w5gfl3ARJPHZQ9ZJT&siteTag=WAG3&onlyActive=true&isDynamicData=true&onlyAvailable=true HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImQ1NzZjNWMxYWU2MDA4ZjIiLCJ0ciI6ImE1ZWZkOTA1MzgyNTlmOTIxNjJmMGI3ZTg4NjcxYjAwIiwidGkiOjE3MDE2NjA3Njk3NjAsInRrIjoiODg4MzEifX0=
traceparent: 00-a5efd90538259f92162f0b7e88671b00-d576c5c1ae6008f2-01
tracestate: 88831@nr=0-1-2647367-1120218725-d576c5c1ae6008f2----1701660769760
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; sat_domain=A; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:44 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"5a6-G2aSg76F/2rX5rD2O34JJo7Bof8"
expires: Mon, 04 Dec 2023 03:32:43 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbe0cf6fb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/ski-resorts-20200103-skier.sm.jpg?w=222&h=160&crop=entropy&fit=crop
8.2 kB URL g3i.imgix.net/uploads/ski-resorts-20200103-skier.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash b02afbe4a9bdba1b4575ebb0dec974d8
7a585ea40715741833eb7806a3df61f1cf0abc1e
6e0570bd1e8b4b50cf4a609d11dd39872f7ef3b0181f1ea6fe3e076f3a2f8377
GET /uploads/ski-resorts-20200103-skier.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 01 Dec 2023 16:30:36 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 8d41bf493602e82c7a890cfbe41bbac4f6a5a600
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 212531
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10061-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 8236
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_7CkPm2W5BjrqLPPdR0B4wr_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
9.4 kB URL g3i.imgix.net/uploads/L_7CkPm2W5BjrqLPPdR0B4wr_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 41c1773aed6ce77880b11b9bc087882a
8968d31179393772d2fe6fe8fea81675a7add964
0c6642a8c2fbad004d8c7cc2fba7679f1b25916ac5443774bde83b952914ec28
GET /uploads/L_7CkPm2W5BjrqLPPdR0B4wr_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 08:28:22 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: aef7b5180be38c40a3004a6f96f0c71acba96aaa
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1623865
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10034-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 9374
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/simplisafe-20190404-console-table-book.sm.jpg?w=222&h=160&crop=entropy&fit=crop
8.2 kB URL g3i.imgix.net/uploads/simplisafe-20190404-console-table-book.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 4760f20ed1aa665e1682553e3780dcef
9b34bce29a05d8b096860b917c15dd5d45c0b9df
491fc23ec89f3ab355a04dfbe4ba61eee3b697d6923fd6a4eeba0aca222d65aa
GET /uploads/simplisafe-20190404-console-table-book.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 01 Dec 2023 04:33:30 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: e958c2def59dfed81d498e67e6e9245ae5c8e1c5
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 255558
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10075-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 8182
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_2e1iDpebGRIOyUPUErIEWF_2.sm.jpg?w=222&h=160&crop=entropy&fit=crop
13 kB URL GET g3i.imgix.net/uploads/L_2e1iDpebGRIOyUPUErIEWF_2.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 13a81dcd05c04f4c136b601104a96e50
08121c007ee1af45273a89d236cc3138cd8849a8
67148221e606b13615e0d3e90965150eb1ebd0cb58e1b58c479e1efffc3c36e7
GET /uploads/L_2e1iDpebGRIOyUPUErIEWF_2.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 20 Nov 2023 00:00:43 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 19eefc9a528b81779e04b656f7f2c2e2ef7ab78d
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1222325
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000098-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 12826
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/G3-Apple0TV-360x360-Logo-Dark-2023.06.05.sm.png?w=222&h=160&crop=entropy&fit=crop
20 kB URL g3i.imgix.net/uploads/G3-Apple0TV-360x360-Logo-Dark-2023.06.05.sm.png?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 222 x 160, 8-bit/color RGB, non-interlaced\012- data
Hash 72aa483765b93834dcaff1b0ce6bdd58
eda435955a30b192935139acc0e5bf72215f99e0
506b473938a4dae7ac11bd6e4aa7d3b962f8ddf5ca7eeb6bdcfbb6a781b38421
GET /uploads/G3-Apple0TV-360x360-Logo-Dark-2023.06.05.sm.png?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Dec 2023 00:02:01 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: b533302e073e3eb05cfa7e960650e86d2a38fac6
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 12647
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10032-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 20270
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_0SN6kU00LiTrLPiFFKA7zP_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
11 kB URL g3i.imgix.net/uploads/L_0SN6kU00LiTrLPiFFKA7zP_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 56a97b1ad84ebc13d1832560bc8458f5
b11f7339c25f0836b9fa6dd2d208e36026bcc512
f3f6e2b1f4b91262e77c496d6e6ed64e94e6ace9154317f19e4f4119b4df6092
GET /uploads/L_0SN6kU00LiTrLPiFFKA7zP_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 24 Oct 2023 11:58:55 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 0516d2387b06da8516475e228f2050ac8c55e03d
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 3512033
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000104-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 10945
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/uor-1_1320x740.sm.jpg?w=222&h=160&crop=entropy&fit=crop
9.1 kB URL g3i.imgix.net/uploads/uor-1_1320x740.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 08ee3c08e255399d0755f6706f78737e
070ce2447a55ae7916b21518431c2c1a4a43d7ef
8841746071bae2d9e31fe092c3f67c33d341b666d6af2e2829aca47d1fd85a99
GET /uploads/uor-1_1320x740.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Nov 2023 13:13:58 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 9b94d7e1ad41d0a6474ae24561c0bbcf172728c0
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 2384330
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000115-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 9078
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/enterpriserentacar-20190827-family-walking.sm.jpg?w=222&h=160&crop=entropy&fit=crop
11 kB URL g3i.imgix.net/uploads/enterpriserentacar-20190827-family-walking.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 8d9d2ed4b1082fcbda2d259a7d1313ee
789e458c852d6fda664434968dcff101ec0848b1
bba976afa7e3906deecc7c0f6a31065f8a27cfafda5bd4498583426ef0d21200
GET /uploads/enterpriserentacar-20190827-family-walking.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 10:06:54 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: eea8d5a240bf319ab915be85933bd919145053db
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1617954
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10038-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 10900
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/seaworldnationwide-20180828-dolphin.sm.jpg?w=222&h=160&crop=entropy&fit=crop
8.2 kB URL g3i.imgix.net/uploads/seaworldnationwide-20180828-dolphin.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 04ce189bb5fda8b9d8fa203d947c0061
cdaf2fd15d98044d1cdd2ad2c3ad6946a62731f6
d9a82c49b8e1928791945182739c7da4864c29ab2d6cdf21adc4b6aa386ff211
GET /uploads/seaworldnationwide-20180828-dolphin.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Nov 2023 22:39:36 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: cbd85b5da7d1e24ea1b1c1836210f482f4a112f4
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 363192
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10082-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 8175
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_1gMxsMQkfJKiNmlOI5s5OP_2.sm.jpg?w=222&h=160&crop=entropy&fit=crop
12 kB URL g3i.imgix.net/uploads/L_1gMxsMQkfJKiNmlOI5s5OP_2.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash f73e1a57b865835c24d1dace76e633cc
3e115bb7550ed55115db300049803f5f0c8d93c9
358712360d56fa4e9e7756b1fe14c260d050bfebd89f9b3be7a76738284d24d0
GET /uploads/L_1gMxsMQkfJKiNmlOI5s5OP_2.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Nov 2023 13:49:20 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: dc4eba5af717ddcbdddcf269becf1de1a84563a4
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 2295807
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10031-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 11982
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/orlandoattractions-20200227.sm.jpg?w=222&h=160&crop=entropy&fit=crop
9.7 kB URL g3i.imgix.net/uploads/orlandoattractions-20200227.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash c4caea987bca4893fd4bb7394ebc9209
b2d47aae07dde1653d434695ed063addd2c62d83
dd7bba92c072b395a23ba3ea6ee037b0e48a9cc5e6106777a8293e602f046a25
GET /uploads/orlandoattractions-20200227.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Nov 2023 13:13:58 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: b6e5712ec011748947aff86c2e9184f3075313bf
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 2384330
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000087-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 9727
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/six-flags_1320x740.sm.jpg?w=222&h=160&crop=entropy&fit=crop
9.8 kB URL g3i.imgix.net/uploads/six-flags_1320x740.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 4e95445feb383cf516e9eafd9a2bfd14
3f7e4f825172bf30d8b360e69fc6692fb9c414de
924ff42e52488bdc0c11a4b6dd47f3be9369606f6b4233db6f138e747eb5696d
GET /uploads/six-flags_1320x740.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 13 Nov 2023 01:40:35 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 299142c561344223202a9e90a8b4fb63d5f97032
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1821134
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000137-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 9825
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/decisions/impressions
2 B URL cenlar.savings.workingadvantage.com/decisions/impressions
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /decisions/impressions HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjI2ZWZkYmJmYTI2ODQ2MDEiLCJ0ciI6IjI4N2I3NDAzZGYzMTZhMjA1NDEwZDczYjUxZGUxZjAwIiwidGkiOjE3MDE2NjA3NzQwMDQsInRrIjoiODg4MzEifX0=
traceparent: 00-287b7403df316a205410d73b51de1f00-26efdbbfa2684601-01
tracestate: 88831@nr=0-1-2647367-1120218725-26efdbbfa2684601----1701660774004
Content-Type: application/json
Content-Length: 550
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:48 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
expires: Mon, 04 Dec 2023 03:32:47 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbfb5ec1b4f9-OSL
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/L_6SUVeB3zqGEtTOlsvJOOzG_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
9.8 kB URL g3i.imgix.net/uploads/L_6SUVeB3zqGEtTOlsvJOOzG_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 727273eec7f5eccd77cdebe72252b36d
24acaa0456b73f6d446cb0c316ae1b65ab18124f
3ae169df12c5bc55dfdad5d9257d6a169847bbb29665169dd38b837ecb0a4a52
GET /uploads/L_6SUVeB3zqGEtTOlsvJOOzG_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2023 04:31:04 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 055d290dcc5a87ee15cd77dcf60c5327d8eb51c6
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 514903
