| mfg-financial.com/ftp/xchange/login.php |  54.85.200.131 | 301 Moved Permanently | 170 B |
URL HTTP/1.1mfg-financial.com/ftp/xchange/login.php IP54.85.200.131:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash5bf3a62c4baec1d7339bb0a03f5b9211 24008e686ae1f0102891d02c994cd38a403f10bf 646f4cebed77580971f73047ec463a1010e25d0101be2354f1ca6ed119b5ff7f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /ftp/xchange/login.php HTTP/1.1
Host: mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.19.10
Date: Fri, 23 Sep 2022 00:28:49 GMT
Content-Type: text/html
Content-Length: 170
Connection: keep-alive
Location: http://www.mfg-financial.com/ftp/xchange/login.php
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha26d0784548ecab22f417f3d689daf23 8893b79366bbadeb5c8d587b8f023e310694df1c 35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6008
Expires: Fri, 23 Sep 2022 02:08:57 GMT
Date: Fri, 23 Sep 2022 00:28:49 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 143.204.55.36 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash2d12f67fe57a87e7366b662d153a5582 d7b02d81cc74f24a251d9363e0f4b0a149264ec1 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 00:14:06 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WCqMeixxepDFc5US57ViTOaQ6THBnp5C2HEZh9sHJkd0gqLY69A3_g==
Age: 883
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashafb65a07bf7214addf83d17a53acba32 a8e973204431320aa7b362a4e73944520c4b51b9 46e1a9e6c98245afb7fa84bc6d9ba6844105024e2d3f56e28748e6c321475d02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46E1A9E6C98245AFB7FA84BC6D9BA6844105024E2D3F56E28748E6C321475D02"
Last-Modified: Wed, 21 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15239
Expires: Fri, 23 Sep 2022 04:42:48 GMT
Date: Fri, 23 Sep 2022 00:28:49 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: P2n/cZj0o+RQL6zMuTDuky8eWlk49/+450FlILpJNkCqxmvD3H5CNLG3EjWxqmdroT/pY0WDhRY=
x-amz-request-id: SW237YXB384BEK7Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 22 Sep 2022 23:44:05 GMT
age: 2684
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 00:28:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.mfg-financial.com/ftp/xchange/login.php |  104.16.68.197 | 301 Moved Permanently | 168 B |
URL HTTP/1.1www.mfg-financial.com/ftp/xchange/login.php IP104.16.68.197:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash7fcef5af46c476aefdcff7248195cdfc ff5a3b84620fb8270ae6781fdc406f08f1b88c1f 946bde26daab13c238c8b580bd7f21a2fee4bf265cfff5de3f90bb220b0937e8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /ftp/xchange/login.php HTTP/1.1
Host: www.mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 23 Sep 2022 00:28:49 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.mfg-financial.com/ftp/xchange/login.php
X-StackifyID: V2|08c1367d-d686-477c-89cb-e9909e01c660|C78253|CD44802
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=KdJfRNZNlObuMcMjF.LBOxQj5gdQYcj.m_p1yH7i__c-1663892929-0-Aas82Fcvqip0amdRzBAMLUjywTkIknCmCvOIpyOOPXT337o7MJlGHwaAGNZEE7qUEDbdyISk5SJriG8tR0XMwgEuMt7wPX/OXqnnWsEol/FO; path=/; expires=Fri, 23-Sep-22 00:58:49 GMT; domain=.www.mfg-financial.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 74ef29998c571c12-OSL
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash94ef93cbc40623c525ede5a7b4ccfadf 098055ebd55721fb32837fd049ac8fc2706b795e 3fa2dc8f50238182641ec48a1d004181f50bbe30978f0a1af8c007db6dae2ff3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:49 GMT
Server: ECS (amb/6B9F)
Content-Length: 279
