| Source: global traffic | HTTP traffic detected: GET /85SPX7/38S7Z6D/?sub1=41|811|iuk7x|14426|00248|32&sub2=811 HTTP/1.1Host: www.urdreamlf.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /aff_c?offer_id=752&aff_id=1862&aff_sub=ch-tcscar&aff_click_id=10854db22d0447c88a7b6c105ea2558a&aff_sub2=158 HTTP/1.1Host: t4.linkloot.suConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET / HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/homepage-pingzhu-hero-figures-v2-opt__1___3_-7b4c25bcca074a531f74bbda530f87df.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1144&q=60&s=836be6559cd196584842ffcc07ab7d41 HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /fonts/xv/fs-kim-text-w03-medium.woff2 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /fonts/xv/inter-bold.woff2 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons/chevron-down.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/logo/expressvpn-logo-red.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /fonts/xv/inter-regular.woff2 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /fonts/xv/inter-medium.woff2 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /fonts/xv/inter-semibold.woff2 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/30-days-risk-free-calendar-009c4a801dfedc86aef59ea90d9c2820.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=d3d05b024cb685f046cb98827a7069ab HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/homepage-pingzhu-hero-bg-opt-v2-3ce3022343c7ad918545a6a2e01f36b5.jpg?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=5b51197c7eb8a0fe25a50a76b2cbf643 HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /assets/edsv2/icons-white/arrow-f48b2debeef04c37595b578883f4b6a1064c0d13edd1a85a5b93d368e81001e3.svg HTTP/1.1Host: xvp.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /dist/js/frontend/xv/script.js?v=13800 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/homepage-pingzhu-hero-figures-v2-opt__1___3_-7b4c25bcca074a531f74bbda530f87df.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1144&q=60&s=836be6559cd196584842ffcc07ab7d41 HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/30-days-risk-free-calendar-009c4a801dfedc86aef59ea90d9c2820.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=d3d05b024cb685f046cb98827a7069ab HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/homepage-pingzhu-hero-bg-opt-v2-3ce3022343c7ad918545a6a2e01f36b5.jpg?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=5b51197c7eb8a0fe25a50a76b2cbf643 HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /assets/edsv2/icons-white/arrow-f48b2debeef04c37595b578883f4b6a1064c0d13edd1a85a5b93d368e81001e3.svg HTTP/1.1Host: xvp.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /dist/fonts/inter-regular-Bp3WE63D.woff2 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons/chevron-down.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/logo/expressvpn-logo-red.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/what-is-vpn-3f43cae5402b02ff3e7ea55b08199df4.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=07ce5e6a356848406b2a9d4231854ab8 HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/home-location-2e19cb1208747abf80388e0b2116a136.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=b835706a19e4967091a6840967c576a7 HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/serious-security-4a466e256a43ce031b3e0ebb0a1dbe28.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=3d46da348033d72576d1cd5fd8ee4f58 HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/24-7-support-0d16453876d183a4825227d5f4222ab9.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=1bcdfbccb834f9645ac953934ff30d1d HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/what-is-vpn-3f43cae5402b02ff3e7ea55b08199df4.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=07ce5e6a356848406b2a9d4231854ab8 HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-mint-20/globe.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons/globe.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/partytown/partytown-sw.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveCache-Control: max-age=0Accept: */*Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.expressvpn.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; locale=; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_session=RudderEncrypt%3AU2FsdGVkX18fKvB%2BxtlxdRzQifzrR7EbFmpgh8LoTIdWAqivIX1neY1nSbPLvFTDs%2BKTplN6OQRnDsq5m5LOPzgSNjbEP8n8fXnj99%2FE7PnU1K9m%2FTDYbI0F%2FGY8ID4lWoBwfE2d0gOaAcdOeDtaJg%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D |