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000127-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 9830
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_5sxdJ6wge74N7Tzthj9aek_8.sm.jpg?w=222&h=160&crop=entropy&fit=crop
8.8 kB URL g3i.imgix.net/uploads/L_5sxdJ6wge74N7Tzthj9aek_8.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 73d7dcbbf5561e9130f2b6c39767ae6b
ce3fb4225c69bb7dbaf710d2d121dbd125825e05
98c9da6398e85386f1ab3017a769b6d5a0c544d85552691f437ff02d5b0416c9
GET /uploads/L_5sxdJ6wge74N7Tzthj9aek_8.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Nov 2023 03:27:21 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 58549807b9ad8b784afd4ca5d86b2c02e5f65f97
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 2333126
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 8793
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_0ndh0fgmJK3EASzYXR9mjE_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
11 kB URL g3i.imgix.net/uploads/L_0ndh0fgmJK3EASzYXR9mjE_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 9d5f0e9afe8d0591bed3bf8dde2a9a7a
962d429f211ffe9a99d253a6e47304b587222d8b
3dcaabce5c30d034175a706239541ffb642917a1135e52afab28db00b23cba74
GET /uploads/L_0ndh0fgmJK3EASzYXR9mjE_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 04 Nov 2023 00:52:19 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: d024ef2fbbde27e41ba8e9aefab09c182cb568e0
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 2601629
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000128-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 10849
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_4NYtgJAUdo6f6xaFQeIPGJ_2.sm.png?w=222&h=160&crop=entropy&fit=crop
55 kB URL g3i.imgix.net/uploads/L_4NYtgJAUdo6f6xaFQeIPGJ_2.sm.png?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 222 x 160, 8-bit/color RGB, non-interlaced\012- data
Hash 7fd28e1b721654f8f395e6e47d70cd0d
aaafcaf8d5910fc390843b602f3a08231793e39b
b447cfcb99815252f2036af4f03082711c621cc12ffb52ce3b837b4547ee1a34
GET /uploads/L_4NYtgJAUdo6f6xaFQeIPGJ_2.sm.png?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Nov 2023 17:49:20 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 6b064c17104291e6062cf3787938302f098cf092
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1071808
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10069-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 54614
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ3q5d0.woff2
14 kB URL fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ3q5d0.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13724, version 1.0\012- data
Hash cf5ec3859b05de1b9351ab934b937417
97ffac24ea5fe5c47301f1be229699330ea93bf2
bd9a6192274f8f2f3ce31cd3d2cae5ebe32e2fa86fc7c4f60a3c28556e496d56
GET /s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ3q5d0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13724
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:58:25 GMT
expires: Fri, 29 Nov 2024 04:58:25 GMT
cache-control: public, max-age=31536000
age: 340463
last-modified: Tue, 02 May 2023 15:20:27 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
g3i.imgix.net/uploads/L_0B0tS3WhoJMcPiJq6xroki_2.sm.png?w=222&h=160&crop=entropy&fit=crop
50 kB URL g3i.imgix.net/uploads/L_0B0tS3WhoJMcPiJq6xroki_2.sm.png?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 222 x 160, 8-bit/color RGB, non-interlaced\012- data
Hash 73fbdf2516896ea5918f57ce4bc5c5fa
06ee2c23b724e49c4cce7ebb22738ef9a0df86de
be45ac0043afc882a7191564e7ee80ce8f1c8d791ec43eb18b0525ac64e17054
GET /uploads/L_0B0tS3WhoJMcPiJq6xroki_2.sm.png?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Nov 2023 16:17:06 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 0f8772bb64592fe8d568ae281daf3f1e97a1b6d7
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 386142
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10028-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 49769
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/beachesfamilyresorts-20190813-beaches-ocho-rios.sm.jpg?w=222&h=160&crop=entropy&fit=crop
9.0 kB URL g3i.imgix.net/uploads/beachesfamilyresorts-20190813-beaches-ocho-rios.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 8a2bdf4bef0d6f65466228743007123d
8d76ffacdcedabc89b02baa8f2dab91abf4f4260
98988c46c1f9c306446445f726c8aab11b66ced42dd8fa5ab0adb3b4f851c39a
GET /uploads/beachesfamilyresorts-20190813-beaches-ocho-rios.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 03 Dec 2023 11:02:03 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: e96f0c5c7bf798fb061acd316d5e5170b9421535
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 59445
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10079-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 9045
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/profile?userGuid=9295s2tu1rs9qlf5l8edmdxwm&knownEmail=afsoutherlin%40cenlar.com&knownEmailContact=afsoutherlin%40cenlar.com
26 kB URL cenlar.savings.workingadvantage.com/api/profile?userGuid=9295s2tu1rs9qlf5l8edmdxwm&knownEmail=afsoutherlin%40cenlar.com&knownEmailContact=afsoutherlin%40cenlar.com
IP
File type JSON data\012- , ASCII text, with very long lines (1264), with no line terminators
Hash 00c71dcb2e5da07cfe300dc909e51b20
4fdb7aba01671600ae5f5494e5dbba5e48c76969
cc1f3199913766b59294b4689f8c789a96b6d895cacf719747532ca14238f300
GET /api/profile?userGuid=9295s2tu1rs9qlf5l8edmdxwm&knownEmail=afsoutherlin%40cenlar.com&knownEmailContact=afsoutherlin%40cenlar.com HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImIyYTE3MzEzMmJkOGQ3YmUiLCJ0ciI6ImU0NzY3MTUzNTY4MDg0MjM0ZWQ0MWU5MzVkYThkYTAwIiwidGkiOjE3MDE2NjA3Njc0MDAsInRrIjoiODg4MzEifX0=
traceparent: 00-e4767153568084234ed41e935da8da00-b2a173132bd8d7be-01
tracestate: 88831@nr=0-1-2647367-1120218725-b2a173132bd8d7be----1701660767400
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"4f0-T9t6ugFnFgCuX1SU5du6XkjHaWk"
expires: Mon, 04 Dec 2023 03:32:41 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd22ad2b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/L_5ades6nkcZwmOxcvQ3G5Yk_2.sm.jpg?w=222&h=160&crop=entropy&fit=crop
10 kB URL g3i.imgix.net/uploads/L_5ades6nkcZwmOxcvQ3G5Yk_2.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash a4de77967f1027cbf78c72915a33eae3
d96f9f04729b17c0f037dc359e16f93b924581c5
52394b8b91695cf778bee8c040229a29c1cb6d24317a83dc0331f76134456232
GET /uploads/L_5ades6nkcZwmOxcvQ3G5Yk_2.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Nov 2023 12:03:36 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 4f96ae8130202274b383270b29cf6eb50aa10958
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 2302152
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10055-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 10288
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/abcmouse-20200226.sm.jpg?w=222&h=160&crop=entropy&fit=crop
9.3 kB URL g3i.imgix.net/uploads/abcmouse-20200226.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 73848e0cfe43392ee43f1f774a34baa7
4f80643f4d02970dbf39222b23a10043925fbc38
f99b87b78f1fd4ae9003a786fbd7212eaa20428ecadc9d7a3474ea3c7ddf55cb
GET /uploads/abcmouse-20200226.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Nov 2023 15:10:15 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 8fd73966f325c0ea1b15b53cfb8ebd416ab515dc
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 2290953
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10063-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 9278
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/preferredaccessticketsconcerts-20180828-concert.sm.jpg?w=222&h=160&crop=entropy&fit=crop
8.6 kB URL g3i.imgix.net/uploads/preferredaccessticketsconcerts-20180828-concert.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash bd0486de1317d87a518243ac13195567
79701556c8897cbbc9662026ff823dd94a633a34
fb1735d6f0d87b4c6894e3f13fac9e8f6e1900a4a6da7ad7324a0ce17ec2d863
GET /uploads/preferredaccessticketsconcerts-20180828-concert.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 14:02:41 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 46f0152a269938e8be9a7698fed038e80d709809
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1603806
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000086-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 8552
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/Aschaffenburg00Germany_2023-09-18_13-50-34.jpg?w=217&h=190&crop=entropy&fit=crop
20 kB URL g3i.imgix.net/uploads/Aschaffenburg00Germany_2023-09-18_13-50-34.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash e1d17e9260978f75f59a0eb40555ec63
16635f5e51db3bd3e10e3a34670b68e4fe5bb243
33ff43b4e632db88ef0b1202c995cb9461885fce7f338771d1df9358d5058ff5
GET /uploads/Aschaffenburg00Germany_2023-09-18_13-50-34.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Nov 2023 14:33:09 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 7660ab8571279a34fdcde2fb33760a9b7ca22a37
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 2293179
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000132-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 20001
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/Regal0Princess.jpg?w=217&h=190&crop=entropy&fit=crop
19 kB URL g3i.imgix.net/uploads/Regal0Princess.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash d8cfbc9dbe2b2a6ae4b2359b9a08238e
38fa5d517d2e0136646040953a15bd39020929bd
287d68fc287581050c714671e208dadf8281e52a9a96788423af1176efe38f9f
GET /uploads/Regal0Princess.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 15:38:00 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 5c08714127fd6b115d5b1eb50fb5ef2d3f18a68a
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1598087
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10029-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 18637
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_1BJ9hfXWaW0DNmgOxJHrOy_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
10 kB URL g3i.imgix.net/uploads/L_1BJ9hfXWaW0DNmgOxJHrOy_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash bd44488a3066184cf8c0a51fd23b8db7
b8546ed050863a2c53af4251c91379bd6f8b6b3d
59719790c763ca2a862476ebd40019697849764a3768c55248fb5f9e6e1e72c3
GET /uploads/L_1BJ9hfXWaW0DNmgOxJHrOy_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 10 Oct 2023 15:26:12 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: bd2decfa287f4d2e43e2901f178ebf6994637b76
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 4709197
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000103-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 10361
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/Disney0Treasure0Exterior0Stern.jpg?w=217&h=190&crop=entropy&fit=crop
18 kB URL g3i.imgix.net/uploads/Disney0Treasure0Exterior0Stern.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash 5168ff50d14c3324a41d10634967e3c8
edc06ae02e4561afe01db20d955620d84ec97fb4
b53565148a8c935e3a5d368117ae9401490d978e4932f343c3ac1dad1e710554
GET /uploads/Disney0Treasure0Exterior0Stern.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 15:33:22 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 9dd69b9fb8b8ce28f6bb60be7e3205fb1166c113
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1598366
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000085-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 18269
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/offers/extra-info?guids=0SN6kU00LiTrLPiFFKA7zP,0pCiGjDzkrJQTkSxIHB2i3,6SUVeB3zqGEtTOlsvJOOzG,5oaC7YLScaWDv9IYUWfyMu,0Szr5QqqNwcQfuTXKjZOPa,2vqdj8cCI2mmuWpudUNnaF,0wotPguI1WqCvEuVJ1KBIg,2vqdj8cCI2mmuWpudUNnaF,4ef61KJXbO6XyqOgDNmX3A,5sxdJ6wge74N7Tzthj9aek,4NYtgJAUdo6f6xaFQeIPGJ