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.36 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 23 Sep 2022 00:03:22 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 23 Sep 2022 00:13:10 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HZe-f9YHwOkR_g7u7_x76Tt7lgiImXRSrey28_chpDwJgmCGDY9STQ==
Age: 1527
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash86624f45fb3b7126dbe002f69c94dd86 30bcf274db5037122f989fb25dbf1e72c9ec417b 2cc9600578cf057dc499835773fb495caa60ac154c4945f0fc1f2b31d43f5502
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1257
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:50 GMT
Last-Modified: Fri, 23 Sep 2022 00:07:53 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.39.126.109 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.39.126.109:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cy83JCnZXzMH9SCP1UhWtA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PagkCnxP9+07IxTYGv3qtBcfUyw=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashab9170d59e1c01422d2c55356248b569 0df99ca360de0b69a7e79d8e79b6383fec4a5453 7747cc09f59efbc03c3663c9be6bb63248a43f8f310c1bae1466255e83a72455
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash375756444a8871bbe816165e294fb262 2f9e18473daa3daae633a4df448a2230e77f8c33 c2e94c3082cb76fad8f5ace3c686f46d43c807b7f2d3cb9f2b4d9965b91af4c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js |  151.101.85.229 | 200 OK | 2.9 kB |
URL HTTP/2cdn.jsdelivr.net/scrollreveal.js/3.1.4/scrollreveal.min.js IP151.101.85.229:0
File typeASCII text, with very long lines (8487), with no line terminators Hash7f7205a48c4dd9f9d3a7afd745cee35a e5b0d510fff64e1a33233d2ea024154a4dea0297 886406d8f1abe3c73a919f0ae135424c212c59df766cecbf4857db5f7fcb80f9
GET /scrollreveal.js/3.1.4/scrollreveal.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"2127-rqUEoxT8/cZfMBPhMhm4ySd2/9s"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 23 Sep 2022 00:28:50 GMT
age: 878115
x-served-by: cache-fra19174-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2933
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-24680519-10 | 172.217.21.168 | 200 OK | 42 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-24680519-10 IP172.217.21.168:0
File typeASCII text, with very long lines (1720) Hash33a713027afa70a47844953146449c4e 35a2de52d6d0fc5f92493bffa17ecc0e1a596ceb 52461f0656a98430a2216f2bd5d70aadb3ad3cf04abd7ede88401c721017f759
GET /gtag/js?id=UA-24680519-10 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Sep 2022 00:28:50 GMT
expires: Fri, 23 Sep 2022 00:28:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 23 Sep 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42276
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashab9170d59e1c01422d2c55356248b569 0df99ca360de0b69a7e79d8e79b6383fec4a5453 7747cc09f59efbc03c3663c9be6bb63248a43f8f310c1bae1466255e83a72455
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash9d99d918ee898be92ea8294e9184b0f4 70b362b826df21d20094dbbb317d5480bb655c39 df867c629b17b4f7dffcde612c65b78de60ae2d079524274e8215874de99185b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:50 GMT
Last-Modified: Thu, 22 Sep 2022 23:38:39 GMT
Server: ECS (nyb/1D16)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iRhz3FqNkinyjFAROGsysS9T6h85-n7uQ2TrU6Lvu6EYR6fQRyu6yA==
Age: 3011
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash9d99d918ee898be92ea8294e9184b0f4 70b362b826df21d20094dbbb317d5480bb655c39 df867c629b17b4f7dffcde612c65b78de60ae2d079524274e8215874de99185b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:50 GMT
