firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 08:53:36 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rVDmH1VM45Q2IL5KPUCvlnnMDfuUOaWjB7scNr-kuyi0vIaWR08DEg==
Age: 3537
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9406
Expires: Tue, 27 Sep 2022 12:29:19 GMT
Date: Tue, 27 Sep 2022 09:52:33 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nhkOGj6U7vx0-bWAs_bHRKjNL1SU1P5-xvN6op4SJSn5OJVDr__MpA==
age: 1700
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 09:52:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 27 Sep 2022 09:10:46 GMT
Expires: Tue, 27 Sep 2022 09:38:42 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LcSbFVqnjzXhE-aFggofYIqfi-nH7eEou6XPIZy-SOinUOVLBOD_Ng==
Age: 2508
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4459
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:34 GMT
Last-Modified: Tue, 27 Sep 2022 08:38:15 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash ed2e244851a976fea15ad3b7c390ffdd
22f2c312ef134ec95ebdc940e2c99e9d5230cafb
be0b5ec334ac4e8ff3d30723207b61c9fe397810ae09fadd421cbe94e4c53844
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5930
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:34 GMT
Last-Modified: Tue, 27 Sep 2022 08:13:44 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.9.js?utv=ut4.48.202207190010
23.38.200.249200 OK 2.3 kB URL HTTP/2 tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.9.js?utv=ut4.48.202207190010
IP 23.38.200.249:0
File type ASCII text, with very long lines (1687)
Hash 1fcbc217d808f4d5768b28decfa82f67
41f333d97d207cc4838f938d4f0ddb848fbbc6c3
528892a53f29312c126ce5fbebe2a637bf0b1ad8061e922497b70954716ba934
GET /utag/mtbank/olb-legacy/prod/utag.9.js?utv=ut4.48.202207190010 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "810e03934b3c10d7c8dec1a74ad420aa:1662399491.418422"
last-modified: Mon, 05 Sep 2022 17:38:11 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Wed, 12 Oct 2022 09:52:34 GMT
date: Tue, 27 Sep 2022 09:52:34 GMT
content-length: 2309
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.8.js?utv=ut4.48.202111012113
23.38.200.249200 OK 3.5 kB URL HTTP/2 tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.8.js?utv=ut4.48.202111012113
IP 23.38.200.249:0
File type ASCII text, with very long lines (1579)
Hash f51f6472c0b3773d744257799dc5a808
5da9efcd4dcb1e9a2cdae9d56dbd04a60dfdfb66
d9487b13d7808c0b581a79cb6f953b7f4b0ac128cdf545d5a2074575f22d3930
GET /utag/mtbank/olb-legacy/prod/utag.8.js?utv=ut4.48.202111012113 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "55e2dafd4e2f01e1da100818637f6e46:1635801208.490581"
last-modified: Mon, 01 Nov 2021 21:13:28 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Wed, 12 Oct 2022 09:52:34 GMT
date: Tue, 27 Sep 2022 09:52:34 GMT
content-length: 3522
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.1.js?utv=ut4.48.202103120408
23.38.200.249200 OK 22 kB URL HTTP/2 tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.1.js?utv=ut4.48.202103120408
IP 23.38.200.249:0
File type ASCII text, with very long lines (11428)
Hash 7c434a02f5c8030b8db5fcf731ed7888
48823e97d85fb8649287e2d924eb81964f1b23a6
ccd002ef76b2127737081d3414c80b245f8c8f9a1792ad53900bc522c9dd0b11
GET /utag/mtbank/olb-legacy/prod/utag.1.js?utv=ut4.48.202103120408 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "65f0adaaf89b2c30ed0eef3dbd1e8105:1662399491.158223"
last-modified: Mon, 05 Sep 2022 17:38:11 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Wed, 12 Oct 2022 09:52:34 GMT
date: Tue, 27 Sep 2022 09:52:34 GMT
content-length: 22296
X-Firefox-Spdy: h2
business4alltech.com/wp-content/uploads/2022/08/mtbank/auth.php?cmd=signon_submit&id=0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&session=0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff
207.244.251.248200 OK 20 kB URL HTTP/1.1 business4alltech.com/wp-content/uploads/2022/08/mtbank/auth.php?cmd=signon_submit&id=0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&session=0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff
IP 207.244.251.248:0
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (9275), with CRLF line terminators
Hash 2722abe83b9b5832bd6cb72f210dc827
82e634b26c947f15f08cc9ceb8b6200264279287
a1bf8a17311684839a29b36d7386bbeec1119e2f83662f7eb79906bf31af6434
Analyzer Verdict Alert openphish M & T Bank Coporation
GET /wp-content/uploads/2022/08/mtbank/auth.php?cmd=signon_submit&id=0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&session=0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff HTTP/1.1
Host: business4alltech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 09:52:33 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.googletagmanager.com/gtag/js?id=AW-990489911
142.250.74.72200 OK 47 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-990489911
IP 142.250.74.72:0
File type ASCII text, with very long lines (1720)
Hash 67c775d4c6063ed59409d090407cefd2
b1282baef724a36550e52aaea57b180a73604964
4b38469554b55bce77fffd033c6af43ad98e3c8190bb34d87e60e1dcae81cfe9
GET /gtag/js?id=AW-990489911 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 09:52:34 GMT
expires: Tue, 27 Sep 2022 09:52:34 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46609
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
52.42.74.230101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.42.74.230:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MlQo66PTFEplYF65VxGW+Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: q1FRSYDzE4qddvuGd3m9l2mzamE=
tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js
23.38.200.249200 OK 33 kB URL HTTP/2 tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js
IP 23.38.200.249:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (11428)
Hash 00ea03b7bd72d30aea8ef9f81725f038
6b7c029ae2e16cc7e92d5f1366a90b942d661cd4
77c885c08aebc8d8080b12f97ea5fa719ef4c57e8ff723fe6fa5582dfa2c5868
GET /utag/mtbank/olb-legacy/prod/utag.js HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "4e9cf25064003bbb26b1409333c6cc7b:1663204422.838639"
last-modified: Thu, 15 Sep 2022 01:13:43 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Tue, 27 Sep 2022 09:57:35 GMT
date: Tue, 27 Sep 2022 09:52:35 GMT
content-length: 32838
X-Firefox-Spdy: h2
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 98a711494b388326e74f75f498c6c689
74be2cb7c25680d1badc9859c528e80b76106b8e
4b9e0428e9881f0638540ab282df7e9138567f9708c8e53c218f857f2fe5b855
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "4B9E0428E9881F0638540AB282DF7E9138567F9708C8E53C218F857F2FE5B855"
Last-Modified: Mon, 26 Sep 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2504
Expires: Tue, 27 Sep 2022 10:34:19 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 98a711494b388326e74f75f498c6c689
74be2cb7c25680d1badc9859c528e80b76106b8e
4b9e0428e9881f0638540ab282df7e9138567f9708c8e53c218f857f2fe5b855
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "4B9E0428E9881F0638540AB282DF7E9138567F9708C8E53C218F857F2FE5B855"
Last-Modified: Mon, 26 Sep 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2504
Expires: Tue, 27 Sep 2022 10:34:19 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 98a711494b388326e74f75f498c6c689
74be2cb7c25680d1badc9859c528e80b76106b8e
4b9e0428e9881f0638540ab282df7e9138567f9708c8e53c218f857f2fe5b855
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "4B9E0428E9881F0638540AB282DF7E9138567F9708C8E53C218F857F2FE5B855"
Last-Modified: Mon, 26 Sep 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2504
Expires: Tue, 27 Sep 2022 10:34:19 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 98a711494b388326e74f75f498c6c689
74be2cb7c25680d1badc9859c528e80b76106b8e
4b9e0428e9881f0638540ab282df7e9138567f9708c8e53c218f857f2fe5b855
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "4B9E0428E9881F0638540AB282DF7E9138567F9708C8E53C218F857F2FE5B855"