| Source: global traffic | HTTP traffic detected: GET /dist/js/frontend/xv/script.js?v=13800 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/home-location-2e19cb1208747abf80388e0b2116a136.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=b835706a19e4967091a6840967c576a7 HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/24-7-support-0d16453876d183a4825227d5f4222ab9.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=1bcdfbccb834f9645ac953934ff30d1d HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/serious-security-4a466e256a43ce031b3e0ebb0a1dbe28.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=3d46da348033d72576d1cd5fd8ee4f58 HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/trustedserver-technology-69fce0e6a296c3390d039cc49798f905.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=5818faacfc8268a891747e5ee1b0f96d HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/blazing-fast-speeds-4a595e4fa47d35feb138985b25bba633.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=302cd9a41c64c0b3a2f3dfe24b5e79f0 HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/every-platform__1_-7363212772e97582b918fa7e805e07f6.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=4821890a3a86cfc10f841f73550142b5 HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/connect-5-locations-at-once_blue_-54b5aa65e305214e1788410819b67aa4.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=cc93224d8eadf22a7c304ea415e2bb33 HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/no-logs-ec4b657093fb67a70037e670d5eb41ad.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=d4fe0c50c46c9dde173485440b71b68f HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/worlds--1-premium-vpn-8974969c2f1a28624aa69145616c76f5.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=3620c79791ba18a503d57f96c6296af7 HTTP/1.1Host: xv.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-mint-20/globe.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons/globe.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/public/thfc-expressvpn-badge.svg?v=13800 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-mint-20/chevron-up.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /sourceConfig/?p=npm&v=2.44.0&writeKey=2jeWN64TkU1oR51sP0PcD3srrY6 HTTP/1.1Host: api.rudderstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0Authorization: Basic MmplV042NFRrVTFvUjUxc1AwUGNEM3Nyclk2Og==User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.expressvpn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xvpn/meta/favicon/site.webmanifest?v=13800 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.expressvpn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /dist/css/xv/app-073ab32735486e55-13800.css?v=13800 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/no-logs-ec4b657093fb67a70037e670d5eb41ad.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=d4fe0c50c46c9dde173485440b71b68f HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/blazing-fast-speeds-4a595e4fa47d35feb138985b25bba633.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=302cd9a41c64c0b3a2f3dfe24b5e79f0 HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/trustedserver-technology-69fce0e6a296c3390d039cc49798f905.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=5818faacfc8268a891747e5ee1b0f96d HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/every-platform__1_-7363212772e97582b918fa7e805e07f6.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=4821890a3a86cfc10f841f73550142b5 HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/connect-5-locations-at-once_blue_-54b5aa65e305214e1788410819b67aa4.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=cc93224d8eadf22a7c304ea415e2bb33 HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /photos/xv/worlds--1-premium-vpn-8974969c2f1a28624aa69145616c76f5.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1920&q=60&s=3620c79791ba18a503d57f96c6296af7 HTTP/1.1Host: xv.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/partytown/partytown-sw.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveCache-Control: max-age=0Accept: */*Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.expressvpn.com/frtr/assets/js/partytown/partytown-sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; locale=; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_session=RudderEncrypt%3AU2FsdGVkX18fKvB%2BxtlxdRzQifzrR7EbFmpgh8LoTIdWAqivIX1neY1nSbPLvFTDs%2BKTplN6OQRnDsq5m5LOPzgSNjbEP8n8fXnj99%2FE7PnU1K9m%2FTDYbI0F%2FGY8ID4lWoBwfE2d0gOaAcdOeDtaJg%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3DIf-None-Match: "62b432e7368291d1f10f9139484544d8"If-Modified-Since: Tue, 10 Dec 2024 12:42:00 GMT |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-mint-20/chevron-up.