Last-Modified: Fri, 23 Sep 2022 00:01:18 GMT
Server: ECS (dcb/7F14)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: C_9v3AN3WpUWgJY8I291KHg5m1cWW6hM-fTgU6JIgG468qFq2BWm5w==
Age: 1652
|
|
| static.fmgsuite.com/media/images/30479605-3e1d-4270-99b3-a38bd6cd4232.png | 54.230.111.28 | 200 OK | 43 kB |
URL HTTP/2static.fmgsuite.com/media/images/30479605-3e1d-4270-99b3-a38bd6cd4232.png IP54.230.111.28:0
File typePNG image data, 300 x 135, 8-bit/color RGBA, non-interlaced\012- data Hashf4c4803b8746c1e2c7def9f51ed87ddb 1ed5c591232b82b7d16213cd7a2724f58a783d1e bcb613bfe0f63bc17156dde681711e7811c14d3d044cbbce7f73ef7a5adfa78a
GET /media/images/30479605-3e1d-4270-99b3-a38bd6cd4232.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 42728
x-amz-replication-status: COMPLETED
last-modified: Thu, 23 May 2019 21:01:20 GMT
x-amz-version-id: Dx0ueDEqLw.nObmSM_ddMhzE3KLNePTD
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 02:03:09 GMT
etag: "f4c4803b8746c1e2c7def9f51ed87ddb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -qodkC25IkbMAgSC2TBN5gBZwFHF2fgqHNZ8ykuSKrqjFGkOmuGVqg==
age: 80742
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 | 104.18.20.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 IP104.18.20.226:0
Hasha0313140cfaaabf6f56a208468e4c9ba dcd7514879a74db8f76b3e4ac072cabbb6c0184e b0755f23b594be80f464f6bf32d31b389bd662784c46f3c69926c81c414d9393
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:28:50 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "5281B041E4E82D82A0825017C3CBEBA3727DE05B"
Expires: Fri, 23 Sep 2022 11:00:00 GMT
Last-Modified: Thu, 22 Sep 2022 23:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2423
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74ef29a28f49b503-OSL
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash375756444a8871bbe816165e294fb262 2f9e18473daa3daae633a4df448a2230e77f8c33 c2e94c3082cb76fad8f5ace3c686f46d43c807b7f2d3cb9f2b4d9965b91af4c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| static.fmgsuite.com/media/sourceImages/d0a75788-244f-4a14-8346-b0f82c5de81b.png?v=1 | 54.230.111.28 | 200 OK | 666 kB |
URL HTTP/2static.fmgsuite.com/media/sourceImages/d0a75788-244f-4a14-8346-b0f82c5de81b.png?v=1 IP54.230.111.28:0
File typePNG image data, 1383 x 1325, 8-bit/color RGBA, non-interlaced\012- data Size666 kB (666339 bytes) Hash8a5e83af60ea470d320acbe9c30e4176 6544a9d9c3f5a7b587f3e41c8e4a3ed887d0b3fd 1ae04324f6e37d8475a4e67f32d9e874e5f187326df33dbb4c32c6bd760e30ab
GET /media/sourceImages/d0a75788-244f-4a14-8346-b0f82c5de81b.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 666339
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Sep 2018 20:56:10 GMT
x-amz-version-id: Is37tVWycvjNiy_lRUSS.azsl5efiMfG
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 00:28:50 GMT
etag: "8a5e83af60ea470d320acbe9c30e4176"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7tDVxmHkJO21tObBmnIj817QKGhXA8c75m2-W_yA7zoTMb95xaWrBg==
age: 10557
X-Firefox-Spdy: h2
|
|
| static.fmgsuite.com/site/templates/global/img/assets/largethumb/195-largethumb-a.jpg?v=1 | 54.230.111.28 | 200 OK | 56 kB |
URL HTTP/2static.fmgsuite.com/site/templates/global/img/assets/largethumb/195-largethumb-a.jpg?v=1 IP54.230.111.28:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x460, components 3\012- data Hashb8686755e002e3b44e8e59f21fd34738 6f20cfcf2d9badfea75949c88e7ffa71346ce4be 78f2c0da5b951499b3759c10c254905cfc965bfb440a5dae9001faf32c820941
GET /site/templates/global/img/assets/largethumb/195-largethumb-a.jpg?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 56423