12 kB URL cenlar.savings.workingadvantage.com/api/offers/extra-info?guids=0SN6kU00LiTrLPiFFKA7zP,0pCiGjDzkrJQTkSxIHB2i3,6SUVeB3zqGEtTOlsvJOOzG,5oaC7YLScaWDv9IYUWfyMu,0Szr5QqqNwcQfuTXKjZOPa,2vqdj8cCI2mmuWpudUNnaF,0wotPguI1WqCvEuVJ1KBIg,2vqdj8cCI2mmuWpudUNnaF,4ef61KJXbO6XyqOgDNmX3A,5sxdJ6wge74N7Tzthj9aek,4NYtgJAUdo6f6xaFQeIPGJ
IP
File type JSON data\012- , ASCII text, with very long lines (2165), with no line terminators
Hash 8b014833cc72b3e8f5e3b3e10ab8b1b2
56590869bded84206581e9cd653fce4a1442f26e
0fc364990aef9892badb9d13ff19b5bf8d2029e1e7456bbe917eba2b6ab81110
GET /api/offers/extra-info?guids=0SN6kU00LiTrLPiFFKA7zP,0pCiGjDzkrJQTkSxIHB2i3,6SUVeB3zqGEtTOlsvJOOzG,5oaC7YLScaWDv9IYUWfyMu,0Szr5QqqNwcQfuTXKjZOPa,2vqdj8cCI2mmuWpudUNnaF,0wotPguI1WqCvEuVJ1KBIg,2vqdj8cCI2mmuWpudUNnaF,4ef61KJXbO6XyqOgDNmX3A,5sxdJ6wge74N7Tzthj9aek,4NYtgJAUdo6f6xaFQeIPGJ HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjVmOTczNjQzOTVhNWI0MDMiLCJ0ciI6ImJkYzNkOTJmYjQ5ZGU2NGZkMDY4NzU1NzNhMWE5MDAwIiwidGkiOjE3MDE2NjA3NzQwMDAsInRrIjoiODg4MzEifX0=
traceparent: 00-bdc3d92fb49de64fd06875573a1a9000-5f97364395a5b403-01
tracestate: 88831@nr=0-1-2647367-1120218725-5f97364395a5b403----1701660774000
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:48 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"875-VlkIab3thCBlgenNZT/OShRC8m4"
expires: Mon, 04 Dec 2023 03:32:47 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbfb4ec0b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/GH_1320x740.sm.jpg?w=222&h=160&crop=entropy&fit=crop
8.7 kB URL g3i.imgix.net/uploads/GH_1320x740.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 49ef0e8e344b92f271549ed479c2a334
6b3a7e57e602403263050ce16a344ace132ab328
04893b0264171c2f59b290b4ff24868af2e380f28c045238ecc504b8310fbd90
GET /uploads/GH_1320x740.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 01 Dec 2023 15:33:53 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 8e9eecee1e3166d4d76f858aa688752de91bd284
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 215935
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10049-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 8675
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/todaysdeals-20210323-restaurantcom-burgers.jpg?w=217&h=190&crop=entropy&fit=crop
20 kB URL g3i.imgix.net/uploads/todaysdeals-20210323-restaurantcom-burgers.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash e1833451a689383ed116425f4b6e57cb
a9a080c76b844d939c3943a54aed76eb1337b24c
034b0da5d20c32e58f9b61f1574ebd0c66b239844d3d23b56cf9a94c0ffbc3ec
GET /uploads/todaysdeals-20210323-restaurantcom-burgers.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 14 Nov 2023 09:09:36 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 82aed74c8fb169a27ee049c63c81605cc159a688
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1707793
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10022-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 20319
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/garmin020230.jpg?w=217&h=190&crop=entropy&fit=crop
14 kB URL g3i.imgix.net/uploads/garmin020230.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash 61f06b49bde37274a8b36f9691cc74d3
fd75ebf5b68322f698c3e31a6e81578f6d7f690b
07fb8a64b47393a9bc4e9ecc0fba07432b51cef25d278b5a383b7b6ad848bb97
GET /uploads/garmin020230.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Nov 2023 15:38:53 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 139b7a936cd4e6049d94d7dac4d8f4661531cf4c
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 388436
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 13507
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/lenovo011.29.jpg?w=217&h=190&crop=entropy&fit=crop
17 kB URL g3i.imgix.net/uploads/lenovo011.29.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash caea28f458f6a26a95bf2ddcf142844a
b00d000be511912dc55afc8dc7720b3d3beaadab
c10c486a96d90f6ef93ebc21d28fe868104f71360b48663ea183fd37a20a5cec
GET /uploads/lenovo011.29.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 12 Nov 2023 22:18:44 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 1e3f6e93b0901755e74e53e4cf5973ecd6c1bdb4
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 1833244
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000089-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 17047
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/todaysdeals-20210222-samsclub.jpg?w=217&h=190&crop=entropy&fit=crop
21 kB URL g3i.imgix.net/uploads/todaysdeals-20210222-samsclub.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash c57cf63f73dbf7385927dca862e67c45
7836d7564cf4a06cda848fea345dbbe9db87a9e0
184f74a3b643f4124d6042d3ba8518707a6ad263406754fe34c432369b7392de
GET /uploads/todaysdeals-20210222-samsclub.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Nov 2023 13:05:15 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 2e61943abe4b3bbce7524a3bb5cfda274979195f
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 311253
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 21340
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg
42 kB URL siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg
IP
File type Unicode text, UTF-8 text, with very long lines (62977), with no line terminators
Hash a8b841cfdd104d555567dfdeb958eee8
24944afff764a5e92b2ca2042e9d3cdf79065a93
1eaa61116a44b60d15c87e58db63270223e677db1d546e128906d77d11c8a572
GET /dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript
cf-ray: 8300fbd85c10569b-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 334424
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"fefe-18bacbdecd0"
last-modified: Wed, 08 Nov 2023 02:23:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=65278
content-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/12.1.230TOOTHBRUSH.jpg?w=217&h=190&crop=entropy&fit=crop
7.9 kB URL g3i.imgix.net/uploads/12.1.230TOOTHBRUSH.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash 3427a9613324077f0df5957e022c928d
baa7887af388d7aec378771b029e6c76acd98dc4
4a3fcd00f0294104ebfe2f2f9f257b1fbab3e7b6fb30e7a8b4ccf2900fb9e7cc
GET /uploads/12.1.230TOOTHBRUSH.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 01 Dec 2023 16:45:05 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: fb1af4212518666f20a7bbf37075d658a1fcdd11
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:48 GMT
age: 211663
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000141-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 7873
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/12.1.230WOOT0.jpg?w=217&h=190&crop=entropy&fit=crop
10 kB URL g3i.imgix.net/uploads/12.1.230WOOT0.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash fbc23feeb4abd45abf600dbc32603b57
47aaf9c0cb1958e6a13f0a24d58a9eb6b16ce128
bea768836fe29ef3bd877af16f9a193ad4d40a500e5e8f7ca7bee182c23c8580
GET /uploads/12.1.230WOOT0.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 01 Dec 2023 16:50:29 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: a3fda7b396733a852ace07c436c6ec78b83157f0
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 211339
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000138-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 10342
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/ncl_Jewel_Roatan_Beach_Run_fixhrz.jpeg?w=217&h=190&crop=entropy&fit=crop
11 kB URL g3i.imgix.net/uploads/ncl_Jewel_Roatan_Beach_Run_fixhrz.jpeg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash 7febffd91a649f6d7b106e3a6174392e
f1c3b173180d2c535e874962437f107106bb21b0
0c717c404d87db93b21a73d7a0dc388e9c873ec74e71aab9f8cbf472a17cbaa1
GET /uploads/ncl_Jewel_Roatan_Beach_Run_fixhrz.jpeg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Nov 2023 08:35:55 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 2f22d7f8825068e51cace0ddafd7a1ba3e21e600
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 1277813
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10066-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 11311
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/Virgin0Lifestyle.jpg?w=217&h=190&crop=entropy&fit=crop
14 kB URL g3i.imgix.net/uploads/Virgin0Lifestyle.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash 096e347351e0d9bd1d41dac3a55bc552
e8d9f5c3c9b710755f1ecfe809a48384337e78e3
303bbd7a740267628083b1afcb81e459ad1b902198e57afa3293daea8d6661da
GET /uploads/Virgin0Lifestyle.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 27 Nov 2023 17:09:59 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 66b701aeebd5ff18a122014c3b4cfbb23034672d
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 555769
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 14401
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/offers/extra-info?guids=0SN6kU00LiTrLPiFFKA7zP,7ivYwV9YeyZAZ1DCKwFem4,36ZTxDbf56nIS2KUNSGrst,0B0tS3WhoJMcPiJq6xroki,2dzrWI6VGYdkgP6DkNXATG,5wg1JJiZoA1QDXGDSNt2zu,5welkpA4VzQsVyQ737HHwL,7pxZApuAnML0jm5IAHkvwD,5ades6nkcZwmOxcvQ3G5Yk,0ndh0fgmJK3EASzYXR9mjE,7g42SQtpdd7zc0IQqWHml2,3ZiZ6XhWHCrlXttsdxWDLN,1BJ9hfXWaW0DNmgOxJHrOy,7p1KjURiBtN4T5SOq6OGj9,4LzQ7w5gfl3ARJPHZQ9ZJT
2.8 kB URL cenlar.savings.workingadvantage.com/api/offers/extra-info?guids=0SN6kU00LiTrLPiFFKA7zP,7ivYwV9YeyZAZ1DCKwFem4,36ZTxDbf56nIS2KUNSGrst,0B0tS3WhoJMcPiJq6xroki,2dzrWI6VGYdkgP6DkNXATG,5wg1JJiZoA1QDXGDSNt2zu,5welkpA4VzQsVyQ737HHwL,7pxZApuAnML0jm5IAHkvwD,5ades6nkcZwmOxcvQ3G5Yk,0ndh0fgmJK3EASzYXR9mjE,7g42SQtpdd7zc0IQqWHml2,3ZiZ6XhWHCrlXttsdxWDLN,1BJ9hfXWaW0DNmgOxJHrOy,7p1KjURiBtN4T5SOq6OGj9,4LzQ7w5gfl3ARJPHZQ9ZJT
IP
File type JSON data\012- , ASCII text, with very long lines (3437), with no line terminators
Hash 47d3be59dc48e17a59550e4787d36116
46eb4b3a43116e0ed4ca5d6538c4243db8bbdd47
34b63bf1124a3eabaaee052edbbc3d816ee2b6f845511891322e1498a675f930
GET /api/offers/extra-info?guids=0SN6kU00LiTrLPiFFKA7zP,7ivYwV9YeyZAZ1DCKwFem4,36ZTxDbf56nIS2KUNSGrst,0B0tS3WhoJMcPiJq6xroki,2dzrWI6VGYdkgP6DkNXATG,5wg1JJiZoA1QDXGDSNt2zu,5welkpA4VzQsVyQ737HHwL,7pxZApuAnML0jm5IAHkvwD,5ades6nkcZwmOxcvQ3G5Yk,0ndh0fgmJK3EASzYXR9mjE,7g42SQtpdd7zc0IQqWHml2,3ZiZ6XhWHCrlXttsdxWDLN,1BJ9hfXWaW0DNmgOxJHrOy,7p1KjURiBtN4T5SOq6OGj9,4LzQ7w5gfl3ARJPHZQ9ZJT HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjBhYzU3NTczMDQxNTQ4NGEiLCJ0ciI6IjE5ZjYyNWQ3NzNlZjE1Nzk0MWFjODU2MjFiZDIzOTAwIiwidGkiOjE3MDE2NjA3NzQyMjYsInRrIjoiODg4MzEifX0=
traceparent: 00-19f625d773ef157941ac85621bd23900-0ac575730415484a-01
tracestate: 88831@nr=0-1-2647367-1120218725-0ac575730415484a----1701660774226
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:48 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Origin
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
expires: Mon, 04 Dec 2023 03:32:47 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbfcaf0cb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/MSC21008292.jpg?w=217&h=190&crop=entropy&fit=crop
12 kB URL g3i.imgix.net/uploads/MSC21008292.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash 46e782d9b3e5e88a2e7f3cda2b139b74
f77cf594d2f49e0e93f33d0ceedfa1d2337b8a0b
16372c6e0c786306d4b891f788fc4d323882207dd45e7672d650dd030c1b2c19
GET /uploads/MSC21008292.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 12:22:55 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 61b7e262d91211941685f2f3b67bc57e3d8b05f1
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 1609793
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10078-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 11981