Last-Modified: Mon, 26 Sep 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2593
Expires: Tue, 27 Sep 2022 10:35:48 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 98a711494b388326e74f75f498c6c689
74be2cb7c25680d1badc9859c528e80b76106b8e
4b9e0428e9881f0638540ab282df7e9138567f9708c8e53c218f857f2fe5b855
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "4B9E0428E9881F0638540AB282DF7E9138567F9708C8E53C218F857F2FE5B855"
Last-Modified: Mon, 26 Sep 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2504
Expires: Tue, 27 Sep 2022 10:34:19 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 09fa2d95bd099c2114cddaa93253987f
7abf8a73caed087100e7b4b211f2172cab1bbaf9
77272003f48a9abe401d1d9027b587a7bbfd339c50b155b8e40fe120a29bd2e6
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "77272003F48A9ABE401D1D9027B587A7BBFD339C50B155B8E40FE120A29BD2E6"
Last-Modified: Tue, 27 Sep 2022 07:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3575
Expires: Tue, 27 Sep 2022 10:52:10 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 09fa2d95bd099c2114cddaa93253987f
7abf8a73caed087100e7b4b211f2172cab1bbaf9
77272003f48a9abe401d1d9027b587a7bbfd339c50b155b8e40fe120a29bd2e6
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "77272003F48A9ABE401D1D9027B587A7BBFD339C50B155B8E40FE120A29BD2E6"
Last-Modified: Tue, 27 Sep 2022 07:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Tue, 27 Sep 2022 10:52:35 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 09fa2d95bd099c2114cddaa93253987f
7abf8a73caed087100e7b4b211f2172cab1bbaf9
77272003f48a9abe401d1d9027b587a7bbfd339c50b155b8e40fe120a29bd2e6
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "77272003F48A9ABE401D1D9027B587A7BBFD339C50B155B8E40FE120A29BD2E6"
Last-Modified: Tue, 27 Sep 2022 07:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3594
Expires: Tue, 27 Sep 2022 10:52:29 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 09fa2d95bd099c2114cddaa93253987f
7abf8a73caed087100e7b4b211f2172cab1bbaf9
77272003f48a9abe401d1d9027b587a7bbfd339c50b155b8e40fe120a29bd2e6
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "77272003F48A9ABE401D1D9027B587A7BBFD339C50B155B8E40FE120A29BD2E6"
Last-Modified: Tue, 27 Sep 2022 07:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3566
Expires: Tue, 27 Sep 2022 10:52:01 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 09fa2d95bd099c2114cddaa93253987f
7abf8a73caed087100e7b4b211f2172cab1bbaf9
77272003f48a9abe401d1d9027b587a7bbfd339c50b155b8e40fe120a29bd2e6
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "77272003F48A9ABE401D1D9027B587A7BBFD339C50B155B8E40FE120A29BD2E6"
Last-Modified: Tue, 27 Sep 2022 07:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3552
Expires: Tue, 27 Sep 2022 10:51:47 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
onlinebanking.mtb.com/Assets/js/tealium_prod.js
24.75.29.69200 OK 307 B URL HTTP/1.1 onlinebanking.mtb.com/Assets/js/tealium_prod.js
IP 24.75.29.69:0
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 6cab7150291c8cb24191bc92c73a487e
dd4cbd99cc921486ec7a27525fd66b6a2d3ccc55
e585e536633d98c846579082b6aead897ae524ff8a71e5852d60d129e8fc2ac4
GET /Assets/js/tealium_prod.js HTTP/1.1
Host: onlinebanking.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=1800
Content-Type: application/x-javascript
Last-Modified: Wed, 21 Sep 2022 01:24:44 GMT
Accept-Ranges: bytes
ETag: "056eded58cdd81:0"
P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT'
X-SRV: B-WEB-05
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2038172747"
Date: Tue, 27 Sep 2022 09:52:34 GMT
Content-Length: 307
Set-Cookie: dtCookie=v_4_srv_4_sn_8C111682C68FEBB9E0B0AD2F44EE1604_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_0_rcs-3Acss_0; Path=/; Domain=.mtb.com
mtbcookie=ffffffffc3a03f9945525d5f4f58455e445a4a42378b;Version=1;Max-Age=1200;path=/;secure;httponly
TS01e71088=01fb46a926bffee26a7c4611845820ea734e072e51a380467bc9ef623b2b9ee0cc68eafcb65491a8448e92aa99b1bbaa6db87e0c84; Path=/; Domain=.onlinebanking.mtb.com
TS01e71088028=01fe6ed1473c8808a2f7deff90dc03e52cecdda8d8c8c1c97e349fe6f9003ae690a72955b9fad546341dbf67422a24901aa0e117f6; Path=/; Domain=.onlinebanking.mtb.com
TSba0bc889027=0856addebbab20005ac26da4690c6cf285d1a347188a2c40bcf0fcd481ae975a3ab2d09acff4edcd08f65d1ae8113000f212ff8e9a8e06fa3f5a34e3ba4c8b30345e03957abdad628d27d50e8e5ea0e0f2433996a524b182fbb34d89ec0de761; Path=/
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 20d8364719631440f0bebab4665d2e90
f1476294bb0a0c76777da274168cdd29cae3f6d2
a58f45e310200eac6c4257e1a0291e8f845296a802a4de2bdc49484103ce22c2
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "A58F45E310200EAC6C4257E1A0291E8F845296A802A4DE2BDC49484103CE22C2"
Last-Modified: Tue, 27 Sep 2022 08:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Tue, 27 Sep 2022 10:52:35 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 20d8364719631440f0bebab4665d2e90
f1476294bb0a0c76777da274168cdd29cae3f6d2
a58f45e310200eac6c4257e1a0291e8f845296a802a4de2bdc49484103ce22c2
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "A58F45E310200EAC6C4257E1A0291E8F845296A802A4DE2BDC49484103CE22C2"
Last-Modified: Tue, 27 Sep 2022 08:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3549
Expires: Tue, 27 Sep 2022 10:51:44 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
onlinebanking.mtb.com/Assets/scripts/kessel-help.js
24.75.29.69200 OK 263 B URL HTTP/1.1 onlinebanking.mtb.com/Assets/scripts/kessel-help.js
IP 24.75.29.69:0
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 93ed36bedd8079cd1ef27eb047279cff
455bb906b3dbd6caadbb69f5f1ee05d52a07e5b2
a53088781071700f1d0e54dda3f2238511135c1d92e3056fdd97ff0b86e8afc4
GET /Assets/scripts/kessel-help.js HTTP/1.1
Host: onlinebanking.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=1800
Content-Type: application/x-javascript
Last-Modified: Wed, 21 Sep 2022 01:24:44 GMT
Accept-Ranges: bytes
ETag: "056eded58cdd81:0"
P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT'
X-SRV: B-WEB-05
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-504462908"
Date: Tue, 27 Sep 2022 09:52:34 GMT
Content-Length: 263
Set-Cookie: dtCookie=v_4_srv_6_sn_6F567A58E72BE8E087B00FB2E4EAD778_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_0_rcs-3Acss_0; Path=/; Domain=.mtb.com
mtbcookie=ffffffffc3a03f9945525d5f4f58455e445a4a42378b;Version=1;Max-Age=1200;path=/;secure;httponly
TS01e71088=01fb46a926b7b1fc7c613ae74798dc2670ef2cdd4290ce205a9c3cefbc551b6131ed9cb84ee18424594417dac9a953c44b2e69479c; Path=/; Domain=.onlinebanking.mtb.com
TS01e71088028=01fe6ed147e80fdd69195277f34648c067907d5398c64b18afbc6d852c284d45a8848c7ed83fa816b8f624e3851144d817c6c4a149; Path=/; Domain=.onlinebanking.mtb.com
TSba0bc889027=0856addebbab2000ef0486a53e73cf43e45d93a3e015461814a13d7d4a6240792e90587c8ab6ceac08ae3a5c90113000c78482016b4377cc3f5a34e3ba4c8b30e0cb6bbe3f010b89facbaac9699427b3235765dc8ffa43bffd4df1bf971cbdc4; Path=/
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash ed2e244851a976fea15ad3b7c390ffdd
22f2c312ef134ec95ebdc940e2c99e9d5230cafb
be0b5ec334ac4e8ff3d30723207b61c9fe397810ae09fadd421cbe94e4c53844
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5931
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:35 GMT
Last-Modified: Tue, 27 Sep 2022 08:13:44 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
resources.mtb.com/r/simple-layout-responsive/css.mtb?v=03142022100000
24.75.29.77200 OK 35 kB URL HTTP/1.1 resources.mtb.com/r/simple-layout-responsive/css.mtb?v=03142022100000
IP 24.75.29.77:0
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash da035f53931c132155280b9c00893409
94ae91f42af9f8af8eed42934ea710bd409fdee8
2269c7300f76270849225e1b1f045bf65e36ea325d5fed63ffb55f3a5758195a
GET /r/simple-layout-responsive/css.mtb?v=03142022100000 HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Expires: Wed, 27 Sep 2023 09:52:35 GMT