date: Thu, 22 Sep 2022 21:43:06 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 22:54:45 GMT
etag: "b8686755e002e3b44e8e59f21fd34738"
x-amz-server-side-encryption: AES256
x-amz-version-id: 3tjU932VpMkQbcO04raEuRtJ.9Vw6LDz
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 91ZVM6tJaJmLAF7n9en5bBrYTTAnKPxypF4EHk4wVs6OnUR6av0eOA==
age: 9945
X-Firefox-Spdy: h2
|
|
| static.fmgsuite.com/media/sourceImages/d3fd26e1-2ef1-4a13-a663-f9b955a6ec4c.png?v=1 | 54.230.111.28 | 200 OK | 278 kB |
URL HTTP/2static.fmgsuite.com/media/sourceImages/d3fd26e1-2ef1-4a13-a663-f9b955a6ec4c.png?v=1 IP54.230.111.28:0
File typePNG image data, 1579 x 1133, 8-bit/color RGBA, non-interlaced\012- data Size278 kB (277742 bytes) Hash6935235d36fe4dcc2bac1a3b97281e4b d36aa8952471ad8e55cccf170eb5bda8dba9cea3 364267d5fb647318ba3816ed66d16aa1468654bb1adeb41224a8703631cf6be5
GET /media/sourceImages/d3fd26e1-2ef1-4a13-a663-f9b955a6ec4c.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 277742
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Sep 2018 00:00:30 GMT
x-amz-version-id: sEI.B5MOU4GekIVDP1KGfwXW_x4YHB2R
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 00:28:50 GMT
etag: "6935235d36fe4dcc2bac1a3b97281e4b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U7FHhbHQLRSbRwLlOTZ4B4laowg01XyjOtFBXSvsOyvkC4OcyYMChg==
age: 56766
X-Firefox-Spdy: h2
|
|
| static.fmgsuite.com/media/sourceImages/b87ccca4-20b6-40e2-8f23-5619bf1a0dac.png?v=1 | 54.230.111.28 | 200 OK | 154 kB |
URL HTTP/2static.fmgsuite.com/media/sourceImages/b87ccca4-20b6-40e2-8f23-5619bf1a0dac.png?v=1 IP54.230.111.28:0
File typePNG image data, 900 x 565, 8-bit/color RGBA, non-interlaced\012- data Size154 kB (153789 bytes) Hash9501320cc17c42e1c32f1c6e4f66c234 622a06a6f629837d35e01c81f283280085d1c3cc a0e1c61ed13296e782b3b2ced418becbb99a6bfde7e4afcb5b4ee56219506c4d
GET /media/sourceImages/b87ccca4-20b6-40e2-8f23-5619bf1a0dac.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 153789
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Sep 2018 23:37:31 GMT
x-amz-version-id: TLyZq7_nhgyyaRkzWVJP_17Nnx67gsyr
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 00:28:50 GMT
etag: "9501320cc17c42e1c32f1c6e4f66c234"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aOK7FdSv3radi-0_DHksZnqtrxozDSjjt-bnAiPSipyXbrFnSYRyyA==
age: 25976
X-Firefox-Spdy: h2
|
|
| static.fmgsuite.com/media/sourceImages/9afb8c86-9aa4-4046-9fda-ee754ad40546.png?v=1 | 54.230.111.28 | 200 OK | 419 kB |
URL HTTP/2static.fmgsuite.com/media/sourceImages/9afb8c86-9aa4-4046-9fda-ee754ad40546.png?v=1 IP54.230.111.28:0
File typePNG image data, 1335 x 1023, 8-bit/color RGBA, non-interlaced\012- data Size419 kB (418932 bytes) Hashb73f3b86926091289a5378309a27125e f2d6c699d486d48575ec51055d8b8c5b72f986af 8f61d7c5bc0614ab720ea6406862245b0a0064c69a2e91ed8712392ec3797d3a
GET /media/sourceImages/9afb8c86-9aa4-4046-9fda-ee754ad40546.png?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 418932
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Sep 2018 23:53:26 GMT
x-amz-version-id: b5LJ33IzO_n8U4d4dJ74xcyteSUI7rLY
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 00:28:50 GMT
etag: "b73f3b86926091289a5378309a27125e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4Gb-CaWfR2wbrOhGOfXbOrlCnrRRtN3AikvaqbdAMhR2Z13p9eXPvQ==
age: 17205
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash9d99d918ee898be92ea8294e9184b0f4 70b362b826df21d20094dbbb317d5480bb655c39 df867c629b17b4f7dffcde612c65b78de60ae2d079524274e8215874de99185b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:50 GMT