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg
33 kB URL siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash fcf04dc791b5d0a1fbe93d93b5e179d9
8f80430644812d419aa5f4d73e594682946a941f
2ca3b492e58624d30201bfe06213e6a513c37f56ba433d9bae00e5513d5576b3
GET /dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript
cf-ray: 8300fbd77bb8569b-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 422487
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"190ae-18bacbdecd0"
last-modified: Wed, 08 Nov 2023 02:23:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=102574
content-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/ebg-tickets-logo-square-v2.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
3.0 kB URL g3i.imgix.net/uploads/ebg-tickets-logo-square-v2.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash fd23fee3864af2f15c7f67b23d69e3b5
a6d4182e462a61015a22a641e7a9092f51f19d16
92ddacd5c92b5fd8a7f2f0c47202416035e3f2849218c94b3bb217fbdbbdc67e
GET /uploads/ebg-tickets-logo-square-v2.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 31 Oct 2023 07:50:04 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: c40eb08f406af66c97f8b6d5ba0d1978ed4c2a57
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 2922164
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10061-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 2984
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/G3-AARP-360x360-Logo-Evergreen-2022.05.26.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
2.6 kB URL g3i.imgix.net/uploads/G3-AARP-360x360-Logo-Evergreen-2022.05.26.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 12ad5836312a03733250113111c2e6bc
b63333f4d3ef5b9afa38ff9bc27295755712881e
5a6ae8a3f9f29cc00506a4515797e8a5b2da5b79ea804817fd41a81e63204548
GET /uploads/G3-AARP-360x360-Logo-Evergreen-2022.05.26.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Nov 2023 09:18:37 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 171ea555114cb4bb51309af9056da30638aa33a5
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 324852
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000140-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 2595
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/G3-BetterHelp-Logo-360x360-2022.03-15.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
2.4 kB URL g3i.imgix.net/uploads/G3-BetterHelp-Logo-360x360-2022.03-15.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash b0c497ee52bcc9b9c6eb8352c1164194
2638304de305bb0cbd77d581d18934321d4c45d5
64f11d7d91ff9bc4e0fb02febbe8f18ea349445be3b41a16e99cf06d7f951611
GET /uploads/G3-BetterHelp-Logo-360x360-2022.03-15.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 03 Nov 2023 09:17:46 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 7c23718925039cc2a78c660ca18368c7b719a2fc
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 2657702
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000141-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 2415
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/walt-disney-world-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
1.7 kB URL g3i.imgix.net/uploads/walt-disney-world-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 2d8696705410c8c707cc416e3aa53363
b2f16fa69e83604b6c4da2c8eb6ed8bb106069d6
4f9680babf0617b54e6b41f14139ae071697d81ccc12674f1fe724f2a8a3ee7a
GET /uploads/walt-disney-world-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Nov 2023 14:36:55 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 2f72b8494bea6016efbba4aaaba231dd8130f648
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 2379353
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000123-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 1692
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/G3_Brand-Logo_360x360.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
4.5 kB URL g3i.imgix.net/uploads/G3_Brand-Logo_360x360.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 93a6562faf0a088e09baa6f15b073e9f
fb85c1ee0b9373b45d7488eab6a50a7167432dcd
aa573bcf4b21fc53eab64f2bb3effa9ead53707d9229478fee23c4c5d5840d31
GET /uploads/G3_Brand-Logo_360x360.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 06 Nov 2023 16:42:58 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 7e1ac76edebde19ea1ebb8d43a775def7dbcfee2
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 2371790
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000103-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 4499
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/disneyland-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
2.1 kB URL g3i.imgix.net/uploads/disneyland-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 034d29f78f38fd61e7874270318e2e55
8bdfbd5f1e1dabc09cf4f350b0b78c0e6bc78d0a
8dbc1de6f7983adab6a711495a279efbbf19760996baedbaada812898ab27809
GET /uploads/disneyland-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 14 Nov 2023 10:24:03 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 0c0a960fdc1a4c58e49502ea129f47354ded626d
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 1703325
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000117-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 2139
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/11.0woot0charcutterie0board0.jpg?w=217&h=190&crop=entropy&fit=crop
15 kB URL g3i.imgix.net/uploads/11.0woot0charcutterie0board0.jpg?w=217&h=190&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 217x190, components 3\012- data
Hash 8d12724b66ca5f098a1b96598071db7f
41af06b9dee099106866a7344985cc369aacb00d
6937750afcc0721230d69bc3612e0283f2cf780243dbfbdcf08c08ac0f807607
GET /uploads/11.0woot0charcutterie0board0.jpg?w=217&h=190&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Nov 2023 17:37:58 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 9a5a2f2451f60bbff1ef105d52caa59b140ad66e
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 294890
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000107-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 14809
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/Ic-hotels-mini.svg?w=64&h=64&crop=entropy&fit=crop
606 B URL g3i.imgix.net/uploads/Ic-hotels-mini.svg?w=64&h=64&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash df553ee5bed01c76180391e149c6fd0d
235aeb18f3f5f6b074ce8abd3ec6b7bd59184e30
43c0a5999d8b093fba571399274ea29ff5a245d64b85be94c6f93613218ff5c8
GET /uploads/Ic-hotels-mini.svg?w=64&h=64&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Mon, 28 Sep 2020 16:32:18 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 59b986c2ec7c4f744553f9567297edfd5de7fb46
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 1703325
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000117-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
vary: Accept-Encoding
content-length: 606
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/Ic-financial_fitness-mini.svg?w=64&h=64&crop=entropy&fit=crop
876 B URL g3i.imgix.net/uploads/Ic-financial_fitness-mini.svg?w=64&h=64&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1019)
Hash 63ee0ee9906f4863bbb9199c24415bee
129f4b14fde0462b8906a67f5d3044f33b412175
c475278b2d86a7f2540ff85f0de130c4d60a07e760f206f8719577d6c788c02d
GET /uploads/Ic-financial_fitness-mini.svg?w=64&h=64&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Wed, 09 Sep 2020 03:06:10 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 49a7cdd0e5f860f9c0715b0b1803ab44efa6ad17
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 2721821
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000129-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
vary: Accept-Encoding
content-length: 876
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/ic-liked.svg?w=20&h=20&crop=entropy&fit=crop
1.1 kB URL g3i.imgix.net/uploads/ic-liked.svg?w=20&h=20&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2130)
Hash 3b9dadb94f1a2b445644aebfd3845b2a
da8bee62e8c38452c1282da282941a01907e6089
baff1938cb7572f1b1961f484e7472141c41c7e3ec0bcd815ecb4454f7eb07f4
GET /uploads/ic-liked.svg?w=20&h=20&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Fri, 24 Apr 2020 15:05:44 GMT
content-encoding: gzip
server: imgix
x-imgix-id: e741ab721b3b2f6352733e0ef79c7106464eabdb
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 403215
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000088-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
vary: Accept-Encoding
content-length: 1056
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/walt-disney-world-logo-square.png?w=100&h=100&fit=fillmax&fill=solid&fill-color=FFFFFF
2.9 kB URL g3i.imgix.net/uploads/walt-disney-world-logo-square.png?w=100&h=100&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 811fa30adbe12571db2f56cae2c9a2c0
c43ca960bf2583f3b36e2ea7b4266fa3dd63af3a
02fde67910a59dda8f547d78b813b017a8557d1fb7463f94f4c637751e3b6180
GET /uploads/walt-disney-world-logo-square.png?w=100&h=100&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Dec 2023 00:00:12 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: b3407e18789ca2e44183564a5e5d7e7779aaa0e0
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 12757
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10064-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 2866
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/simplisafe-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
2.0 kB URL g3i.imgix.net/uploads/simplisafe-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash f0548d7e4d91233913f9cb09baceefde
3559cccbb510669b07bc388a29dd23dc8924e005
36b62cb92f9367b02ae50f789e9c4a97cc6bf2e5de7d16a29cf3313e24b09341
GET /uploads/simplisafe-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 13:59:02 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: f50d42f9fe4ac1748d8c63f88a29a467e5129d3a
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 1604027
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10062-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 1982
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/hotels_360x360.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
1.9 kB URL g3i.imgix.net/uploads/hotels_360x360.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 763381e53847012df809844a549064aa
97b628a2909485253762e3e4bd473509c70a740c
f493d79ab27b7ad19b80dd79d6470001495dfcf2e2d44956d99ad0b22fa538b8
GET /uploads/hotels_360x360.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Nov 2023 18:13:54 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 8c75e0358eee300d3032fa3a39b7dca1a0627bff
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 292735
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000132-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 1928
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/G3-Apple0TV-360x360-Logo-Dark-2023.06.05.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
5.5 kB URL g3i.imgix.net/uploads/G3-Apple0TV-360x360-Logo-Dark-2023.06.05.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 4475f08fb36aaf7269f237054ed7f6fd
0396699afdcbb094810e7e9ff73416bf7a348ba5
cb2f15b223d2ef6bc1ac09c4f1b73fb8a4dd0180c5cb93bc895cbd09f978988b
GET /uploads/G3-Apple0TV-360x360-Logo-Dark-2023.06.05.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 31 Oct 2023 12:22:03 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 55c30d1ca67ff3784e6865b8617a003103f92ffc
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 2905846