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/public/thfc-expressvpn-badge.svg?v=13800 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /sourceConfig/?p=npm&v=2.44.0&writeKey=2jeWN64TkU1oR51sP0PcD3srrY6 HTTP/1.1Host: api.rudderstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /order HTTP/1.1Host: www.expressvpn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; locale=; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; rl_session=RudderEncrypt%3AU2FsdGVkX19tBCLdzLO%2Bm5o5%2FuFy4pTuBLsG0Hszu9kwud4YB2An50I2Xka0w9wgFpLyLr4jzoJ7CeduoP2dkcAgibb1ml%2FAHDodlv5olCGIX9YZQpu0b8DVtridW15qOkvX7dD8%2BCAzI5JXX8ERXQ%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/flags/sprite-96px.png HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /dist/fonts/inter-medium-CRbKRXbd.woff2 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /dist/fonts/inter-semibold-L_j_8Kaf.woff2 HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /map-55268416cd7ee847a41939f31605e2fa9977e841.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1440&q=60 HTTP/1.1Host: xvdrop.imgix.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/alooma-latest.min.js HTTP/1.1Host: www.expressvpn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; locale=; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; rl_session=RudderEncrypt%3AU2FsdGVkX19tBCLdzLO%2Bm5o5%2FuFy4pTuBLsG0Hszu9kwud4YB2An50I2Xka0w9wgFpLyLr4jzoJ7CeduoP2dkcAgibb1ml%2FAHDodlv5olCGIX9YZQpu0b8DVtridW15qOkvX7dD8%2BCAzI5JXX8ERXQ%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /v1/track HTTP/1.1Host: kape.dataplane.rudderstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/with-or-without-vpn/vpn-bg-off_animated.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /map-55268416cd7ee847a41939f31605e2fa9977e841.png?auto=format%2Ccompress&cs=srgb&fit=max&w=1440&q=60 HTTP/1.1Host: xvdrop.imgix.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/with-or-without-vpn/vpn-bg-loading.png HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/with-or-without-vpn/vpn-bg-on.png HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/globe.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/globe.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /v1/track HTTP/1.1Host: kape.dataplane.rudderstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/flags/sprite-96px.png HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/youtube.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /lib/745385.js HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/astyles.min.js HTTP/1.1Host: www.expressvpn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; rl_session=RudderEncrypt%3AU2FsdGVkX19tBCLdzLO%2Bm5o5%2FuFy4pTuBLsG0Hszu9kwud4YB2An50I2Xka0w9wgFpLyLr4jzoJ7CeduoP2dkcAgibb1ml%2FAHDodlv5olCGIX9YZQpu0b8DVtridW15qOkvX7dD8%2BCAzI5JXX8ERXQ%3D%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/people.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/play.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/youtube.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/with-or-without-vpn/vpn-bg-off_animated.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/alooma-latest.min.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; rl_session=RudderEncrypt%3AU2FsdGVkX19tBCLdzLO%2Bm5o5%2FuFy4pTuBLsG0Hszu9kwud4YB2An50I2Xka0w9wgFpLyLr4jzoJ7CeduoP2dkcAgibb1ml%2FAHDodlv5olCGIX9YZQpu0b8DVtridW15qOkvX7dD8%2BCAzI5JXX8ERXQ%3D%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/linkedin.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/with-or-without-vpn/vpn-bg-on.png HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/linkedin.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/globe.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/twitter.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/with-or-without-vpn/vpn-bg-loading.png HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/twitter.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/globe.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/facebook.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /cdn/edrv/worker-fbd260c338144b688ce802fceae7a1f6gz.js HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /gv.gif?a=745385&uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611&u=https%3A%2F%2Fwww.expressvpn.com%2Forder HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /lib/745385.js HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/youtube.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/play_orange.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/more_than_vpn.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/folder.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/webpack-5a0531fc30b1e18e.