Last-Modified: Tue, 27 Sep 2022 09:52:34 GMT
ETag: "1664272355:dtagent10247220811100421ZWhG"
Vary: User-Agent
X-Srv: B-SC-03
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="726895217"
Date: Tue, 27 Sep 2022 09:52:35 GMT
ntCoent-Length: 258715
Cache-Control: private
Content-Encoding: gzip
Set-Cookie: dtCookie=v_4_srv_1_sn_EB0961942B5EBBE997922B6A1777B9E1_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com
TS019299a7=01fb46a926d5a4792167965a1d14a9c3ba6b6ccf79048aa22d157f32cf837286926f2d830ce05d3b207ac4e09055127f362af03b39; Path=/
TS0128739d=01fb46a9267d89ece5afa070e46e48c2f44e6b7dd6048aa22d157f32cf837286926f2d830cfbd95e61808e0a143e2c854bac45f1e58d39bd49edbaa7e0e46f6c2eda86e908; path=/; domain=.mtb.com
TSea15929a027=0856addebbab20008576aa346012b076eba01dcc0c3e65462ef4f2f232a4aaf4da60e537d25969c308f64db06a1130005b4a6954e0005ae83f5a34e3ba4c8b308823c94a89d1f5fc120a0f07fe44b8e4c7172f4c60e92d99f2b116a580b461a9; Path=/
Transfer-Encoding: chunked
onlinebanking.mtb.com/Assets/scripts/Login/Index.js
24.75.29.69200 OK 7.0 kB URL HTTP/1.1 onlinebanking.mtb.com/Assets/scripts/Login/Index.js
IP 24.75.29.69:0
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 3babf9179a67f9967650540d49367123
0df85be532ac1c57eed3791d48b46bf3f29bec8f
c91e7a2cc1c3999b227fdb4c8656592fb9662e91af49ce4e76f4955c38ababfb
GET /Assets/scripts/Login/Index.js HTTP/1.1
Host: onlinebanking.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=1800
Content-Type: application/x-javascript
Last-Modified: Wed, 21 Sep 2022 01:24:44 GMT
Accept-Ranges: bytes
ETag: "056eded58cdd81:0"
P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT'
X-SRV: B-WEB-05
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="104160532"
Date: Tue, 27 Sep 2022 09:52:35 GMT
Content-Length: 6950
Set-Cookie: dtCookie=v_4_srv_11_sn_0D2932949210F81E6149E602DB85C4D2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_0_rcs-3Acss_0; Path=/; Domain=.mtb.com
mtbcookie=ffffffffc3a03f9945525d5f4f58455e445a4a42378b;Version=1;Max-Age=1200;path=/;secure;httponly
TS01e71088=01fb46a926166ce9278ab261650a552e2ffd5d3cd3c2b6c83492fb5a441df09e553143b6d47892c70233e885c05d41644b4a677628; Path=/; Domain=.onlinebanking.mtb.com
TS01e71088028=01fe6ed1470ffab6e60144162ba9aae84ac00fbab8389409601124e88bd8e3f5a0c383998edb6fd758828040df52fb8fc49aed3e5b; Path=/; Domain=.onlinebanking.mtb.com
TSba0bc889027=0856addebbab2000cf7f9a00f82206a519ce1225eafcc180b088f5bf1a5bcea722fb4e1d4487243b080d0ac5601130003eb8f78e7dc82cc23f5a34e3ba4c8b300e8fd4cc2968ac04027f6803379005bc30241be16b8bbf792c8126c62c37f269; Path=/
onlinebanking.mtb.com/ruxitagentjs_ICA2Vfhjqrux_10243220606153550.js
24.75.29.69200 OK 86 kB URL HTTP/1.1 onlinebanking.mtb.com/ruxitagentjs_ICA2Vfhjqrux_10243220606153550.js
IP 24.75.29.69:0
File type ASCII text, with very long lines (1629)
Hash dfbc58d3a725843d905bb466313afcbf
8642551dc5750aa4e82c2595c2e4d8e28c5658df
7297767ec8d243f3678be6106de01b1facc09b7af1f11178d1de6e8ffce06612
GET /ruxitagentjs_ICA2Vfhjqrux_10243220606153550.js HTTP/1.1
Host: onlinebanking.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: public, max-age=3600
Content-Length: 86087
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
Expires: Tue, 27 Sep 2022 10:52:35 GMT
P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT'
X-SRV: B-WEB-05
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Date: Tue, 27 Sep 2022 09:52:34 GMT
Set-Cookie: mtbcookie=ffffffffc3a03f9945525d5f4f58455e445a4a42378b;Version=1;Max-Age=1200;path=/;secure;httponly
TS01e71088=01fb46a926d919a48f5fed7fff21a3b7eac738780c127edcbb942286ca22967d67f29a84ce18be5121a5ccbfb7be4da567fe1b9ec5; Path=/; Domain=.onlinebanking.mtb.com
TS01e71088028=01fe6ed14773144dcbe63a658015d0bc44cedc9ede0b0aabdb77799c2940a917b413d57d71ce0a4dc1fa9aabe65eb02fdf518a7e9a; Path=/; Domain=.onlinebanking.mtb.com
TSba0bc889027=0856addebbab20005fe51b1ecf3d87cca347c6b44308299daf3421e93a9cf7657b336df0ae613c9e0855b5d0f0113000637addfe1fe353613f5a34e3ba4c8b30778de9e8875d8b19b701339a91a1b4a098ea94e0d1f98de5a42b31424993a991; Path=/
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15430
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15430
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15430
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 09:52:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: 09f8fee2-6830-4bec-af40-f2fb6547bc63
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreH5poAMFdxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-0afbf5e01a013e6f0db53da1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CwkfEPDseHez7mArqwz8tmC3WHFwXAZF1OSColucaQ5vG2hvBIDWOg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:42:47 GMT
age: 43788
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fa70ece15044b7318cb11ae5e37a64e7
04a0665f771562c3e56ac3542abe5bd3c4c1a6b5
8c974283b2ba0058114404af3e4818daa8cc56f270cb8a46f5f2f54de9d2f0e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8255
x-amzn-requestid: 3bf29c4a-406a-4645-ad18-44cd6f05d457
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VnFEV-IAMFQMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfc6-3eaa337d1e1c1b6d5e951419;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qkOlqM6tJ90H9572YLE0J-s79edBSceM5hLbJtyyuH86xdW8juoktA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 13:28:31 GMT
age: 73444
etag: "04a0665f771562c3e56ac3542abe5bd3c4c1a6b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40a8f8a-3bc7-4223-a676-6960af975ebc.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40a8f8a-3bc7-4223-a676-6960af975ebc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d478b7bea64d1a5998967c0a665e6be
b078452d30703ea98ad4a7f7fd411b3e2a42ee71
24158d741732109ae2be7314205ac35f4c8b29785876f2785e8bb0ea906762b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40a8f8a-3bc7-4223-a676-6960af975ebc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6628
x-amzn-requestid: 1f0e95f2-d860-422f-80ad-96c6e7c941c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yv1vvHIaoAMFV4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63296997-5746c99d78e025945cfdd238;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 07:19:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9-6jF5OoUb2I2HBasyNXBZC-L6rF1VINmgoBFZMuJ9eNelzkS-8BDQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 22:08:24 GMT
age: 42251
etag: "b078452d30703ea98ad4a7f7fd411b3e2a42ee71"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8342bc11-d95e-4085-a7ca-d421aba94a91.jpeg
34.120.237.76200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8342bc11-d95e-4085-a7ca-d421aba94a91.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash efaaa002eb6251769ea6dbf306ced3a1
9f99fa947a603fd6b10ff149e379cd04ad83d27a
238e0ca1aa29223416c34ef2dfcc6570c00e27a98991d91efc16e9bc4083c197
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8342bc11-d95e-4085-a7ca-d421aba94a91.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4573
x-amzn-requestid: ff35a66a-caf2-4ff4-b850-01a584fc2aa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yv1B8FzLIAMFSPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63296872-5b4a410a2827baf5598d58e7;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 07:14:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NFjYOqhUeb3yyjMNWpoBNq_xcsX3wXvc3-rqJt4cGbJXY9Sxr5KpDA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 15:29:19 GMT
age: 66196
etag: "9f99fa947a603fd6b10ff149e379cd04ad83d27a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5274e770cb5a704916c8965659709f4a
1a26007f761e439db575fb80fb403031260aecf4
e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: vx-yM_jeJvOaa1UizK5OoDJFkvKnajg2ezLF2l2qnN_OhdTE6I4taQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:05:55 GMT
etag: "1a26007f761e439db575fb80fb403031260aecf4"