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000133-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 5451
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/1-800-flowers-com-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
2.8 kB URL g3i.imgix.net/uploads/1-800-flowers-com-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 5c4251b249bb9ba44be9107d68bffbe2
58f64adb3e52e58bed1fc37af22843cc951f6368
dfcde1d3b56d7f7a22ff12afaf08644e0341dac4c6c08fdfb8a633bd307b3177
GET /uploads/1-800-flowers-com-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 14:39:03 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: c97e8eda0052b5dcd0cb59436f3da5fdc716ed9f
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 1601625
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000086-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 2779
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/travel-deals_360x360.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
2.4 kB URL g3i.imgix.net/uploads/travel-deals_360x360.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash a6d44cfe02de87ee20523004cbc9768f
01b7adabe76af0e0f31152d59ac3699f1ac23d44
05ee59a00dbcf19e90c6a43ed7de9c70f856b0cf9d107bffbaa53525405ed757
GET /uploads/travel-deals_360x360.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 17 Nov 2023 04:26:26 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: b52b9073675d58f97859047b942f79891779df39
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 1465582
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10033-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 2438
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/ic-travel-sm.svg?w=20&h=20&crop=entropy&fit=crop
496 B URL g3i.imgix.net/uploads/ic-travel-sm.svg?w=20&h=20&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (394)
Hash b3f78b696f8fa1a152c59656ae97ac85
b0251a857a33f10d97a16413e56e294de601fbc0
8425f1854f819bf728afe9e6b15bf6e02dae70a78f9eca50552a4fc34b5b0791
GET /uploads/ic-travel-sm.svg?w=20&h=20&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
last-modified: Sat, 28 Mar 2020 13:04:13 GMT
content-encoding: gzip
server: imgix
x-imgix-id: 4b74823a5cd34491a38edd5173dd6feffef8373b
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 311407
accept-ranges: bytes
content-type: image/svg+xml
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10052-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
vary: Accept-Encoding
content-length: 496
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/G3-Home0Chef0Family-360x360-Logo-stacked-2023.06.23.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
4.0 kB URL g3i.imgix.net/uploads/G3-Home0Chef0Family-360x360-Logo-stacked-2023.06.23.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 59c83404d0ac19495561a2338cc6f47c
8e4cf7a8fbedb9219fbadb46948c011d6fea7309
5c20616c298f1cbf05b9f15765dcd3a48144c861affb06831be09693a48ec2cf
GET /uploads/G3-Home0Chef0Family-360x360-Logo-stacked-2023.06.23.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Dec 2023 00:01:42 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 89faec34d34c174d936d818ac2d890c9b96bb1da
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 12666
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000130-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 4022
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/enterprise-rent-a-car-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
2.1 kB URL g3i.imgix.net/uploads/enterprise-rent-a-car-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash fc2e244f869dd827f189630be9f11266
d2abfdcf40f7285c004afd611157b2a205c6698e
e19ff08a3a2f7d922ec50d6dd593fc82620ef97ccf2ad105476cc32b87eec5e4
GET /uploads/enterprise-rent-a-car-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 14 Nov 2023 12:26:55 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 2fce40c304ee9772fc286807ccaf30528185b43a
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:49 GMT
age: 1695953
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10054-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 2127
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/dxjsmodule/7.61eadfb61701cbba3995.chunk.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg
48 kB URL siteintercept.qualtrics.com/dxjsmodule/7.61eadfb61701cbba3995.chunk.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg
IP
File type ASCII text, with very long lines (2125), with no line terminators
Hash 5227f412aaeae21e03ced429dae1301c
e3560a0eb7bf5757937a46bb8d42262af974679f
d33eafe7c71aa27415b3fe0254b6e1c4be7cfccdb32fec684bf876f52b291cbe
GET /dxjsmodule/7.61eadfb61701cbba3995.chunk.js?Q_CLIENTVERSION=1.103.0&Q_CLIENTTYPE=web&Q_BRANDID=ebg HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:32:42 GMT
content-type: application/javascript
cf-ray: 8300fbd85c0b569b-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 521914
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"b58-18bacbdecd0"
last-modified: Wed, 08 Nov 2023 02:23:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=2904
content-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/dictionaries/category-tags/300004,100306,100300
13 kB URL cenlar.savings.workingadvantage.com/api/dictionaries/category-tags/300004,100306,100300
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash dae49a6fb97db7e0d219108502a76e4e
13321482e5a2b218d709d5b2783ab6b05636fc78
042d197491e613297e0d9ec4e92e4c6700502e809ce5531de77d7eb01ec59710
GET /api/dictionaries/category-tags/300004,100306,100300 HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImE5NTA2YzgxZDRmZDg4YzgiLCJ0ciI6ImZlNWI5MjNhNDM4ZWMwYWNmNjI2ZTc5NjYwNDc4MDAwIiwidGkiOjE3MDE2NjA3NzM3MTAsInRrIjoiODg4MzEifX0=
traceparent: 00-fe5b923a438ec0acf626e79660478000-a9506c81d4fd88c8-01
tracestate: 88831@nr=0-1-2647367-1120218725-a9506c81d4fd88c8----1701660773710
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:48 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"12c-EzIUguWishjXCdWyeDq2sFY2/Hg"
expires: Mon, 04 Dec 2023 03:32:47 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbf98e4ab4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/L_6SUVeB3zqGEtTOlsvJOOzG_1.jpg?w=222&h=160&crop=entropy&fit=crop
17 kB URL g3i.imgix.net/uploads/L_6SUVeB3zqGEtTOlsvJOOzG_1.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 1eece25eebde30bdd6c7247d82dc6573
480d7638f3b60e1d3f53ed9537b2ec63d4ab76c8
f2c84276208113aa2ad933a8d9c6a3ed2dde2a07d9fac0e27ffd26ab0723e5f0
GET /uploads/L_6SUVeB3zqGEtTOlsvJOOzG_1.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 03 Dec 2023 19:02:41 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 2dcba3519f4d6a8422bb4a7565b78350d62d5baf
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 30608
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10047-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 16966
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_5sxdJ6wge74N7Tzthj9aek_8.jpg?w=222&h=160&crop=entropy&fit=crop
14 kB URL g3i.imgix.net/uploads/L_5sxdJ6wge74N7Tzthj9aek_8.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 57b42f7f44eb67508bb4654036de545d
430d52f324a02e11e029c52d39983f8f89177716
761b717f7fdb8a17a2a1bf30a4e20db2c7d6871c781caa3e0a1d1ca308f340c8
GET /uploads/L_5sxdJ6wge74N7Tzthj9aek_8.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 30 Nov 2023 10:26:29 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 134ae4b4a58076b27c42a7c643085226fb5cfda6
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 320781
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000108-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 13531
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_2e1iDpebGRIOyUPUErIEWF_2.jpg?w=222&h=160&crop=entropy&fit=crop
20 kB URL g3i.imgix.net/uploads/L_2e1iDpebGRIOyUPUErIEWF_2.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 8fc4b597e7fa35ed82cf0df42f04478c
59d0f0cb7a424bf640f544ae77e1a354406604e0
74e2623e7f001ed5fbcc7221cf7d561942b7f9d398e4e3e330169132314039a7
GET /uploads/L_2e1iDpebGRIOyUPUErIEWF_2.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Dec 2023 00:06:06 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 8dbc12fa2c52f1d443c5564dfa0df326d7d5edc2
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 12403
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10046-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 20267
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/assets/icons/ic-make.svg
10 kB URL cenlar.savings.workingadvantage.com/assets/icons/ic-make.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 35d607f9641b20218fe506f3ffa4ad91
76099670997d00ba58628586877ca274c64b89b8
79a2e2002be0245aab747cc32938574f254e6b436f53549e2aea2bdee5043117
GET /assets/icons/ic-make.svg HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:49 GMT
content-type: image/svg+xml
last-modified: Wed, 29 Nov 2023 02:18:55 GMT
etag: W/"65669f8f-184"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fc03991cb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/api/offers/decisions/cenlar/US?ids=0SN6kU00LiTrLPiFFKA7zP,0pCiGjDzkrJQTkSxIHB2i3,6SUVeB3zqGEtTOlsvJOOzG,3RAUSqd3LKf0YWOfD0iDDY,2e1iDpebGRIOyUPUErIEWF,5oaC7YLScaWDv9IYUWfyMu,0Szr5QqqNwcQfuTXKjZOPa,2vqdj8cCI2mmuWpudUNnaF,0wotPguI1WqCvEuVJ1KBIg,1gMxsMQkfJKiNmlOI5s5OP,2vqdj8cCI2mmuWpudUNnaF,4ef61KJXbO6XyqOgDNmX3A,5sxdJ6wge74N7Tzthj9aek,4NYtgJAUdo6f6xaFQeIPGJ&siteTag=WAG3&onlyActive=true&onlyAvailable=true
53 kB URL cenlar.savings.workingadvantage.com/api/offers/decisions/cenlar/US?ids=0SN6kU00LiTrLPiFFKA7zP,0pCiGjDzkrJQTkSxIHB2i3,6SUVeB3zqGEtTOlsvJOOzG,3RAUSqd3LKf0YWOfD0iDDY,2e1iDpebGRIOyUPUErIEWF,5oaC7YLScaWDv9IYUWfyMu,0Szr5QqqNwcQfuTXKjZOPa,2vqdj8cCI2mmuWpudUNnaF,0wotPguI1WqCvEuVJ1KBIg,1gMxsMQkfJKiNmlOI5s5OP,2vqdj8cCI2mmuWpudUNnaF,4ef61KJXbO6XyqOgDNmX3A,5sxdJ6wge74N7Tzthj9aek,4NYtgJAUdo6f6xaFQeIPGJ&siteTag=WAG3&onlyActive=true&onlyAvailable=true
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (31590), with no line terminators
Hash bfdcfa200830973730133fd0e699ce5c
73a6a1389743f6491598fb1ff01bfc1cf6270b9d
3d2273c1b45e98b961a89352266f0d617b7769c3ef662379404984ede419567a
GET /api/offers/decisions/cenlar/US?ids=0SN6kU00LiTrLPiFFKA7zP,0pCiGjDzkrJQTkSxIHB2i3,6SUVeB3zqGEtTOlsvJOOzG,3RAUSqd3LKf0YWOfD0iDDY,2e1iDpebGRIOyUPUErIEWF,5oaC7YLScaWDv9IYUWfyMu,0Szr5QqqNwcQfuTXKjZOPa,2vqdj8cCI2mmuWpudUNnaF,0wotPguI1WqCvEuVJ1KBIg,1gMxsMQkfJKiNmlOI5s5OP,2vqdj8cCI2mmuWpudUNnaF,4ef61KJXbO6XyqOgDNmX3A,5sxdJ6wge74N7Tzthj9aek,4NYtgJAUdo6f6xaFQeIPGJ&siteTag=WAG3&onlyActive=true&onlyAvailable=true HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjRjYzkxM2I3NDA0YTU3OWIiLCJ0ciI6Ijk4OWY1YTU5NWM1NzgxN2Y3ZTBjZDhhZjc3MDllMTAwIiwidGkiOjE3MDE2NjA3NjkyNTYsInRrIjoiODg4MzEifX0=
traceparent: 00-989f5a595c57817f7e0cd8af7709e100-4cc913b7404a579b-01
tracestate: 88831@nr=0-1-2647367-1120218725-4cc913b7404a579b----1701660769256
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; sat_domain=A; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:44 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"7b8e-c6ahOJdD9kkVmPsf8Bv8HPYnC50"
expires: Mon, 04 Dec 2023 03:32:43 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbdd9e90b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/L_2vqdj8cCI2mmuWpudUNnaF_1.jpg?w=222&h=160&crop=entropy&fit=crop
16 kB URL g3i.imgix.net/uploads/L_2vqdj8cCI2mmuWpudUNnaF_1.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 0093065ef3c8874e0073b7daae42e421
5408ef9ab62bf4b869308f8828491043d9c86ec4
f7b94a79237d82ad6a51d3c1febb628f03d7429b815a00e57e85fef573356d07