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/fonts/inter-semibold.woff HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/fonts/fs-kim-text-w03-medium.woff HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/fonts/inter-regular.woff HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/fonts/inter-bold.woff HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.expressvpn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/astyles.min.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; rl_session=RudderEncrypt%3AU2FsdGVkX19tBCLdzLO%2Bm5o5%2FuFy4pTuBLsG0Hszu9kwud4YB2An50I2Xka0w9wgFpLyLr4jzoJ7CeduoP2dkcAgibb1ml%2FAHDodlv5olCGIX9YZQpu0b8DVtridW15qOkvX7dD8%2BCAzI5JXX8ERXQ%3D%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_sn=0%3A1%3A%3A%3A1 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/facebook.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/youtube.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/play.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /gv.gif?a=745385&uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611&u=https%3A%2F%2Fwww.expressvpn.com%2Forder HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/instagram.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/instagram.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prod-assets-cms.mtech.xvservice.net/dist/css/xv/app-073ab32735486e55-13800.css?v=13800Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/linkedin.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/linkedin.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/twitter.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/twitter.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /cdn/edrv/worker-fbd260c338144b688ce802fceae7a1f6gz.js HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/facebook.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /order-addons-trial HTTP/1.1Host: www.expressvpn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; rl_session=RudderEncrypt%3AU2FsdGVkX19tBCLdzLO%2Bm5o5%2FuFy4pTuBLsG0Hszu9kwud4YB2An50I2Xka0w9wgFpLyLr4jzoJ7CeduoP2dkcAgibb1ml%2FAHDodlv5olCGIX9YZQpu0b8DVtridW15qOkvX7dD8%2BCAzI5JXX8ERXQ%3D%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_sn=0%3A1%3A%3A%3A1; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_referrer=https%3A%2F%2Fwww.expressvpn.com%2F |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/play_orange.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/more_than_vpn.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/folder.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /s.gif?account_id=745385&u=DF42FB3AE2DB1C7AD5D088F6E9C963611&s=1734517764&ed=%7B%22sr%22%3A%221280x1024%22%2C%22sc%22%3A24%2C%22de%22%3A%22UTF-8%22%2C%22ul%22%3A%22en-us%22%2C%22r%22%3A%22https%253A%252F%252Fwww.expressvpn.com%252F%22%2C%22lt%22%3A1734517765174%2C%22tO%22%3A5%2C%22tz%22%3A%22America%2FNew_York%22%7D&cu=https%3A%2F%2Fwww.expressvpn.com%2Forder&r=0&p=1&cq=0&eTime=1734517764207&v=88fdba0f8&_ru=https%3A%2F%2Fwww.expressvpn.com%2F HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /v.gif?cd=0&a=745385&d=expressvpn.com&u=DF42FB3AE2DB1C7AD5D088F6E9C963611&h=8fe88b347f56a93190032caddcb18392 HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/facebook.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/devices.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/operating_systems.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/mbg.png HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/wallstreetjournal_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/cnet_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/vox_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/orderAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/people.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-neon/instagram.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /img/frontend/xv/edsv2/icons-white/instagram.svg HTTP/1.1Host: prod-assets-cms.mtech.xvservice.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /lib/745385.js HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: W/"1734435588_EA"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /s.gif?account_id=745385&u=DF42FB3AE2DB1C7AD5D088F6E9C963611&s=1734517764&ed=%7B%22sr%22%3A%221280x1024%22%2C%22sc%22%3A24%2C%22de%22%3A%22UTF-8%22%2C%22ul%22%3A%22en-us%22%2C%22r%22%3A%22https%253A%252F%252Fwww.expressvpn.com%252F%22%2C%22lt%22%3A1734517765174%2C%22tO%22%3A5%2C%22tz%22%3A%22America%2FNew_York%22%7D&cu=https%3A%2F%2Fwww.expressvpn.com%2Forder&r=0&p=1&cq=0&eTime=1734517764207&v=88fdba0f8&_ru=https%3A%2F%2Fwww.expressvpn.com%2F HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /v.gif?cd=0&a=745385&d=expressvpn.com&u=DF42FB3AE2DB1C7AD5D088F6E9C963611&h=8fe88b347f56a93190032caddcb18392 HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /gv.gif?a=745385&uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611&u=https%3A%2F%2Fwww.expressvpn.com%2Forder-addons-trial HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/seven_day_free_trial.png HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/webpack-5a0531fc30b1e18e.