Server: ECS (dcb/7FA4)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ssfZqtgfp1KdY7QO7mhJPYfsAwqOpdri1o3a6my9jKFJ-R7A7Z7RMg==
|
|
| static.fmgsuite.com/site/templates/global/img/assets/largethumb/015-largethumb-a.jpg?v=1 | 54.230.111.28 | 200 OK | 154 kB |
URL HTTP/2static.fmgsuite.com/site/templates/global/img/assets/largethumb/015-largethumb-a.jpg?v=1 IP54.230.111.28:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x460, components 3\012- data Size154 kB (153934 bytes) Hash6f47f3a8ce384da88afa641cc61c7880 da527966e3b4deadc5e76b54c6132786f136be20 351ffd57253fe2fad7f34dbe8cb0007bc6cbc97b771740cf1ca1822041cb907d
GET /site/templates/global/img/assets/largethumb/015-largethumb-a.jpg?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 153934
date: Thu, 22 Sep 2022 23:07:30 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 22:54:21 GMT
etag: "6f47f3a8ce384da88afa641cc61c7880"
x-amz-server-side-encryption: AES256
x-amz-version-id: d2cpCzumuoinZ.g8GgbMyhgZDH6pAX7B
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I52sOHYO4uPSRjFDzL3kVtOUau_mps_sgiWGoF0pK50klcxIOrwJHQ==
age: 4882
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash72a527d51c5262e8ef8db222898257a5 519f6eb168764d9c7eff34d8b632e0ce93234cf0 9451d7617606a4e3ff0cff49140a5738e61168b8d196a9961da9a79df1b77f9d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:51 GMT
Last-Modified: Thu, 22 Sep 2022 23:39:33 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kNbvy-g113Cus_yRl5WMBlXVAja6EIeaSUOgkBcSfIB-F7SQDU52QA==
Age: 2958
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash72a527d51c5262e8ef8db222898257a5 519f6eb168764d9c7eff34d8b632e0ce93234cf0 9451d7617606a4e3ff0cff49140a5738e61168b8d196a9961da9a79df1b77f9d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:51 GMT
Last-Modified: Thu, 22 Sep 2022 23:41:50 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eEDtEw4mz9ZhOUSoS3R0v56mqRNSiBL0MQlocFxy0M4TjUAFzFbCfA==
Age: 2821
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash72a527d51c5262e8ef8db222898257a5 519f6eb168764d9c7eff34d8b632e0ce93234cf0 9451d7617606a4e3ff0cff49140a5738e61168b8d196a9961da9a79df1b77f9d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:51 GMT
Last-Modified: Thu, 22 Sep 2022 23:29:30 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IFsVvbONJfp3B2DJ-hvl2BEuGsNyMi_nf0TonrOL1o8vpj6Cre1nAg==
Age: 3561
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash9d99d918ee898be92ea8294e9184b0f4 70b362b826df21d20094dbbb317d5480bb655c39 df867c629b17b4f7dffcde612c65b78de60ae2d079524274e8215874de99185b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:51 GMT
Server: ECS (dcb/7F84)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _IMhWeaaWRUtqVgkAflwKoWQ8kqGdYKtEXGWoyoTEFulnS9WSsOguQ==
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash72a527d51c5262e8ef8db222898257a5 519f6eb168764d9c7eff34d8b632e0ce93234cf0 9451d7617606a4e3ff0cff49140a5738e61168b8d196a9961da9a79df1b77f9d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:51 GMT
Last-Modified: Fri, 23 Sep 2022 00:00:19 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2NyRWfThomWTskHNwnmAtS8Us0nLf_saOThcgV6EsroHEPiO3m6A-w==
Age: 1712
|
|
| fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js | 52.217.41.12 | 200 OK | 3.3 kB |
URL HTTP/1.1fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/364377-lewis.js IP52.217.41.12:0
Hashf448749a26df1824c98578c627fa447a 104080f7a90c11902fbfa2de91161434952f9451 352125a8d3d51eca537dcd272c9246dc74bae48a765dca75a407f41eca1b36ea