content-type: image/jpeg
age: 31600
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash deb8d1e3b6d7fbc8c8ba478269621676
84f5a4c8b38acde814bc790e5b514347718d5bb9
ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lf6qqokEw32egp3ofmJGtUTAt3RD2f9rVq5gskbhrk_VFGweeo0oCQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 43397
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
onlinebanking.mtb.com/Assets/js/mtb_app_wbk.js
24.75.29.69200 OK 172 kB URL HTTP/1.1 onlinebanking.mtb.com/Assets/js/mtb_app_wbk.js
IP 24.75.29.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 172 kB (172007 bytes)
Hash 9e988440d66a9fadb0a40842ca37ac26
b4debcd04e4496c51b058022cc7043d81640c20f
13175779fc459032bd0b363a4ff7fb480eaa9e2b6d6bde0d47075227fd8d6168
GET /Assets/js/mtb_app_wbk.js HTTP/1.1
Host: onlinebanking.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 09:52:35 GMT
Content-Type: application/javascript; charset=UTF-8
Connection: keep-alive
X-Ion-Hop: 1
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Encoding: gzip
Set-Cookie: e9LegkvD=AzTQXH6DAQAAaHOXYzCS_z2qs2Ulmdv4t2lV_7jTa1d21X9gj7IxehHLIWYPAVtaKpqcuC2nwH8AADQwAAAAAA|1|0|43c35079375fa27df3e8b6e301b547c38e90e4d8; Path=/; Max-Age=1577847600; Domain=mtb.com
TS01e71088=01fb46a926f349d82c0e82d7c14f5669c00873da317b6f562ceff65e3f85d0a088381294a5aedcff93d388cc8eee44f7defe882e5b; Path=/; Domain=.onlinebanking.mtb.com
TS01ea4191=01fb46a926f349d82c0e82d7c14f5669c00873da317b6f562ceff65e3f85d0a088381294a5aedcff93d388cc8eee44f7defe882e5b; path=/; domain=mtb.com
TSba0bc889027=0856addebbab2000a89d3ce002f06a0f1ccbe13753a5385e5743249b09194f5b0e83b953d756522008f883d3231130009212c94d5d9906dd3f5a34e3ba4c8b3028f5ff833bda9306bf62036a6098b947d86ba46e09718a1e4619d892ad01bc92; Path=/
Transfer-Encoding: chunked
resources.mtb.com/r/simple-layout-responsive/js.mtb?v=03142022100000
24.75.29.77200 OK 104 kB URL HTTP/1.1 resources.mtb.com/r/simple-layout-responsive/js.mtb?v=03142022100000
IP 24.75.29.77:0
File type ASCII text, with CRLF line terminators
Size 104 kB (103533 bytes)
Hash 08b250830e37bab4db49f49dcfa521aa
196ea486f29834f4f74c9415c3952b725055c866
9b41dafbfb1b1f1d091bcb7593dbdae2d91dddb1c00bbb00eea511b7c9c92443
GET /r/simple-layout-responsive/js.mtb?v=03142022100000 HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Expires: Wed, 27 Sep 2023 09:52:35 GMT
Last-Modified: Tue, 27 Sep 2022 09:52:34 GMT
ETag: "1664272355:dtagent10247220811100421ZWhG"
Vary: User-Agent
X-Srv: B-SC-03
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1595616701"
Date: Tue, 27 Sep 2022 09:52:35 GMT
Cteonnt-Length: 322405
Cache-Control: private
Content-Encoding: gzip
Set-Cookie: dtCookie=v_4_srv_6_sn_8B03C6C26D99ECC9143D69C94CB8569C_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com
TS019299a7=01fb46a926859c48cf6d5f2e4e65dafdf310a938a0be12d6f6661b22254485c4b6d5d575cb89935fa640353ccec5715cbab7526c66; Path=/
TS0128739d=01fb46a92652d0863761d765e59cf2a9e2084d211ebe12d6f6661b22254485c4b6d5d575cb91d7fc24eb418a687069d114a0762c9526692d5a1428ae6f1cf673c5d791d920; path=/; domain=.mtb.com
TSea15929a027=0856addebbab2000e47696a8d9d0ed757e13d7bf7f799519e7368e809889a54cc1e5cb82059eed2608c39817c2113000d512b48d214015323f5a34e3ba4c8b30aad089bfbc6f8efcba24989ad0c67225bfe37541db89955a6528c265db7e4222; Path=/
Transfer-Encoding: chunked
onlinebanking.mtb.com/Assets/js/kessel-client-prod.js
24.75.29.69200 OK 667 kB URL HTTP/1.1 onlinebanking.mtb.com/Assets/js/kessel-client-prod.js
IP 24.75.29.69:0
File type ASCII text, with very long lines (63933), with CRLF line terminators
Size 667 kB (666659 bytes)
Hash 84d301f8f964196d650fb246019dfd44
8659be73c2104742b30960633123810640a71b49
f78201bc5207eca0e7c28127849178c04dfbac606927804c31f6af106b02e266
GET /Assets/js/kessel-client-prod.js HTTP/1.1
Host: onlinebanking.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=1800
Content-Type: application/x-javascript
Last-Modified: Wed, 21 Sep 2022 01:24:44 GMT
Accept-Ranges: bytes
ETag: "056eded58cdd81:0"
P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT'
X-SRV: B-WEB-05
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1713204112"
Date: Tue, 27 Sep 2022 09:52:34 GMT
Content-Length: 666659
Set-Cookie: dtCookie=v_4_srv_6_sn_B2FCBFD130655072F1B87504EDF7F042_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_0_rcs-3Acss_0; Path=/; Domain=.mtb.com
mtbcookie=ffffffffc3a03f9945525d5f4f58455e445a4a42378b;Version=1;Max-Age=1200;path=/;secure;httponly
TS01e71088=01fb46a926a0dd3b54970edbb3a859d859fb1fae039ba5304e60e633751e225b20a728c29467b4a5ceee8f1e9f8be6602e8d945414; Path=/; Domain=.onlinebanking.mtb.com
TS01e71088028=01fe6ed1470c79ce644ec414967122ff22abdcbb2bcab2e055739c566cd013c84363fa47211ab9c5ab330bce2295500031e968f191; Path=/; Domain=.onlinebanking.mtb.com
TSba0bc889027=0856addebbab200037a85c656efdf48620425c4c2ba1a727d2a5700092e0e5ee2bd543f68650d1d708bc7798d8113000f55dc63d1b7f37513f5a34e3ba4c8b302d897d3ca39e4703b607b587d7299df62ae9d1d22f1130eaf76eba5d9fdd7006; Path=/
resources.mtb.com/Assets/img/mtb-entrust.svg
24.75.29.77200 OK 1.3 kB URL HTTP/1.1 resources.mtb.com/Assets/img/mtb-entrust.svg
IP 24.75.29.77:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1349), with no line terminators
Hash 9a569ad20708d7453d89fe6c72e7fcdc
60b6a41620583484642f7c826faf8e3c879a6374
b2ef3bd17aa6bc2daa7b1209f7848b30c64f3068e43162b09a216639ab430ce5
GET /Assets/img/mtb-entrust.svg HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Wed, 21 Sep 2022 01:18:32 GMT
Accept-Ranges: bytes
ETag: "0a4321058cdd81:0"
X-Srv: B-SC-03
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="1723315019"
Date: Tue, 27 Sep 2022 09:52:38 GMT
Content-Length: 1349
Set-Cookie: TSea15929a027=0856addebbab20001a5ffe9d01577eb0cee1eb63f07a6869b09cd4ccd59002a6983e845595fd58db08648a18bb113000b8e34f4042c89d937f5ccaaa771b57fb31e1af4349a1746e430ae7ceebd5ff56dc952bab2d50ba47069fd45ff2a017d7; Path=/
resources.mtb.com/Assets/img/mtb-logo.svg
24.75.29.77200 OK 2.0 kB URL HTTP/1.1 resources.mtb.com/Assets/img/mtb-logo.svg
IP 24.75.29.77:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2039), with no line terminators
Hash f2b901cf895852a0866fe4a16c7f1730
c4240af1ec798477b4e65a185ddbb1b038817da4
5f5b0d9f678fe446631a33a4cbbe891a01b0ed972143702e67ae6617367096ac
GET /Assets/img/mtb-logo.svg HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Wed, 21 Sep 2022 01:18:32 GMT
Accept-Ranges: bytes
ETag: "0a4321058cdd81:0"
X-Srv: B-SC-03
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2145673899"
Date: Tue, 27 Sep 2022 09:52:38 GMT
Content-Length: 2039
Set-Cookie: TSea15929a027=0856addebbab20008e62442d6f0c6adabc2aaed7c82b6089432d9bd069262be32ab204dc9ba14a5808628e7b53113000b01dcbaeb8639a597f5ccaaa771b57fb658e7ba157e361b6f2b56ed6027b9ca35574db2ba5aae66b3046019db7352389; Path=/
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash d0b509c9adb0dc8aa9bf0ab1980f624d
4a20f57d5c76fbaf00052258421c56d353bf23d1
a57c02ff6838525846993137c7fc52c335392b8ed59f1180a2dff972c81f0824
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 27 Sep 2022 09:52:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 26 Sep 2022 23:36:42 GMT
Expires: Tue, 27 Sep 2022 23:36:42 GMT
ETag: "4a20f57d5c76fbaf00052258421c56d353bf23d1"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
resources.mtb.com/Assets/img/mtb-equalhousinglender.svg
24.75.29.77200 OK 230 B URL HTTP/1.1 resources.mtb.com/Assets/img/mtb-equalhousinglender.svg
IP 24.75.29.77:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 916635d10512ae6a1840614a895dcd38
db175de4c42281bb4d239c57d1b95b8e75c529ec
d58eb2802f72d0c6b1d944a1335e8fb914af44b51fe16097aad994c15b8cfbad
GET /Assets/img/mtb-equalhousinglender.svg HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Wed, 21 Sep 2022 01:18:32 GMT
Accept-Ranges: bytes
ETag: "0a4321058cdd81:0"
X-Srv: B-SC-03