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/framework-0ca3bf472754a245.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/main-83530a325fa446a1.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/pages/_app-5bcc9491e5ce8382.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/f3973817-fcf8b7800927ad20.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /gv.gif?a=745385&uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611&u=https%3A%2F%2Fwww.expressvpn.com%2Forder-addons-trial HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/7ede4f97-339095092c36ae28.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/webpack-5a0531fc30b1e18e.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/seven_day_free_trial.png HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/366-dd5677d9d17a39a1.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/main-83530a325fa446a1.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/274-7f81c667a3fe232d.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/pages/order-addons-trial-8c5b255a376b9818.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/framework-0ca3bf472754a245.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/pages/_app-5bcc9491e5ce8382.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/hK1hAbgmCyISBcdH-QQOU/_buildManifest.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/f3973817-fcf8b7800927ad20.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /api/4507208945041408/envelope/?sentry_key=8775032e43a204470092766d74afac50&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.113.0 HTTP/1.1Host: o137163.ingest.us.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/hK1hAbgmCyISBcdH-QQOU/_ssgManifest.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/devices.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/7ede4f97-339095092c36ae28.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/operating_systems.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/hK1hAbgmCyISBcdH-QQOU/_buildManifest.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/mbg.png HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/pages/order-addons-trial-8c5b255a376b9818.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /cdn/edrv/nc-7ac98b33e462e1f39b5f2157873f659egz.js HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.expressvpn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/wallstreetjournal_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/366-dd5677d9d17a39a1.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/cnet_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/hK1hAbgmCyISBcdH-QQOU/_ssgManifest.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/vox_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/274-7f81c667a3fe232d.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/devices.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/mbg.png HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/page-lower-section/operating_systems.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /cdn/edrv/nc-7ac98b33e462e1f39b5f2157873f659egz.js HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /order/api/page-view HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; rl_session=RudderEncrypt%3AU2FsdGVkX19tBCLdzLO%2Bm5o5%2FuFy4pTuBLsG0Hszu9kwud4YB2An50I2Xka0w9wgFpLyLr4jzoJ7CeduoP2dkcAgibb1ml%2FAHDodlv5olCGIX9YZQpu0b8DVtridW15qOkvX7dD8%2BCAzI5JXX8ERXQ%3D%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/techcrunch_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/financialtimes_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/bbc_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/partytown/partytown-sw.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveCache-Control: max-age=0Accept: */*Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.expressvpn.com/frtr/assets/js/partytown/partytown-sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_user_id=RudderEncrypt%3AU2FsdGVkX180wlmrkJaIjp7UmTpr%2FjuxYqAgZizZe9M%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2Fkt2AsAeeseTAtc9XY6NMTJScWp%2B9RXOE%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18rjsl0lbVfIlT3zAtzvyUEfbFlLdNDJQU%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18Z0JUcshYRa7jEJSj7S0Q25Cphj%2Bldwcw%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX19UDpRh2NHRd910l8YuZRq2PbawoD3ngeg7e19htmLqsmOwRhTfD0tfuFnJIRW2ju33mUXcCVhcoA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; rl_session=RudderEncrypt%3AU2FsdGVkX19tBCLdzLO%2Bm5o5%2FuFy4pTuBLsG0Hszu9kwud4YB2An50I2Xka0w9wgFpLyLr4jzoJ7CeduoP2dkcAgibb1ml%2FAHDodlv5olCGIX9YZQpu0b8DVtridW15qOkvX7dD8%2BCAzI5JXX8ERXQ%3D%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3If-None-Match: "62b432e7368291d1f10f9139484544d8"If-Modified-Since: Tue, 10 Dec 2024 12:42:00 GMT |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/thfc-expressvpn-badge.