GET /uploads/L_2vqdj8cCI2mmuWpudUNnaF_1.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Nov 2023 16:20:48 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: a6115db4e07ff33ae39dbff7761877f9c8dc0e3f
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1941122
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000101-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 15711
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/uor-1_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop
13 kB URL g3i.imgix.net/uploads/uor-1_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 770ebe33bf9d8ffdf5777fea08bfb305
a67e8da0dfd6919c661193284db8f06b5d7a5ede
2a1e2d6f737042457f456cf11a750b27641dadbacac06eef73352faaff52bb9a
GET /uploads/uor-1_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Oct 2023 08:57:33 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 96c52a8262772ed973e50120b5e3172e85ffe3a6
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 4559717
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000124-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 13295
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/enterpriserentacar-20190827-family-walking.jpg?w=222&h=160&crop=entropy&fit=crop
17 kB URL g3i.imgix.net/uploads/enterpriserentacar-20190827-family-walking.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash d635e0cb91d448a3ece63e51bb38ff7c
83842b7555714dc2009fab8e3bc1f14cb7ac7b8f
b8852dfc6eb5190d12f99aed37f1dd604ec4c6841ee07b35e21f5123e08be51a
GET /uploads/enterpriserentacar-20190827-family-walking.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 08:28:19 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: cf9f4efb2a83dd8a7b2e323a13c83bfdfe2eac25
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1623871
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10034-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 16579
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_0B0tS3WhoJMcPiJq6xroki_2.png?w=222&h=160&crop=entropy&fit=crop
19 kB URL g3i.imgix.net/uploads/L_0B0tS3WhoJMcPiJq6xroki_2.png?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 192eeddd7adb6fdfc927e0a89ac49b5a
b81ebc9c4e55e58f5bb6f84f8536046fea97f8df
bd7bd2056330d3c9cf6f04b276e42327a88f28b4c91b2ea1614fd739488d53e5
GET /uploads/L_0B0tS3WhoJMcPiJq6xroki_2.png?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 14 Nov 2023 15:11:40 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 2ba7f7e8624814127eaf90ed9b9d7518a6158f8d
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1686069
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000114-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 18969
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_0wotPguI1WqCvEuVJ1KBIg_20.jpg?w=222&h=160&crop=entropy&fit=crop
17 kB URL g3i.imgix.net/uploads/L_0wotPguI1WqCvEuVJ1KBIg_20.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 9ad52592ea49d4530d00421f5d9a4243
bfd829aec946d680639e3dc3c528b317e8e5545b
1825e3a0053e2d24de8037c2fa032edb905969c2c70e948f463736d7581dbb87
GET /uploads/L_0wotPguI1WqCvEuVJ1KBIg_20.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Dec 2023 02:21:16 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: f8b6877fcc928e8c441a3da5711b8f0c5f9728a4
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 4294
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10068-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 17060
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/beachesfamilyresorts-20190813-beaches-ocho-rios.jpg?w=222&h=160&crop=entropy&fit=crop
14 kB URL g3i.imgix.net/uploads/beachesfamilyresorts-20190813-beaches-ocho-rios.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 7adb036d2b85fbf0d0009d5bf3c26596
b3c583b76f2f6433e476ee59a8f9940fa75d82e5
d6b6d3cacfc5ca462968853eddf7b4fe4f429bd859c0d391b86818a7ee10d31e
GET /uploads/beachesfamilyresorts-20190813-beaches-ocho-rios.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 14 Nov 2023 12:28:30 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: f22523debd0a336b3de457decdde3ce5de5af428
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1695859
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10054-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 13805
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_1gMxsMQkfJKiNmlOI5s5OP_2.jpg?w=222&h=160&crop=entropy&fit=crop
23 kB URL g3i.imgix.net/uploads/L_1gMxsMQkfJKiNmlOI5s5OP_2.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 4b0fa91852a1dfaf3a664d99c3421a28
f4e15ca6edfc3282f269927d02d99d5ab15906f8
aeff609b20a1490af02b1fa20577808acec73bac2f8aeb6aa0c1f7f35911d410
GET /uploads/L_1gMxsMQkfJKiNmlOI5s5OP_2.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 13 Nov 2023 03:58:01 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: ac271d4002b2f9a6cdc3e85d39faff014c9550f8
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1812889
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000101-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 23144
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_4ef61KJXbO6XyqOgDNmX3A_1.jpg?w=222&h=160&crop=entropy&fit=crop
12 kB URL g3i.imgix.net/uploads/L_4ef61KJXbO6XyqOgDNmX3A_1.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 09d3d72948d7fd2e8a9d0e8ba2d7478e
c52456a04a780cb238ca3f7b51eb265f7f9fb8e2
7371e62b585e2a00c3d72117a9c7b63711a7530399ec46eca6efa5550b23a5f3
GET /uploads/L_4ef61KJXbO6XyqOgDNmX3A_1.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Nov 2023 18:13:42 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: fda24cb19f3db7a5c4db2d828a452b0bc18f1ebc
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1243147
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000132-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 12313
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/abcmouse-20200226.jpg?w=222&h=160&crop=entropy&fit=crop
14 kB URL g3i.imgix.net/uploads/abcmouse-20200226.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 7c8bd8c8b51f4f6901b83e115250f4be
414cc50fae150cd025aed03e903df7076fb121d3
e0c8997623733b4aa47d93c599d5641b4745cf03f57cabbd91aa0be3170e038b
GET /uploads/abcmouse-20200226.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Nov 2023 09:50:01 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: d7d5887dc341295be7dbd994479c4393cef89649
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1964569
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10047-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 13838
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_1BJ9hfXWaW0DNmgOxJHrOy_1.jpg?w=222&h=160&crop=entropy&fit=crop
19 kB URL g3i.imgix.net/uploads/L_1BJ9hfXWaW0DNmgOxJHrOy_1.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 85cbce1e87eebc5a8201db42be40e1ee
eb5c2c15e0e7b24bd319d3959dea87218e109678
7d28f4b57b15071495d76d3d468e7ac155a97ec0084eca39e475c3b9b96b874a
GET /uploads/L_1BJ9hfXWaW0DNmgOxJHrOy_1.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Nov 2023 13:36:23 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 78671e4b7e1078e832f55ac90bc2ae4c5f9fede1
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 2296586
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10079-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 19275
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_7CkPm2W5BjrqLPPdR0B4wr_1.jpg?w=222&h=160&crop=entropy&fit=crop
13 kB URL g3i.imgix.net/uploads/L_7CkPm2W5BjrqLPPdR0B4wr_1.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 34a4d6f69a8e7613815f03597efbf106
d9ba52ca549f90a417ce34c14682a551ea716ec2
91520000bb1dc589b0b2892190f6c308d4f68d994ef548c5694c1e0033e8d3cc
GET /uploads/L_7CkPm2W5BjrqLPPdR0B4wr_1.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Nov 2023 04:23:32 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 93127cd95d3a646cdc27e750450583b31211a2c9
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 2329758
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10022-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 13239
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_0SN6kU00LiTrLPiFFKA7zP_1.jpg?w=222&h=160&crop=entropy&fit=crop
17 kB URL g3i.imgix.net/uploads/L_0SN6kU00LiTrLPiFFKA7zP_1.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash eb6b228f4e6db28ffd1f73df3fa92e5e
48421575cd77b95e6cb57bb834a01c791e1d59f7
aaf14cf356b735c6d029eafa4a881ae4f8a590a2400b12de47e0a763cc5c2d1b
GET /uploads/L_0SN6kU00LiTrLPiFFKA7zP_1.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 03 Nov 2023 08:28:39 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 3346d0e83ff2a8b87f471e381a71d623d4aff46e
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 2660651
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000141-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 16875
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/seaworldnationwide-20180828-dolphin.jpg?w=222&h=160&crop=entropy&fit=crop
11 kB URL g3i.imgix.net/uploads/seaworldnationwide-20180828-dolphin.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 1c49e4b36678422beeb3c4cd6b02d71c
4c156c8112db2f2e70f3d555f101489daa616b55
e4a49c2fa9e5187d114b0deab6fdefad965ad2e24a554aeadf455dc71f532e58
GET /uploads/seaworldnationwide-20180828-dolphin.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 21 Oct 2023 05:29:10 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: e3784bd5dd37bd92829897767c7a2a3ec5efca90
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 3794620
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10066-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 10782
X-Firefox-Spdy: h2
maps.googleapis.com/maps-api-v3/api/js/54/12a/controls.js
24 kB URL maps.googleapis.com/maps-api-v3/api/js/54/12a/controls.js
IP
File type ASCII text, with very long lines (2776)
Hash 3c86f65c49bb7e0c26664dc92840d584
ea5cfb84739ea694925c644ce36055b4416ff6f0
a253b9eeb643d0b7669d8650c934b4764b6f45ad5c08f172b6a6a01a889cc5c0
GET /maps-api-v3/api/js/54/12a/controls.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 23837
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 17:33:55 GMT
expires: Thu, 28 Nov 2024 17:33:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 21:27:26 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 381535
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/54/12a/places_impl.js
16 kB URL maps.googleapis.com/maps-api-v3/api/js/54/12a/places_impl.js
IP
File type ASCII text, with very long lines (3251)
Hash 6db8aaa486234937ba774a5a2dfd24e4
cf37de81348c4cf6ce72481651bddd16a16dbb68
aa6b7123c2b75a4f39b8fc0e9e07012d9c3481e4677b80624eebd73a36c4e7fe
GET /maps-api-v3/api/js/54/12a/places_impl.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 16390
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 18:39:51 GMT
expires: Thu, 28 Nov 2024 18:39:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 21:27:26 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 377579
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
g3i.imgix.net/uploads/orlandoattractions-20200227.jpg?w=222&h=160&crop=entropy&fit=crop
17 kB URL g3i.imgix.net/uploads/orlandoattractions-20200227.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash eeedbb9602716b28b00fbd4fdb6c712d
9747c236a88bec3f026043b41b8f137091a40efe
41e2c8fcaecd9993655310981a2bbd6354722f4783114c3a484358f8657853a9
GET /uploads/orlandoattractions-20200227.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 25 Nov 2023 09:54:43 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 77997dedb81ad1784f82b6b68537c4ef0754d57c
x-imgix-render-farm: 01.139848
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 754686