GET /364377-lewis/js/364377-lewis.js HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: LNx8Ab6qqJrz5DKYNCdq9TCjOvWht3wo02vXG1I6/8rgeE2aMDL4dMXph1wUyLxsODw9YMdAyP0=
x-amz-request-id: H9QJXWH3DJ2ESATT
Date: Fri, 23 Sep 2022 00:28:52 GMT
Last-Modified: Thu, 17 Jan 2019 00:16:40 GMT
ETag: "f448749a26df1824c98578c627fa447a"
x-amz-version-id: 4jh_5HqPhQVhxqibCqYvVx18IMyPrpbi
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 3252
|
|
| fmg-websites-custom.s3.amazonaws.com/364377-lewis/css/364377-lewis.css | 52.217.41.12 | 200 OK | 13 kB |
URL HTTP/1.1fmg-websites-custom.s3.amazonaws.com/364377-lewis/css/364377-lewis.css IP52.217.41.12:0
File typeASCII text, with very long lines (12932) Hash638c5ba8ba5f04f72d17e1cb48fd628c 5ceca77706e1567187f31c11214c7458eb6e426f f552fcee3f77c82bb1a0accc50a1ce699cea6451ba26ab09db8bf60c5711d8fe
GET /364377-lewis/css/364377-lewis.css HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 1hyh2OJFQp8iYM/aoOfeyqZw1PFiURCa+xNpXDUr9QiF+ouiph6DEUTNMijBW2nFgIfD0bweZ08=
x-amz-request-id: H9QG0E9MTB4QEZR8
Date: Fri, 23 Sep 2022 00:28:52 GMT
Last-Modified: Fri, 22 Feb 2019 23:13:55 GMT
ETag: "638c5ba8ba5f04f72d17e1cb48fd628c"
x-amz-version-id: 5kGUp82_Se3w4Wt9lA7ms.T0bwsMyCbt
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 12978
|
|
| fmg-websites-custom.s3.amazonaws.com/exclusive-setup/template-fix/theme-24b-manhattan-fix.css | 52.217.41.12 | 200 OK | 57 B |
URL HTTP/1.1fmg-websites-custom.s3.amazonaws.com/exclusive-setup/template-fix/theme-24b-manhattan-fix.css IP52.217.41.12:0
Hash19d99265437b7d88803512b852416b70 4dfb715f6f427be1dcf91e043cca18b082fd1e5d 0c0165308fb3ed8a4a50bc883430422bbc3ca5994732fe190e79e84ed0c82b64
GET /exclusive-setup/template-fix/theme-24b-manhattan-fix.css HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: L8GcVGuifBAGrCo70AjwLEXQ3LLJYleqY4xwmNhfHN350fXi+fZOpgFcaInXr6ZCsOERrsjUDmo=
x-amz-request-id: H9QKNDATFGGDHF52
Date: Fri, 23 Sep 2022 00:28:52 GMT
Last-Modified: Wed, 13 Feb 2019 18:31:47 GMT
ETag: "19d99265437b7d88803512b852416b70"
x-amz-version-id: 5VD7sVAti71IVnvYdPKsXDvwUW4n0IWM
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 57
|
|
| static.fmgsuite.com/media/images/f9736cc9-65fa-4dd3-9b06-38fa70329828.jpg | 54.230.111.28 | 200 OK | 272 kB |
URL HTTP/2static.fmgsuite.com/media/images/f9736cc9-65fa-4dd3-9b06-38fa70329828.jpg IP54.230.111.28:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2118x775, components 3\012- data Size272 kB (272070 bytes) Hash08764fbaf581510596ae79301f8e4f9c ef9c776eb056b5fd9959a107fa8e3158123522c5 714b89e2b79a42b2c9cfba894dd7f891c434bce63d44dadedd9c2c3fbeeef81c
GET /media/images/f9736cc9-65fa-4dd3-9b06-38fa70329828.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 272070
date: Thu, 22 Sep 2022 02:03:09 GMT
x-amz-replication-status: COMPLETED
last-modified: Wed, 13 Feb 2019 17:19:20 GMT
etag: "08764fbaf581510596ae79301f8e4f9c"
x-amz-version-id: wk6GSmVOSUvgEMrCPW4OsbG_qgYn8I3_
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f_Jrkv5zMAwzVgT5bdxgbEEyn1sqFPTyit_EiXUxy6TQKkA1VlCJFA==
age: 80742
X-Firefox-Spdy: h2
|
|
| static.fmgsuite.com/media/images/c47dc1be-4915-4b76-853f-fd35e457cc99.jpg | 54.230.111.28 | 200 OK | 1.3 MB |
URL HTTP/2static.fmgsuite.com/media/images/c47dc1be-4915-4b76-853f-fd35e457cc99.jpg IP54.230.111.28:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2321x1440, components 3\012- data Size1.3 MB (1258678 bytes) Hash41a6e3876efddf12f46c659cb630af88 dd8770908c0580e472927a4439b9909c9c0e3f4c 58e1ac745c19b44f6a4673e9960051058386c3ee261b5a91334b5092f9771f4f