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/wallstreetjournal_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/674.853283cf9b12ca1f.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/cnet_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/vox_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/techcrunch_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/financialtimes_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/press-logos/bbc_dark.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/css/astyle.css?xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%253D%253D&referer_url=https%3A%2F%2Fwww.expressvpn.com%2Forder&page_url=https%3A%2F%2Fwww.expressvpn.com%2Forder-addons-trial HTTP/1.1Host: www.expressvpn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/public/assets/images/thfc-expressvpn-badge.svg HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.expressvpn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /frtr/api/v1/proxy?url=https%3A%2F%2Fwww.google-analytics.com%2Fanalytics.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/alooma-init.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /onecheckout-xv/_next/static/chunks/674.853283cf9b12ca1f.js HTTP/1.1Host: d11yo1c5wicomn.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /dcdn/settings.js?a=745385&settings_type=5&ts=1734435588&dt=desktop&cc=US HTTP/1.1Host: dev.visualwebsiteoptimizer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /order-addons-trial-checkout?offer=regular_offer_vpn_with_array_v3.0_post_bfcm_with_trial_28m-qV4Gnq1ut0 HTTP/1.1Host: www.expressvpn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/usercentrics.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /sourceConfig/?p=npm&v=2.48.26&writeKey=2jeWN64TkU1oR51sP0PcD3srrY6 HTTP/1.1Host: api.rudderstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0Authorization: Basic MmplV042NFRrVTFvUjUxc1AwUGNEM3Nyclk2Og==User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.expressvpn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.expressvpn.com/order-addons-trialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /frtr/api/v1/proxy?url=https%3A%2F%2Fwww.google-analytics.com%2Fanalytics.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /frtr/api/v1/proxy?url=https%3A%2F%2Fyqdyj.rttrk.com%2Funiclick.js%3Fattribution%3Dlastpaid%26cookiedomain%3Dexpressvpn.com%26cookieduration%3D90%26defaultcampaignid%3D67442fb81a150f8a4a47a316%26regviewonce%3Dfalse HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /api/v1/emit-event HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /frtr/assets/js/alooma-init.js HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeMm%2FnDKA00UF4rp3Rft8EJ6IOV4qD3w%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18%2FnKt0pignPsaND6E9%2FirI%2FAGKA85Df0c%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX198tNKWrij8yh8iiWnLBkUCFbHiTsVRhQk%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX180QvdDeVZLcNGyMQY41%2F%2FWsJYhfGbvAJuHHpOvGJ8h2icJm8F1q0QmLPItlnrE6mCDkrRhJN7nmw%3D%3D |
| Source: global traffic | HTTP traffic detected: GET /jssdk/track/?data=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%3D&ip=1&_=1734517790143 HTTP/1.1Host: www.expressvpn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xvid=aPs0ghwEOQ8hPA9HvJsjoE-59Ql4PuoURPA2fC-0v29rAOVN6BLY7w%3D%3D; landing_page=https://www.expressvpn.com/; xvsrcdirect=1; xvgtm=%7B%22logged_in%22%3Afalse%7D; xv_lp=homepage; xv_campaign=default_campaign; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX1%2BbMKdEpsZcC8ZPU5uN9xTT4tJ8tteOw%2F8%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BddeET2h%2FImpqblhePFUWIIrQuwgP7IHk%3D; page_type=OC; locale=en; xvsrcwebsite=www.expressvpn.com; _vwo_uuid=DF42FB3AE2DB1C7AD5D088F6E9C963611; _vwo_ds=3%241734517764%3A81.52374705%3A%3A; _vwo_uuid_v2=DF42FB3AE2DB1C7AD5D088F6E9C963611|8fe88b347f56a93190032caddcb18392; _vis_opt_s=1%7C; _vis_opt_test_cookie=1; _vis_opt_exp_185_split=3; _vwo_sn=0%3A2%3A%3A%3A1; _vis_opt_exp_185_combi=3; xv_exp=[Prod]%207DFT%20Organic+Direct%20-%20US%20only|variations=Variation-2; rl_session=RudderEncrypt%3AU2FsdGVkX19wH%2BmZS4mtkkhqxRSyCxOP6NPv2uzhnCsHf7QPCS2ejw9zN4O4XYgIDC9eFrhIpI6AEdP4XTOdvVBFT%2BveNoclFacyqQP6z%2BPzF4uJiXwn6Z2NkpZo%2FIfF4hQLno5Kw9%2FjUYkghlK0eQ%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX18%2BlsifOF56svQiNqeu4j%2BkS1iloE7%2FwRs%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2BIeM |
Edit tour
chrome.exe (PID: 3752 cmdline: 