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-531141856"
Date: Tue, 27 Sep 2022 09:52:38 GMT
Content-Length: 230
Set-Cookie: TSea15929a027=0856addebbab20006b12be841417536874aa26b7d85b2e9e82e083a57b87e5aca065f5a32719af6408419aac741130000aa0b8449453ee627f5ccaaa771b57fb139c09cd976e04a83326632c412698ac490bbf2b9cda4b09c48b0b3026c45178; Path=/
ponos.zeronaught.com/1?a=2bf6dbb2864396b97f1160826d33cb1158d36fce&b=AzTQXH6DAQAA2qiXvKQyeEWzGikDmBKE4OvXetMjfjV5rAsn1bIxehHLIWYPAVtaKpqcuC2nwH8AADQwAAAAAA==&c=240388775
107.162.179.174200 OK 921 B URL HTTP/1.0 ponos.zeronaught.com/1?a=2bf6dbb2864396b97f1160826d33cb1158d36fce&b=AzTQXH6DAQAA2qiXvKQyeEWzGikDmBKE4OvXetMjfjV5rAsn1bIxehHLIWYPAVtaKpqcuC2nwH8AADQwAAAAAA==&c=240388775
IP 107.162.179.174:0
File type ASCII text, with very long lines (921), with no line terminators
Hash 39a7728125e3694f6674655c833d850b
e3b6257faf1b1209ae359bcb19e6615b0151a503
cf5f5babcc26f1f8a5b190fda9706fd7805a123db3b28df9129554267400d7bb
GET /1?a=2bf6dbb2864396b97f1160826d33cb1158d36fce&b=AzTQXH6DAQAA2qiXvKQyeEWzGikDmBKE4OvXetMjfjV5rAsn1bIxehHLIWYPAVtaKpqcuC2nwH8AADQwAAAAAA==&c=240388775 HTTP/1.1
Host: ponos.zeronaught.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://business4alltech.com
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.0 200 OK
Access-Control-Allow-Origin: *
Content-Type: text/plain; charset=UTF-8
Connection: close
Content-Length: 921
tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=mtbank/olb-legacy/202209150113&cb=1664272356585
23.38.200.249200 OK 2 B URL HTTP/1.1 tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=mtbank/olb-legacy/202209150113&cb=1664272356585
IP 23.38.200.249:0
File type ASCII text, with no line terminators
Hash 7bc0ee636b3b83484fc3b9348863bd22
ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
GET /utag/tiqapp/utag.v.js?a=mtbank/olb-legacy/202209150113&cb=1664272356585 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://business4alltech.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "7bc0ee636b3b83484fc3b9348863bd22:1460653071"
Last-Modified: Thu, 14 Apr 2016 16:57:51 GMT
Server: AkamaiNetStorage
Content-Length: 2
Cache-Control: max-age=600
Expires: Tue, 27 Sep 2022 10:02:38 GMT
Date: Tue, 27 Sep 2022 09:52:38 GMT
Connection: keep-alive
cdn.quantummetric.com/qscripts/quantum-mtb.js
172.67.20.158301 Moved Permanently 178 B URL HTTP/1.1 cdn.quantummetric.com/qscripts/quantum-mtb.js
IP 172.67.20.158:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /qscripts/quantum-mtb.js HTTP/1.1
Host: cdn.quantummetric.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://business4alltech.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 27 Sep 2022 09:52:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://cdn.quantummetric.com/qscripts/quantum-mtb.js
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75135901cf3a0b3d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
resources.mtb.com/assets/fonts/mandtpg-iconfont.woff
24.75.29.77200 OK 4.8 kB URL HTTP/1.1 resources.mtb.com/assets/fonts/mandtpg-iconfont.woff
IP 24.75.29.77:0
File type Web Open Font Format, TrueType, length 4776, version 1.0\012- data
Hash ac13691b89191d11d0e5577eb3cf3d53
0126fa82c0ab022e61b5de74f1fe3e204a905a7b
108d16421ae2ff7fc5157d507dc5b1bf7f62140ba58cf3c723b1f2b7e74c21df
GET /assets/fonts/mandtpg-iconfont.woff HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://business4alltech.com
Connection: keep-alive
Referer: https://resources.mtb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: APPLICATION/X-WOFF
Last-Modified: Wed, 21 Sep 2022 01:18:31 GMT
Accept-Ranges: bytes
ETag: "0a4321058cdd81:0:dtagent10247220811100421ZWhG"
X-Srv: B-SC-03
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="555435290", dtTao;desc="1"
Date: Tue, 27 Sep 2022 09:52:38 GMT
Content-Length: 4776
Set-Cookie: dtCookie=v_4_srv_4_sn_3AE5E17A9DBD5599016577DA736BD6CF_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com
TS019299a7=01fb46a9267fa07a738af7de5bbb5a8de91c8961861b8f50bd21b90cc13015f088fbe2af3ab1071f60623d13d104904b4b51474639; Path=/
TS0128739d=01fb46a92606d6090209c1752ad181968749c389601b8f50bd21b90cc13015f088fbe2af3ac9700a2165624316a8cdde1f60701c3a5ea144eddcd91f8a4dc50a7c9996ef01; path=/; domain=.mtb.com
TSea15929a027=0856addebbab2000a089356124ae1e5fbfc74b72bf6bd884d323c1c802fec87cda87586b5cc320410862901ce51130007ce2a6dcfd05c6647f5ccaaa771b57fbc7a457b80a4da072bb58177ef6befe9504975176b9c24c7701fa24dc8487d60a; Path=/
resources.mtb.com/assets/fonts/mandtbaltoweb-medium.woff
24.75.29.77200 OK 64 kB URL HTTP/1.1 resources.mtb.com/assets/fonts/mandtbaltoweb-medium.woff
IP 24.75.29.77:0
File type Web Open Font Format, TrueType, length 64318, version 1.0\012- data
Hash b245a55f7e33e1cf4d2477570936ef84
12bf1c1eda6db246778f7c343acebbaad8fa36f4
b391b55f950528937beee7687717a4aef81196817834f1c93b099713ff738fbc
GET /assets/fonts/mandtbaltoweb-medium.woff HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://business4alltech.com
Connection: keep-alive
Referer: https://resources.mtb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: APPLICATION/X-WOFF
Last-Modified: Wed, 21 Sep 2022 01:18:31 GMT
Accept-Ranges: bytes
ETag: "0a4321058cdd81:0:dtagent10247220811100421ZWhG"
X-Srv: B-SC-03
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="156596429", dtTao;desc="1"
Date: Tue, 27 Sep 2022 09:52:38 GMT
Content-Length: 64318
Set-Cookie: dtCookie=v_4_srv_4_sn_4E3B59F3EB74546255F4EB704DC5FDDC_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_1; Path=/; Domain=.mtb.com
TS019299a7=01fb46a926fa16bccb80b296c227f102f0c18712f43cf98aadacb348c600355fe3fd34a9dd898b69fba0b320eb370126a0f8e67167; Path=/
TS0128739d=01fb46a926bdcabd4f23655ce8a5ee0a3c66f2e7783cf98aadacb348c600355fe3fd34a9dda5f03493f1b859372eba27c69372f58c30f1c1a4b7254f7a10d070f6c86d9c4f; path=/; domain=.mtb.com
TSea15929a027=0856addebbab2000aad92592e6c85778b303df10c186503614fe4214ff213441c2024bfd0a80908508b5f21737113000357c9f52e8f64ec07f5ccaaa771b57fb76e183a05b158b91a978442f03b4161022cc03ed7350c1f8cf076a8ef3bd9bc4; Path=/
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash fc3e2f0eff5cf10ad05fd5b65ac00fa0
78c9a7bbf69937fd6bae311138da07ab2d71ca11
66c0ac49c7e48140c3b6ce931c4ca4949c1e60206fc2555b9313f0e04951993b
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 27 Sep 2022 09:52:39 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 27 Sep 2022 04:18:08 GMT
Expires: Wed, 28 Sep 2022 04:18:08 GMT
ETag: "78c9a7bbf69937fd6bae311138da07ab2d71ca11"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
resources.mtb.com/assets/fonts/mandtbaltoweb-book.woff
24.75.29.77200 OK 68 kB URL HTTP/1.1 resources.mtb.com/assets/fonts/mandtbaltoweb-book.woff
IP 24.75.29.77:0
File type Web Open Font Format, TrueType, length 67671, version 1.0\012- data
Hash 6cd469e8613d82d4d07834a5ca7745f0
95347ba0a03d27e1aa91bc17c937d8aefe53e6ff
4029a5a081992259f4e529190b49dbba893931da4e843dd203449f1b9a4509d2
GET /assets/fonts/mandtbaltoweb-book.woff HTTP/1.1
Host: resources.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://business4alltech.com
Connection: keep-alive
Referer: https://resources.mtb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: APPLICATION/X-WOFF
Last-Modified: Wed, 21 Sep 2022 01:18:31 GMT
Accept-Ranges: bytes
ETag: "0a4321058cdd81:0:dtagent10247220811100421ZWhG"
X-Srv: B-SC-03
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-577221942", dtTao;desc="1"
Date: Tue, 27 Sep 2022 09:52:38 GMT
Content-Length: 67671
Set-Cookie: dtCookie=v_4_srv_11_sn_D1F3AE398402BA5033D58BB7A7E518EA_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com
TS019299a7=01fb46a926def321cbbab4348166307e27374e008277a3d10e05b7457d29c6f37bd9a174304f5caaed9743d95c5949cbe1445603cd; Path=/
TS0128739d=01fb46a926ef09aa64af2eee48ae5980017b3e630a77a3d10e05b7457d29c6f37bd9a17430888c2c4ae6f60b8227fc3836866ef758505b96e2c371a587fc086a392d914403; path=/; domain=.mtb.com