GET /media/images/c47dc1be-4915-4b76-853f-fd35e457cc99.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1258678
date: Thu, 22 Sep 2022 02:03:09 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 31 Jan 2019 16:35:44 GMT
etag: "41a6e3876efddf12f46c659cb630af88"
x-amz-version-id: wVepZlnDlan_sPhf0Vqdpe_.MT_tfzh1
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QbdExCcoSq-xNaQ5BywTjkv9wJKWM_AtXQIeeL-gZKgdfpMmmSdmIQ==
age: 80742
X-Firefox-Spdy: h2
|
|
| fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js | 52.217.41.12 | 200 OK | 1.2 kB |
URL HTTP/1.1fmg-websites-custom.s3.amazonaws.com/364377-lewis/js/scrollreveal.js IP52.217.41.12:0
Hash677ddd3d6626e41b98e201324c0c0348 0bc2a8a3f603f08581dedde2afa52866e2868fd0 448226a1b46607f9a5103e03a68f5982085e9cfd638c04eaffd17587fbf6bf23
GET /364377-lewis/js/scrollreveal.js HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dvlHsAZdPXNFXpkrNYT+Ftl4MmFs7lTGOkdbHyvEKvGeJ7wc5DyNG+6nJY/Eb+05Sac651eTBjI=
x-amz-request-id: H9QNQNKZC97HX9HY
Date: Fri, 23 Sep 2022 00:28:52 GMT
Last-Modified: Thu, 17 Jan 2019 00:16:40 GMT
ETag: "677ddd3d6626e41b98e201324c0c0348"
x-amz-version-id: 99ikK76voR0YNhd6SMvqWSrHbupjBHi_
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 1180
|
|
| static.fmgsuite.com/site/templates/007/fonts/fontawesome-webfont.woff2?v=4.7.0 | 54.230.111.28 | 200 OK | 77 kB |
URL HTTP/2static.fmgsuite.com/site/templates/007/fonts/fontawesome-webfont.woff2?v=4.7.0 IP54.230.111.28:0
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /site/templates/007/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://static.fmgsuite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 77160
date: Thu, 22 Sep 2022 02:03:09 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:37 GMT
etag: "af7ae505a9eed503f8b8e6982036873e"
x-amz-server-side-encryption: AES256
x-amz-version-id: vBVO7Rw4zjWHto9PdyTccpBKqQ1GEzTs
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3nZdVSO9g5PSqhOMTqmxlQwcl2gYCB7yWY0XUn1VE011MfhCITSY3w==
age: 80742
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashedd6c63988b69a64a51433c3fd91b0ba a0a41a5403a2c397d70cfa267c1d6407250df043 c9b1efff4ebf41ad54d3137ee7a93b688c66765df99e387ae730b39abe2f115f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| static.fmgsuite.com/site/templates/global/img/assets/largethumb/486-largethumb-a.jpg?v=1 | 54.230.111.28 | 200 OK | 31 kB |
URL HTTP/2static.fmgsuite.com/site/templates/global/img/assets/largethumb/486-largethumb-a.jpg?v=1 IP54.230.111.28:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x460, components 3\012- data Hash55b6860a6617d74f2cacc6d8c31005a9 0b0c5e87d35956d292f01dfcb07ad5064d13b325 6bdac6c7b7fd13451a1d33f975e76650ab4a0122bb666bf684f8cdb79d42f60b
GET /site/templates/global/img/assets/largethumb/486-largethumb-a.jpg?v=1 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 31134
date: Fri, 23 Sep 2022 00:28:52 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 29 Mar 2022 22:55:18 GMT
etag: "55b6860a6617d74f2cacc6d8c31005a9"
x-amz-server-side-encryption: AES256
x-amz-version-id: RNpb3kmdbx0wXIxgHzDtoQGAhQ_rayT2
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GHzldmA-MWLUd4HBECOM3AmJ0vNmsGV2HCUWeC9q--NdDdy3q6YrBA==
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 | 142.250.74.163 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 199110
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 | 142.250.74.163 | 200 OK | 23 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data Hashde69cf9e514df447d1b0bb16f49d2457 2ac78601179c3a63ba3f3f3081556b12ddcaf655 c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 199110