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10035-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 17226
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_5ades6nkcZwmOxcvQ3G5Yk_2.jpg?w=222&h=160&crop=entropy&fit=crop
13 kB URL g3i.imgix.net/uploads/L_5ades6nkcZwmOxcvQ3G5Yk_2.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash bf5f51446abbe9194f1611c18304b63e
d86baec5d10f2ad9d620f051bd4e332e2fc7adc4
74146b2675046d100bff29b9b0f856bc3a920a0c76eaaec06d796434cb2c3551
GET /uploads/L_5ades6nkcZwmOxcvQ3G5Yk_2.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 08:28:19 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 0f7381ba1f50d5a8160866cbb09a2970471760bf
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1623871
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10034-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 13449
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_0ndh0fgmJK3EASzYXR9mjE_1.jpg?w=222&h=160&crop=entropy&fit=crop
20 kB URL g3i.imgix.net/uploads/L_0ndh0fgmJK3EASzYXR9mjE_1.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 112ed25bc2a9267d6330a94a7c659aaf
9161cdc631d14ceb3ccdae1c1d4165cdc53cbce6
4b2bed61a15d920feff440563f0aed471cb3f0b82cee3b06f3e0acaadea118cf
GET /uploads/L_0ndh0fgmJK3EASzYXR9mjE_1.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 12:28:29 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: aacd45abbb5cd407379a28fa19c3df5d09422abb
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1609461
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10070-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 19746
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/preferredaccessticketsconcerts-20180828-concert.jpg?w=222&h=160&crop=entropy&fit=crop
10 kB URL g3i.imgix.net/uploads/preferredaccessticketsconcerts-20180828-concert.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 22e81b65292de992791bd79786ebe2ae
4e175b667165a47070b4c0a3c62cd69388dde4f3
27269313451912439678a790f59dba8070d850a01ddbab882b5863197ad8ef36
GET /uploads/preferredaccessticketsconcerts-20180828-concert.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 22 Nov 2023 12:46:40 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 3cc68f52db27e3c3c168094978b722500b7e17f1
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1003569
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10077-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 10428
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/go-city_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop
22 kB URL g3i.imgix.net/uploads/go-city_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 7602054881fa4733ca002f96d93fa266
69a8c265cd91f4ae3a676528523dc35f880b8740
c8df4828a4ecb3de6807430af9990317ebff8a9ebd40d960047f766cabe53bd4
GET /uploads/go-city_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 15 Oct 2023 16:22:54 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: ac1c79bf33c33c33ab724de0ad6f12b709aecded
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 4273797
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10033-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 21976
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/offers/decisions/cenlar/US?ids=7CkPm2W5BjrqLPPdR0B4wr,3U8frLzPmUXKbJDETx1RE9,36ZTxDbf56nIS2KUNSGrst,6ys7HOW8PJSXBKcmIUjeoJ,0Qb8tb3POctimk2ZTxbats,53BdyEnHHjmDuJH8ohN9dB,4l7ZzAsfJbuq91HhyYvg6L,0ljppHnyISuI1U9JwEXte5,3tb2kY4WTG82FcqR59i3x5,0wWuEKIIam9aM1hIbvFpQw,6CfZiaO3pH0kp6OFObeAsD,1Z4ijUcERN9i3unkoqfUV0,3LLmIy0w5TzgeKwtjq5ijb,4luqaVV9t4OIvijikAgc1g&siteTag=WAG3&onlyActive=true&isDynamicData=true&onlyAvailable=true
82 kB URL cenlar.savings.workingadvantage.com/api/offers/decisions/cenlar/US?ids=7CkPm2W5BjrqLPPdR0B4wr,3U8frLzPmUXKbJDETx1RE9,36ZTxDbf56nIS2KUNSGrst,6ys7HOW8PJSXBKcmIUjeoJ,0Qb8tb3POctimk2ZTxbats,53BdyEnHHjmDuJH8ohN9dB,4l7ZzAsfJbuq91HhyYvg6L,0ljppHnyISuI1U9JwEXte5,3tb2kY4WTG82FcqR59i3x5,0wWuEKIIam9aM1hIbvFpQw,6CfZiaO3pH0kp6OFObeAsD,1Z4ijUcERN9i3unkoqfUV0,3LLmIy0w5TzgeKwtjq5ijb,4luqaVV9t4OIvijikAgc1g&siteTag=WAG3&onlyActive=true&isDynamicData=true&onlyAvailable=true
IP
File type JSON data\012- , ASCII text, with very long lines (1340), with no line terminators
Hash 81736652e2f51a14771eba9054393eb8
1a61bdb93bcc51bd30233f502e04ff7502485d69
58f19b87241b4da1d7fb40a9c63ba33bc4c7f628fa0f9dd4f6654bb1faf73551
GET /api/offers/decisions/cenlar/US?ids=7CkPm2W5BjrqLPPdR0B4wr,3U8frLzPmUXKbJDETx1RE9,36ZTxDbf56nIS2KUNSGrst,6ys7HOW8PJSXBKcmIUjeoJ,0Qb8tb3POctimk2ZTxbats,53BdyEnHHjmDuJH8ohN9dB,4l7ZzAsfJbuq91HhyYvg6L,0ljppHnyISuI1U9JwEXte5,3tb2kY4WTG82FcqR59i3x5,0wWuEKIIam9aM1hIbvFpQw,6CfZiaO3pH0kp6OFObeAsD,1Z4ijUcERN9i3unkoqfUV0,3LLmIy0w5TzgeKwtjq5ijb,4luqaVV9t4OIvijikAgc1g&siteTag=WAG3&onlyActive=true&isDynamicData=true&onlyAvailable=true HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImY3Nzk1YWQxYjEzNDVlNWEiLCJ0ciI6IjQwZGYxNTk1ZjI5YmQ5NjBhYTAzMmVkNjQ4YmM0MTAwIiwidGkiOjE3MDE2NjA3NjkyNjYsInRrIjoiODg4MzEifX0=
traceparent: 00-40df1595f29bd960aa032ed648bc4100-f7795ad1b1345e5a-01
tracestate: 88831@nr=0-1-2647367-1120218725-f7795ad1b1345e5a----1701660769266
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; sat_domain=A; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:44 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"53c-GmG9uTvMUb0wIz9QLgT/dQJIXWk"
expires: Mon, 04 Dec 2023 03:32:43 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbddae92b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/GH_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop
14 kB URL g3i.imgix.net/uploads/GH_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 7c95ad803624cdd84a7bff46da6c95fe
f8c553014d9dc100f24aa719671ab76d54f74f53
13ba28e4fd8e0e5c64d3be026bc0688449f90ba1914099f885f4a89ae5602837
GET /uploads/GH_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Nov 2023 15:53:40 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 19d4ceb13ddda6f74a2d3b1ad587bd5f619eef8e
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1597150
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000086-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 14296
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/six-flags_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop
20 kB URL g3i.imgix.net/uploads/six-flags_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash f23aa8a97f9405e025dacf22fde6c4ad
dc5ce568cc77dbb1fea9eb7799a7f5519fddecd0
112fe401ddb3433e991b41d15df198e1cbdd43f85e07e5d4d0ec7814e7cb59f3
GET /uploads/six-flags_1320x740.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 18 Nov 2023 05:35:54 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 79ae3bf6f00ab1c5492cd2fbf31e0152c667e0fa
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:50 GMT
age: 1375016
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10074-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 20284
X-Firefox-Spdy: h2
maps.gstatic.com/mapfiles/api-3/images/powered-by-google-on-white3.png
1.6 kB URL maps.gstatic.com/mapfiles/api-3/images/powered-by-google-on-white3.png
IP
File type PNG image data, 120 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash f28a13545ca7be5cd9ea31bdd9ea7f8e
f4f45a59720b9d637b1e7e0ed5783ee84887287f
cd80d0dcb2a44bd30c11fcdf13d4c280f336dad9442ee7da79146f2bb77381a4
GET /mapfiles/api-3/images/powered-by-google-on-white3.png HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 1616
date: Mon, 04 Dec 2023 03:32:50 GMT
expires: Mon, 04 Dec 2023 03:32:50 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png
3.4 kB URL maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png
IP
File type PNG image data, 34 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e9dd969ceb057a228067a1c539127f9
fb2da26959858054157960bb7f8e6c145648eaac
db209390b90b70f4b1ef3540cb581e4ec8edbba21980971b68e4aef5c5d352fb
GET /mapfiles/api-3/images/autocomplete-icons.png HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 3351
date: Mon, 04 Dec 2023 03:32:50 GMT
expires: Mon, 04 Dec 2023 03:32:50 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/seaworld-nationwide-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
3.1 kB URL g3i.imgix.net/uploads/seaworld-nationwide-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type PNG image data, 70 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash d8d97d10e1dd82f34f07912be33fb50e
45076565c27da75e306a71cd9509dfc044b19a44
9510f4318ca4f726a08cf2a17a81df834dd7fa7c0bdbe47f9aee4806653ea5e4
GET /uploads/seaworld-nationwide-logo-square.png?w=70&h=70&fit=fillmax&fill=solid&fill-color=FFFFFF HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 31 Oct 2023 15:37:36 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: d81b67a1b5e03a79d07ebb8e7295a6d21715886d
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:51 GMT
age: 2894115
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10025-SJC, cache-bma1675-BMA
x-cache: HIT, MISS
content-length: 3108
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/zones/search?page=homepage§ion=2&country_last=US&known_user_email=afsoutherlin@cenlar.com
458 B URL cenlar.savings.workingadvantage.com/api/zones/search?page=homepage§ion=2&country_last=US&known_user_email=afsoutherlin@cenlar.com
IP
File type JSON data\012- , ASCII text, with very long lines (1073), with no line terminators
Hash b54ff79fed975832a21889b0d606e86c
bd042c8318848653be3de48554b42c3615263546
237a8297ec89b635f98d8a8bb2c3a813e165e73a1f5b614b313e8d3ecb1ffb52
GET /api/zones/search?page=homepage§ion=2&country_last=US&known_user_email=afsoutherlin@cenlar.com HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6ImYwNDRjYzUwNjU0N2EyM2YiLCJ0ciI6IjE3ZjQ0MTg0ZGFkNzM3Yjg3MWJiZDE3YTI4OGUwMzAwIiwidGkiOjE3MDE2NjA3NzcwMDksInRrIjoiODg4MzEifX0=
traceparent: 00-17f44184dad737b871bbd17a288e0300-f044cc506547a23f-01
tracestate: 88831@nr=0-1-2647367-1120218725-f044cc506547a23f----1701660777009
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:51 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"431-vQQsgxiEhlO+PeSFVLQsNhUmNUY"
expires: Mon, 04 Dec 2023 03:32:50 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fc0e2c06b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
g3i.imgix.net/uploads/L_0FHiSlTHLMkiam3M3PZh1s_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
8.2 kB URL g3i.imgix.net/uploads/L_0FHiSlTHLMkiam3M3PZh1s_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 461829ef14ff19ebfc1f90cfecccbc29
75b1a21f5fe7040e2b93c992ab0a63021ecfd894
0ce8aebb1bab62e8bd0824f7f826a50b9035c3b8ee43e3ab3cd1feaf563f8adb
GET /uploads/L_0FHiSlTHLMkiam3M3PZh1s_1.sm.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 16 Nov 2023 20:32:48 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 652e921f07e8bed5ffb49097981162b1cb7800c9
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:53 GMT
age: 1494005
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 8161
X-Firefox-Spdy: h2
g3i.imgix.net/uploads/L_0FHiSlTHLMkiam3M3PZh1s_1.jpg?w=222&h=160&crop=entropy&fit=crop
11 kB URL g3i.imgix.net/uploads/L_0FHiSlTHLMkiam3M3PZh1s_1.jpg?w=222&h=160&crop=entropy&fit=crop
IP
Certificate IssuerCertainly
Subject*.imgix.net
Fingerprint78:D7:44:3E:7A:6A:98:03:E3:A6:91:C1:20:CA:43:BB:F5:93:F3:CE
ValidityFri, 01 Dec 2023 12:25:47 GMT - Sun, 31 Dec 2023 12:25:46 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 222x160, components 3\012- data
Hash 3134cfa235b0d89dcbae9a875fd3d11d
997acc90b94dac17dc1e78777b34712976b8137b
d8b39315d1156098684250616d7aeceba82f099d42afe19667b1064c8730e670
GET /uploads/L_0FHiSlTHLMkiam3M3PZh1s_1.jpg?w=222&h=160&crop=entropy&fit=crop HTTP/1.1