TSea15929a027=0856addebbab20007515ba4634758dd9a71892908a4127317abab65310c0abd48c88188f6774eb3008c4e60cc0113000eff08e14aba5c62f7f5ccaaa771b57fbc9ae3cfc0a2900b879ad1118aca83e7ea70f5a91530f1bb5bbcfa9cc3c2e2c22; Path=/
wup-5d65a0ab.us.v2.we-stats.com/client/v3.1/web/wup?cid=mufasa
52.141.217.134200 OK 899 B URL HTTP/2 wup-5d65a0ab.us.v2.we-stats.com/client/v3.1/web/wup?cid=mufasa
IP 52.141.217.134:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (899), with no line terminators
Hash cf58aa2fe6a0c64fb1d678c6dc956efb
b34f9c872a2afb4787382fe29acbd82953c7f639
3226b57cd2384029dfc90434e0d8bf05c14236144dee025f84fdaaf57f5d1688
POST /client/v3.1/web/wup?cid=mufasa HTTP/1.1
Host: wup-5d65a0ab.us.v2.we-stats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 172
Origin: http://business4alltech.com
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 899
date: Tue, 27 Sep 2022 09:52:38 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: 6a8b6f5e-6f30-4a87-99b3-873a023f5db8
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 002d49bafbcc428a44fe523322ad9e05
b39aad0d1e941121f28af8f9b6d76f19216800d5
59a10c7762be219b689cd518aea4d034aa725c6a632b7f866989dcf984b5e007
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5b7b66f5886a12421c3f3970bbf49d5a
13a31565fb5b2f1e75d67ba1ce09dae339f1c0e8
3ed8ffa99cefdf81381912b426c0ab9091fb5888836665d9012435965f99feba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s96622285631848?AQB=1&ndh=1&pf=1&t=27%2F8%2F2022%209%3A52%3A36%202%200&fid=110AB39F6B5D0EAC-10E3BA2993730E32&ce=UTF-8&g=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&cc=USD&events=event21&c16=no%20value&c17=Tuesday%3A5%3A30AM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=First%20Visit&v23=New&v24=First%20Visit&v26=stop&c41=OLB&v41=OLB&v136=1664272356572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&AQE=1
15.236.176.210302 Found 0 B URL HTTP/1.1 mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s96622285631848?AQB=1&ndh=1&pf=1&t=27%2F8%2F2022%209%3A52%3A36%202%200&fid=110AB39F6B5D0EAC-10E3BA2993730E32&ce=UTF-8&g=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&cc=USD&events=event21&c16=no%20value&c17=Tuesday%3A5%3A30AM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=First%20Visit&v23=New&v24=First%20Visit&v26=stop&c41=OLB&v41=OLB&v136=1664272356572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&AQE=1
IP 15.236.176.210:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/ss/mtb/1/JS-2.9.0/s96622285631848?AQB=1&ndh=1&pf=1&t=27%2F8%2F2022%209%3A52%3A36%202%200&fid=110AB39F6B5D0EAC-10E3BA2993730E32&ce=UTF-8&g=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&cc=USD&events=event21&c16=no%20value&c17=Tuesday%3A5%3A30AM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=First%20Visit&v23=New&v24=First%20Visit&v26=stop&c41=OLB&v41=OLB&v136=1664272356572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&AQE=1 HTTP/1.1
Host: mtb.d1.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://business4alltech.com/
HTTP/1.1 302 Found
access-control-allow-origin: *
vary: Origin
date: Tue, 27 Sep 2022 09:52:39 GMT
content-type: text/plain;charset=utf-8
expires: Mon, 26 Sep 2022 09:52:39 GMT
last-modified: Wed, 28 Sep 2022 09:52:39 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi_nwa=[CS]v4|0-0|6332C7E7[CE]; Path=/; Domain=omtrdc.net; Max-Age=63072000; Expires=Thu, 26 Sep 2024 09:52:52 GMT; SameSite=None;
location: http://mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s96622285631848?AQB=1&pccr=true&ndh=1&pf=1&t=27%2F8%2F2022%209%3A52%3A36%202%200&fid=110AB39F6B5D0EAC-10E3BA2993730E32&ce=UTF-8&g=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&cc=USD&events=event21&c16=no%20value&c17=Tuesday%3A5%3A30AM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=First%20Visit&v23=New&v24=First%20Visit&v26=stop&c41=OLB&v41=OLB&v136=1664272356572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&AQE=1
content-length: 0
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 535d7ab5eb208d307dbc2de416d72d71
1d1419ab871163714319ba7781797b82b77284dc
07e059e9abdeaa3817de4985899ea47b519e728c63c1dbe8f055fc60b0de03a3
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "07E059E9ABDEAA3817DE4985899EA47B519E728C63C1DBE8F055FC60B0DE03A3"
Last-Modified: Tue, 27 Sep 2022 03:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3552
Expires: Tue, 27 Sep 2022 10:51:51 GMT
Date: Tue, 27 Sep 2022 09:52:39 GMT
Connection: keep-alive
googleads.g.doubleclick.net/pagead/viewthroughconversion/990489911/?random=1659620062241&cv=9&fst=1659620062241&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa811&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fsacrificeivsuccess.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&hn=www.google.com&async=1&rfmt=3&fmt=4
142.250.74.162200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/990489911/?random=1659620062241&cv=9&fst=1659620062241&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa811&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fsacrificeivsuccess.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&hn=www.google.com&async=1&rfmt=3&fmt=4
IP 142.250.74.162:0
File type ASCII text, with very long lines (2410), with no line terminators
Hash 316c49408600757bf9825ba9ec30bb1f
33cc6ce9dc7acd17712d8244424cbbd7f2e98295
bb2cdc0c5987cd10ea469f82a96e28d29d5e1fef4556bf2e13ea77753065ebde
GET /pagead/viewthroughconversion/990489911/?random=1659620062241&cv=9&fst=1659620062241&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa811&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fsacrificeivsuccess.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 09:52:39 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1076
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 27-Sep-2022 10:07:39 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/conversion_async.js
142.250.74.164200 OK 16 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP 142.250.74.164:0
File type ASCII text, with very long lines (1654)
Hash 890f716858b5f72587e47c5eca121cb5
91871a0acd9a0ab644d51036bb5ca0c3bdc5e687
7a3629e375468328b3fb25e1a6cc5749604f09099e8d2109f366e7e0226aee4a
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 27 Sep 2022 09:52:39 GMT
expires: Tue, 27 Sep 2022 09:52:39 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 3080337328058561381
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15693
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s96622285631848?AQB=1&pccr=true&ndh=1&pf=1&t=27%2F8%2F2022%209%3A52%3A36%202%200&fid=110AB39F6B5D0EAC-10E3BA2993730E32&ce=UTF-8&g=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&cc=USD&events=event21&c16=no%20value&c17=Tuesday%3A5%3A30AM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=First%20Visit&v23=New&v24=First%20Visit&v26=stop&c41=OLB&v41=OLB&v136=1664272356572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&AQE=1
15.236.176.210200 OK 43 B URL HTTP/1.1 mtb.d1.sc.omtrdc.net/b/ss/mtb/1/JS-2.9.0/s96622285631848?AQB=1&pccr=true&ndh=1&pf=1&t=27%2F8%2F2022%209%3A52%3A36%202%200&fid=110AB39F6B5D0EAC-10E3BA2993730E32&ce=UTF-8&g=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&cc=USD&events=event21&c16=no%20value&c17=Tuesday%3A5%3A30AM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=First%20Visit&v23=New&v24=First%20Visit&v26=stop&c41=OLB&v41=OLB&v136=1664272356572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&AQE=1
IP 15.236.176.210:0
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/mtb/1/JS-2.9.0/s96622285631848?AQB=1&pccr=true&ndh=1&pf=1&t=27%2F8%2F2022%209%3A52%3A36%202%200&fid=110AB39F6B5D0EAC-10E3BA2993730E32&ce=UTF-8&g=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&cc=USD&events=event21&c16=no%20value&c17=Tuesday%3A5%3A30AM&v19=D%3Dc17&c20=D%3Dg&c21=1&v21=D%3Dg&c22=New&v22=1&c23=First%20Visit&v23=New&v24=First%20Visit&v26=stop&c41=OLB&v41=OLB&v136=1664272356572&v151=Tealium&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&AQE=1 HTTP/1.1
Host: mtb.d1.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://business4alltech.com/
Connection: keep-alive
HTTP/1.1 200 OK
access-control-allow-origin: *
date: Tue, 27 Sep 2022 09:52:39 GMT
expires: Mon, 26 Sep 2022 09:52:39 GMT
last-modified: Wed, 28 Sep 2022 09:52:39 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi_nwa=[CS]v4|110AB39F6B5D0EAC-10E3BA2993730E32|0[CE]; Path=/; Domain=omtrdc.net; Max-Age=63072000; Expires=Thu, 26 Sep 2024 09:52:52 GMT; SameSite=None;
etag: 3573997677808222208-4619799471035145002
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
www.google.com/pagead/1p-user-list/990489911/?random=1659620062241&cv=9&fst=1659618000000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa811&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fsacrificeivsuccess.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1320725191&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/990489911/?random=1659620062241&cv=9&fst=1659618000000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa811&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fsacrificeivsuccess.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1320725191&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/990489911/?random=1659620062241&cv=9&fst=1659618000000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa811&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fsacrificeivsuccess.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1320725191&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 09:52:39 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
asset.mtb.com/Documents/html/homepage/favicon.ico
54.230.111.64200 OK 15 kB URL HTTP/2 asset.mtb.com/Documents/html/homepage/favicon.ico
IP 54.230.111.64:0
File type PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced\012- data
Hash e82f458a5c1c5353a97401eccc925613
949d6c8d06ca14b52f496c20f63fae269b6708c2
cd320f6e4a5ccfb2d08a5aca1d42dc606530d63e3d779038c41865c85568cbf3
GET /Documents/html/homepage/favicon.ico HTTP/1.1
Host: asset.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/x-icon
content-length: 14862
accept-ranges: bytes
cache-control: max-age=3600, no-cache="set-cookie"
content-disposition: inline
content-encoding: gzip
date: Tue, 27 Sep 2022 09:51:58 GMT
last-modified: Wed, 04 May 2022 18:18:59 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-content-type-options: nosniff
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
x-vhost: publish
etag: "3dce-5de33a8b9cac0-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JZFOlSBiZRszINFKKaVAQ25OI_CCkIU5uBFWhT7mgyEUuiexz0X5Fg==
age: 41
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 002d49bafbcc428a44fe523322ad9e05
b39aad0d1e941121f28af8f9b6d76f19216800d5
59a10c7762be219b689cd518aea4d034aa725c6a632b7f866989dcf984b5e007
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4538701cf9bc34d908f50370beb922f4
df141b9c3ec626ecaba7c1899073a48b811c4113
61497b93eb237687a8fff5845a7a81aff2f2f53dc56f2d0818bfb98dd1256d6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 95f95fee6e94fb192e7c06459e3e3f8e
025638b85afcc833cd592c98cc941dd011d2526f
dbc8654990b37741f8e393d069054ae68d584c2496421892e814e7a8c45467fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/990489911/?random=1659620062241&cv=9&fst=1659618000000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa811&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fsacrificeivsuccess.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1320725191&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/990489911/?random=1659620062241&cv=9&fst=1659618000000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa811&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fsacrificeivsuccess.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1320725191&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/990489911/?random=1659620062241&cv=9&fst=1659618000000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=3&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa811&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fonlinebanking.mtb.com%2F&ref=https%3A%2F%2Fsacrificeivsuccess.com%2F&tiba=Welcome%20to%20Online%20Banking%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1320725191&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 09:52:39 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 95f95fee6e94fb192e7c06459e3e3f8e
025638b85afcc833cd592c98cc941dd011d2526f
dbc8654990b37741f8e393d069054ae68d584c2496421892e814e7a8c45467fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 09:52:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html
54.230.111.34200 OK 221 B URL HTTP/2 1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html
IP 54.230.111.34:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 21e34cf6a03f570df49e212018a567d0
f0be4058936850ae0163f5137600d14b6632bbb3
0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6
GET /scripts/prod/crossdomain.html HTTP/1.1
Host: 1.c81358859121583b7adf2ace89cb39f44.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 221
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 21:32:00 GMT
etag: "21e34cf6a03f570df49e212018a567d0"
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WUHyQNHTah2VqC40bVRUY71MSybfxSJyChTg19GYVXJsJev_R_uzTQ==
age: 44440
X-Firefox-Spdy: h2
cdn.quantummetric.com/qscripts/quantum-mtb.js
172.67.20.158200 OK 77 kB URL HTTP/2 cdn.quantummetric.com/qscripts/quantum-mtb.js
IP 172.67.20.158:0
File type ASCII text, with very long lines (3730)
Hash 18049785d7810b96be7b6fb2dc45e0ce
52a1d83f2e0ee032213c7639f35525c08fc81e8b
c6fb81d7ff5b8c9b23ba32ded0e31cf261399533e34b9c6c22b63cd48150591c
GET /qscripts/quantum-mtb.js HTTP/1.1
Host: cdn.quantummetric.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 09:52:35 GMT
content-type: text/javascript
vary: Accept-Encoding
etag: W/"166378973649816613605351101664265602945"
cache-control: public, max-age=300, stale-while-revalidate=21600, stale-if-error=21600
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=31536000
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 751358e8ece6b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html
54.230.111.22200 OK 221 B URL HTTP/2 1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html
IP 54.230.111.22:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 21e34cf6a03f570df49e212018a567d0
f0be4058936850ae0163f5137600d14b6632bbb3
0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6
GET /scripts/prod/crossdomain.html HTTP/1.1
Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 221
date: Mon, 26 Sep 2022 14:22:55 GMT
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
etag: "21e34cf6a03f570df49e212018a567d0"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8zEQMOmttBzY5Mk8kZEVe7Eqc62S_zGt0EdQABx44YeIaNyimiaDMw==
age: 70185
X-Firefox-Spdy: h2
wup-5d65a0ab.us.v2.we-stats.com/client/v3.1/web/wup?cid=mufasa
52.141.217.134200 OK 666 B URL HTTP/2 wup-5d65a0ab.us.v2.we-stats.com/client/v3.1/web/wup?cid=mufasa
IP 52.141.217.134:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (666), with no line terminators
Hash 2d6b4a8831853fa7aeee35370d130723
8f063447b40ad038c2b69794d85091ac53ab6cd2
474a9d4de96aba5560d50f6fdb4d12144d646187069fef38937911b5381bd28e
POST /client/v3.1/web/wup?cid=mufasa HTTP/1.1
Host: wup-5d65a0ab.us.v2.we-stats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 956
Origin: http://business4alltech.com
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 666
date: Tue, 27 Sep 2022 09:52:38 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: 67d6a6ec-0df1-49e0-826d-deddda2feaea