Host: g3i.imgix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 16 Nov 2023 20:32:48 GMT
cache-control: public, max-age=31536000
server: imgix
x-imgix-id: 2b26cd1c6af32f18e7e956c0dfb91235d4eb11c5
x-imgix-render-farm: 01.140360
date: Mon, 04 Dec 2023 03:32:53 GMT
age: 1494004
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000138-SJC, cache-bma1675-BMA
x-cache: HIT, HIT
content-length: 10992
X-Firefox-Spdy: h2
cenlar.savings.workingadvantage.com/api/zones/search?page=homepage§ion=3&country_last=US&known_user_email=afsoutherlin@cenlar.com
731 B URL cenlar.savings.workingadvantage.com/api/zones/search?page=homepage§ion=3&country_last=US&known_user_email=afsoutherlin@cenlar.com
IP
File type JSON data\012- , ASCII text, with very long lines (2509), with no line terminators
Hash a20eb42faf6ac4a4b7b20fa161f53078
fecb7b63d74b778a5f5cb6f079a7c5d995420e87
453c37bf16d144932ca264faef37501e2bdbd680e0af8e8a954500d2e158626e
GET /api/zones/search?page=homepage§ion=3&country_last=US&known_user_email=afsoutherlin@cenlar.com HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjY1YzgyMDE1MWQyYWZjNTgiLCJ0ciI6ImQxNDVkZDRhMGNlMjNhZGYzNWY0ZmZiNGQ0NWRhZTAwIiwidGkiOjE3MDE2NjA3Nzk1NDEsInRrIjoiODg4MzEifX0=
traceparent: 00-d145dd4a0ce23adf35f4ffb4d45dae00-65c820151d2afc58-01
tracestate: 88831@nr=0-1-2647367-1120218725-65c820151d2afc58----1701660779541
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; split_test_groups={}; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:54 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: http://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"9cd-/st7Y9dLd4pfXLbweafF2ZVCDoc"
expires: Mon, 04 Dec 2023 03:32:53 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fc1de8b2b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/api/dynamic-urls
200 OK 545 B URL POST HTTP/3 cenlar.savings.workingadvantage.com/api/dynamic-urls
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (551), with no line terminators
Hash 9a60fdf09b07724e60782ffa681985e4
f08d227e830038cb3e6ab791dd33b4a7c7c1fada
8e377090ba14080d5df882cba1a425265c2370bb608c4e2125df1b96b8e64fd1
POST /api/dynamic-urls HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI2NDczNjciLCJhcCI6IjExMjAyMTg3MjUiLCJpZCI6IjJkNTUzMzIxMDY3OTk3MTEiLCJ0ciI6IjM0MmUyY2JiYjQxNzQyMTRlNDIzZjQxZWVlOWM1YzAwIiwidGkiOjE3MDE2NjA3Njg2OTksInRrIjoiODg4MzEifX0=
traceparent: 00-342e2cbbb4174214e423f41eee9c5c00-2d55332106799711-01
tracestate: 88831@nr=0-1-2647367-1120218725-2d55332106799711----1701660768699
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYxZTljZjkzYTZiZTBhNTRkNTJhN2JjYyIsInJvbGVzIjpbIm1hcmtldHBsYWNlX2tub3duIl0sIm9yaWdpbmFsX3VzZXJfZ3VpZCI6IjkyOTVzMnR1MXJzOXFsZjVsOGVkbWR4d20iLCJpYXQiOjE3MDE2NjA3NjAsImV4cCI6MTcwMTY2NDM2MH0.Q6Oec2Ry4hRwvrwDJ-bv82ISg1SHrUpdVL1LlS3DlBY
short-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJndWlkIjoiYjBxOXk1OHlieGt6ZmZnNzg4a2dodnA3MiIsImlhdCI6MTcwMTY2MDc2MSwiZXhwIjoxNzAxNjY0MzYxfQ.IkJYQwEqev57bbHdg-9ZKP-QS0whotRdkXf0RjeUQ-4
Content-Type: application/json
Content-Length: 264
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true; split_test_groups={}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:43 GMT
content-type: application/json; charset=utf-8
x-powered-by:
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
vary: Origin
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
etag: W/"221-jgAVtD4LOJKVux1Re+HxTzFcF8M"
expires: Mon, 04 Dec 2023 03:32:42 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbda2d40b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
auth.savings.workingadvantage.com/auth/authorize?subdomain=cenlar&response_type=code&client_id=9ezalirn45mF43imJTdf53&utm_source=email&utm_medium=November-30-2023-mme&utm_campaign=email-mme&utm_content=Ikon%20Pass&redirect_uri=https%3A%2F%2Fcenlar.savings.workingadvantage.com%2Fhome%3Foff_guid%3D0fJajAlDE2gxrIjjeMAHFf%26ebldr_form%3D2.01%26source-id%3Demail%26utm_source%3Demail%26utm_campaign%3Demail-mme%26utm_medium%3DNovember-30-2023-mme%26utm_content%3DIkon%2520Pass
302 Found 8.3 kB URL User Request GET HTTP/3 auth.savings.workingadvantage.com/auth/authorize?subdomain=cenlar&response_type=code&client_id=9ezalirn45mF43imJTdf53&utm_source=email&utm_medium=November-30-2023-mme&utm_campaign=email-mme&utm_content=Ikon%20Pass&redirect_uri=https%3A%2F%2Fcenlar.savings.workingadvantage.com%2Fhome%3Foff_guid%3D0fJajAlDE2gxrIjjeMAHFf%26ebldr_form%3D2.01%26source-id%3Demail%26utm_source%3Demail%26utm_campaign%3Demail-mme%26utm_medium%3DNovember-30-2023-mme%26utm_content%3DIkon%2520Pass
IP
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /auth/authorize?subdomain=cenlar&response_type=code&client_id=9ezalirn45mF43imJTdf53&utm_source=email&utm_medium=November-30-2023-mme&utm_campaign=email-mme&utm_content=Ikon%20Pass&redirect_uri=https%3A%2F%2Fcenlar.savings.workingadvantage.com%2Fhome%3Foff_guid%3D0fJajAlDE2gxrIjjeMAHFf%26ebldr_form%3D2.01%26source-id%3Demail%26utm_source%3Demail%26utm_campaign%3Demail-mme%26utm_medium%3DNovember-30-2023-mme%26utm_content%3DIkon%2520Pass HTTP/1.1
Host: auth.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667964s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660764.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; known_guid=9295s2tu1rs9qlf5l8edmdxwm; user_guid=9295s2tu1rs9qlf5l8edmdxwm; auth_server=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJiMHE5eTU4eWJ4a3pmZmc3ODhrZ2h2cDcyIiwiaWF0IjoxNzAxNjYwNzU4LCJleHAiOjE3MDk0MzY3NTh9.b2J6LTBNStIpJqZvxQAoVkRvMKvaTWBQeoBAiZ_M-j8; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Mon, 04 Dec 2023 03:32:40 GMT
content-type: text/html; charset=utf-8
location: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
x-powered-by:
access-control-allow-origin: http://auth.savings.workingadvantage.com
vary: Origin, Accept
access-control-allow-methods: GET,PUT,POST,PATCH,DELETE,OPTIONS
access-control-allow-headers: Origin, Referer, X-Requested-With, Content-Type, Authorization
expires: Mon, 04 Dec 2023 03:32:39 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=5184000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbc59f79b4f9-OSL
alt-svc: h3=":443"; ma=86400
cenlar.savings.workingadvantage.com/380.7316288900b5ca94.js
200 OK 28 kB URL GET HTTP/3 cenlar.savings.workingadvantage.com/380.7316288900b5ca94.js
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerCloudflare, Inc.
Subjectworkingadvantage.com
FingerprintE1:B3:50:87:CF:77:63:80:7F:9D:81:96:18:E2:FA:4F:AC:2D:A8:B6
ValidityThu, 06 Jul 2023 00:00:00 GMT - Thu, 04 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (27661), with no line terminators
Hash 5f0faeba926e9c77f188703c2d9a3083
dc000218760ecf896ef06c6be29024498459f7fb
6f794e21cb3f8cc8996e9726f992425051c5c6d47411edd1c6f1a4400e218257
GET /380.7316288900b5ca94.js HTTP/1.1
Host: cenlar.savings.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon%20Pass
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667965s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660766.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662624; at_check=true; g3refurl=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; prev_url_v2=https%253A%252F%252Fauth.savings.workingadvantage.com%252Fcenlar%252Fsign-in%253Fresponse_type%253Dcode%2526client_id%253D9ezalirn45mf43imjtdf53%2526utm_source%253Demail%2526utm_medium%253Dnovember-30-2023-mme%2526utm_campaign%253Demail-mme%2526utm_content%253Dikon%252520pass%2526redirect_uri%253Dhttps%253A%25252f%25252fcenlar.savings.workingadvantage.com%25252fhome%25253foff_guid%25253d0fjajalde2gxrijjemahff%252526ebldr_form%25253d2.01%252526source-id%25253demail%252526utm_source%25253demail%252526utm_campaign%25253demail-mme%252526utm_medium%25253dnovember-30-2023-mme%252526utm_content%25253dikon%25252520pass%252526dlk%25253d9295s2tu1rs9qlf5l8edmdxwm; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:32:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 29 Nov 2023 02:18:46 GMT
vary: Accept-Encoding
etag: W/"65669f86-6c0d"
strict-transport-security: max-age=5184000; includeSubDomains
x-frame-options: DENY
content-security-policy: frame-src *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com 'unsafe-inline' 'unsafe-eval', frame-ancestors 'self' *.beneplace.com:* *.workingadvantage.com:* *.ebgsolutions.com:* *.demdex.net:* *.everesttech.net:* *.adobedtm.com *.sc.omtrdc.net *.omtrdc.net *.qualtrics.com *.adobe.com *.keen.io *.youtube.com *.kaltura.com *.libertymutual.com
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8300fbd1dab3b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
smetrics.workingadvantage.com/b/ss/entbenwag3/1/JS-2.22.4-LDQM/s12365513554397
200 OK 43 B URL POST HTTP/2 smetrics.workingadvantage.com/b/ss/entbenwag3/1/JS-2.22.4-LDQM/s12365513554397
IP
Requested by https://cenlar.savings.workingadvantage.com/home?off_guid=0fJajAlDE2gxrIjjeMAHFf&ebldr_form=2.01&source-id=email&utm_source=email&utm_campaign=email-mme&utm_medium=November-30-2023-mme&utm_content=Ikon+Pass#grant_type=authorization_code&code=2mPgxnQbioibKRp3zMJuPf&subdomain=cenlar&client_id=9ezalirn45mF43imJTdf53&user_guid=9295s2tu1rs9qlf5l8edmdxwm&token_refreshed=true
Certificate IssuerDigiCert Inc
Subjectsmetrics.workingadvantage.com
FingerprintBF:39:6F:26:01:A5:E2:6D:81:D9:EB:97:B2:50:D2:2D:2F:2D:48:43
ValiditySun, 09 Jul 2023 00:00:00 GMT - Thu, 08 Aug 2024 23:59:59 GMT
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
POST /b/ss/entbenwag3/1/JS-2.22.4-LDQM/s12365513554397 HTTP/1.1
Host: smetrics.workingadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2578
Origin: https://cenlar.savings.workingadvantage.com
DNT: 1
Connection: keep-alive
Referer: https://cenlar.savings.workingadvantage.com/
Cookie: __cf_bm=.7HRcqmJ79ZUwIDvHf_fbnLWOye_OcsuAOcEhql8WWI-1701660754-0-Aa8cZ+c7jGvgi91P8BD7QMuBBNEYO0ftqg+VafzR01RPxFraxu91WodkgUk+xBnkC2w00SeYGbkNEUC3P/KfXzI=; AMCV_B5F9FF2554F608410A4C98C6%40AdobeOrg=1176715910%7CMCIDTS%7C19696%7CMCMID%7C87406785582412627189193456302916429419%7CMCAID%7CNONE%7CMCOPTOUT-1701667969s%7CNONE%7CvVersion%7C5.4.0; _ga_FD2X5ZMELR=GS1.1.1701660760.1.1.1701660768.0.0.0; _ga=GA1.1.867582582.1701660761; s_ecid=MCMID%7C87406785582412627189193456302916429419; AMCVS_B5F9FF2554F608410A4C98C6%40AdobeOrg=1; btIdentify=c1080d87-9941-48e5-9919-6b4af33015cd; _bti=%7B%22bsin%22%3A%22%22%7D; _bts=9dcf1b9e-2328-44f3-aee5-b0efe2ceb23a; _gcl_au=1.1.897759762.1701660761; cf_clearance=MVnmJi94NlQSS6YkQ.C5G1PWimhJ7sB18.2UHq3_jRM-1701660755-0-1-730ca2d2.73a07051.5b213570-0.2.1701660755; mbox=session#d3c36933bbc14c7d974bf997af6ee582#1701662630; at_check=true; g3refurl=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; prev_url_v2=https%253A%252F%252Fcenlar.savings.workingadvantage.com%252Fhome%253Foff_guid%253D0fjajalde2gxrijjemahff%2526ebldr_form%253D2.01%2526source-id%253Demail%2526utm_source%253Demail%2526utm_campaign%253Demail-mme%2526utm_medium%253Dnovember-30-2023-mme%2526utm_content%253Dikon%252520pass; s_cc=true; sat_domain=A; tnt_guid=9295s2tu1rs9qlf5l8edmdxwm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://cenlar.savings.workingadvantage.com
access-control-allow-credentials: true
date: Mon, 04 Dec 2023 03:32:43 GMT
expires: Sun, 03 Dec 2023 03:32:43 GMT
last-modified: Tue, 05 Dec 2023 03:32:43 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C87406785582412627189193456302916429419; Path=/; Domain=workingadvantage.com; Max-Age=157680000; Expires=Sat, 02 Dec 2028 03:32:32 GMT;
etag: 3654288664985108480-4617757994201850677
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
172.64.148.145
104.17.25.14
151.101.86.208
23.38.200.237
0.0.0.0