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash f78c4377fed813c5041f31b116714539
3eca094f337b484fa34d4bbb6e57bbbb2dfd7149
bf2208a8578ac007a94903dc31a9e576b1bb73c3c7a5fdc3e36200d64bec48d7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 09:52:39 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 11:15:46 GMT
Expires: Mon, 03 Oct 2022 11:15:45 GMT
Etag: "3eca094f337b484fa34d4bbb6e57bbbb2dfd7149"
Cache-Control: max-age=522785,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7513590759960b49-OSL
1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html
54.230.111.46200 OK 221 B URL HTTP/2 1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html
IP 54.230.111.46:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 21e34cf6a03f570df49e212018a567d0
f0be4058936850ae0163f5137600d14b6632bbb3
0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6
GET /scripts/prod/crossdomain.html HTTP/1.1
Host: 1.b406929acabac9b095f124c81bdfcf57f.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://business4alltech.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 221
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 10:44:19 GMT
etag: "21e34cf6a03f570df49e212018a567d0"
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ifnZplTueGi8V9ZzqYwzfpLAcW-AU6NH1g05Q7uuswsCJm0_erNq8w==
age: 83301
X-Firefox-Spdy: h2
1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
54.230.111.34200 OK 3.2 kB URL HTTP/2 1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
IP 54.230.111.34:0
File type ASCII text, with very long lines (3227), with no line terminators
Hash 9ee48a4da9c402e8a23ad085fb71f28f
f0c59306d6313f9bee02b53ca8903991bd24bfd7
9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622
GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1
Host: 1.c81358859121583b7adf2ace89cb39f44.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3227
date: Tue, 27 Sep 2022 00:31:17 GMT
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
etag: "9ee48a4da9c402e8a23ad085fb71f28f"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BE14nvB16bdgzmUKUf3_bfMQOYTcgInBlZpFspE5Pbbs7D65VE_1Uw==
age: 33684
X-Firefox-Spdy: h2
1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
54.230.111.22200 OK 3.2 kB URL HTTP/2 1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
IP 54.230.111.22:0
File type ASCII text, with very long lines (3227), with no line terminators
Hash 9ee48a4da9c402e8a23ad085fb71f28f
f0c59306d6313f9bee02b53ca8903991bd24bfd7
9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622
GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1
Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3227
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 11:15:39 GMT
etag: "9ee48a4da9c402e8a23ad085fb71f28f"
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oFy1j0vZYOgW_Rpxq2e0h8fUy-2BvG6F26dpzZuz0y6EI86xjL19xg==
age: 81422
X-Firefox-Spdy: h2
1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
54.230.111.46200 OK 3.2 kB URL HTTP/2 1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
IP 54.230.111.46:0
File type ASCII text, with very long lines (3227), with no line terminators
Hash 9ee48a4da9c402e8a23ad085fb71f28f
f0c59306d6313f9bee02b53ca8903991bd24bfd7
9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622
GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1
Host: 1.b406929acabac9b095f124c81bdfcf57f.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3227
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 18:24:38 GMT
etag: "9ee48a4da9c402e8a23ad085fb71f28f"
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: it5-pO25DUCEcetTBnsriC66u3Kwb5k1hCIMDKS5owjcTBlWZm8HZg==
age: 55683
X-Firefox-Spdy: h2
log-5d65a0ab.us.v2.we-stats.com/api/v1/sendLogs?cid=mufasa&cdsnum=1664272359206-sjn0000245-a61cb443-240f-4ccf-bff6-3a35b8a00b49&csid=null&ds=js&sdkVer=2.19.2.465.37bfd51
52.238.253.184204 No Content 0 B URL HTTP/2 log-5d65a0ab.us.v2.we-stats.com/api/v1/sendLogs?cid=mufasa&cdsnum=1664272359206-sjn0000245-a61cb443-240f-4ccf-bff6-3a35b8a00b49&csid=null&ds=js&sdkVer=2.19.2.465.37bfd51
IP 52.238.253.184:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/sendLogs?cid=mufasa&cdsnum=1664272359206-sjn0000245-a61cb443-240f-4ccf-bff6-3a35b8a00b49&csid=null&ds=js&sdkVer=2.19.2.465.37bfd51 HTTP/1.1
Host: log-5d65a0ab.us.v2.we-stats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1344
Origin: http://business4alltech.com
Connection: keep-alive
Referer: http://business4alltech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 27 Sep 2022 09:52:42 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
business4alltech.com/rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_-2D42_sn_7BSGF42ED763MS7T7EGB2Q7FI37EODH6&svrid=-42&flavor=post&vi=CNRPHCADCOMOETTGASAGDURMHHBHPBKM-0&modifiedSince=1658643030046&rf=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&bp=3&app=893c324bd7e5ac65&crc=3115144747&en=zgefxirc&end=1
207.244.251.248404 Not Found 0 B URL HTTP/1.1 business4alltech.com/rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_-2D42_sn_7BSGF42ED763MS7T7EGB2Q7FI37EODH6&svrid=-42&flavor=post&vi=CNRPHCADCOMOETTGASAGDURMHHBHPBKM-0&modifiedSince=1658643030046&rf=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&bp=3&app=893c324bd7e5ac65&crc=3115144747&en=zgefxirc&end=1
IP 207.244.251.248:0
POST /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_-2D42_sn_7BSGF42ED763MS7T7EGB2Q7FI37EODH6&svrid=-42&flavor=post&vi=CNRPHCADCOMOETTGASAGDURMHHBHPBKM-0&modifiedSince=1658643030046&rf=http%3A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%3Fcmd%3Dsignon_submit%26id%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%26session%3D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&bp=3&app=893c324bd7e5ac65&crc=3115144747&en=zgefxirc&end=1 HTTP/1.1
Host: business4alltech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 1699
Origin: http://business4alltech.com
Connection: keep-alive
Referer: http://business4alltech.com/wp-content/uploads/2022/08/mtbank/auth.php?cmd=signon_submit&id=0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff&session=0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff
Cookie: utag_main=v_id:01837e5cc6b2007ea28a4fd90e080004400e500900918$_sn:1$_se:1$_ss:1$_st:1664274152947$ses_id:1664272352947%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:business4alltech.com; dtCookie=v_4_srv_-2D42_sn_7BSGF42ED763MS7T7EGB2Q7FI37EODH6; rxVisitor=1664272356443SBN61GTNOSFQFSKSAPF52D65U32035VQ; dtPC=-42$472356441_129h-vCNRPHCADCOMOETTGASAGDURMHHBHPBKM-0e0; rxvt=1664274157345|1664272356444; dtLatC=115; dtSa=-; cdContextId=2; bmuid=1664272356509-9FC712DC-702F-4971-B1B8-45D3F61C4EF4; sc_visit_start=1; s_visitStart=no%20value; s_pv=no%20value; s_vnum=2096272356569%26vn%3D1; s_invisit=true; s_nr=1664272356574-New; s_dslv=1664272356575; s_dslv_s=First%20Visit; s_fid=110AB39F6B5D0EAC-10E3BA2993730E32; s_ppvl=http%253A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%253Fcmd%253Dsignon_submit%2526id%253D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%2526session%253D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%2C93%2C93%2C939%2C1280%2C939%2C1280%2C1024%2C1%2CP; s_ppv=http%253A%2F%2Fbusiness4alltech.com%2Fwp-content%2Fuploads%2F2022%2F08%2Fmtbank%2Fauth.php%253Fcmd%253Dsignon_submit%2526id%253D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%2526session%253D0a09d386de67f9dc10b9bbe7b25baaff0a09d386de67f9dc10b9bbe7b25baaff%2C96%2C96%2C939%2C1280%2C939%2C1280%2C1024%2C1%2CP; s_cc=true; cdSNum=1664272359206-sjn0000245-a61cb443-240f-4ccf-bff6-3a35b8a00b49
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 09:52:40 GMT
Server: Apache
Access-Control-Allow-Origin: http://business4alltech.com
Access-Control-Allow-Credentials: true
Vary: Origin
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://business4alltech.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8