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashedd6c63988b69a64a51433c3fd91b0ba a0a41a5403a2c397d70cfa267c1d6407250df043 c9b1efff4ebf41ad54d3137ee7a93b688c66765df99e387ae730b39abe2f115f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8ebb267e443b81854ef9a01b3eb6489d b932e9e5679da5a9160da5429458041765509b52 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11332
Expires: Fri, 23 Sep 2022 03:37:43 GMT
Date: Fri, 23 Sep 2022 00:28:51 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8ebb267e443b81854ef9a01b3eb6489d b932e9e5679da5a9160da5429458041765509b52 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11332
Expires: Fri, 23 Sep 2022 03:37:43 GMT
Date: Fri, 23 Sep 2022 00:28:51 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8ebb267e443b81854ef9a01b3eb6489d b932e9e5679da5a9160da5429458041765509b52 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11332
Expires: Fri, 23 Sep 2022 03:37:43 GMT
Date: Fri, 23 Sep 2022 00:28:51 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8ebb267e443b81854ef9a01b3eb6489d b932e9e5679da5a9160da5429458041765509b52 4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11332
Expires: Fri, 23 Sep 2022 03:37:43 GMT
Date: Fri, 23 Sep 2022 00:28:51 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7606ff88f05062b66970d9805f38987a d47db5fcd83023b4a8de40a47d4510e183de387a 20f89dd859e5715e27c289040fac6a121248e5b6c06da0a7f186984ffb029eb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8497
x-amzn-requestid: ab65ba93-aad5-4845-b471-c50c14057c47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YvqujEsIoAMF8sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632957f6-6d4635bf713fd25147948c7b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 06:04:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: SZ6p5NLxuGUoEOZujwPbDGwUO0dZgiITud8RWOaSW_VciGRgBidY2A==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 19:36:01 GMT
age: 17570
etag: "d47db5fcd83023b4a8de40a47d4510e183de387a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b936e90-90ba-49d6-946e-b7cd524d23f9.jpeg | 34.120.237.76 | 200 OK | 7.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b936e90-90ba-49d6-946e-b7cd524d23f9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6243782119c18721ebfb39448a079e32 6131afd540498e8ead1b9937bc953fadbdb164f9 9f70c0b851ea5039eee2edf8d37f447946e2d2783d6ce257c0ccbcf9f262d289
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b936e90-90ba-49d6-946e-b7cd524d23f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7180
x-amzn-requestid: c08a48fa-b734-4ac7-aa76-a1225135b792
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YsS2qHbcIAMFgEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6327fe90-4a5915de1b0da7a07efddf86;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 05:30:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vR0dXVmBUtMyvJBEYJmsekEBRZ0DS4hJQN6JDhTyP6HGf3LsYHN9WQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 09:08:11 GMT
age: 55240
etag: "6131afd540498e8ead1b9937bc953fadbdb164f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8ea5f06ad31f0cedd2cb5c6df82f35f4 60a83a1618ffae06e49ca3002bac1db9980dcfe8 5f6a4cb92c016ef0f229b11d727e9680a15b10782b5bfe9e66ad9d100b458d8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10279
x-amzn-requestid: 2ff2c324-51c5-484d-b049-3eacbdc1024a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yyj8THHdoAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a804e-0f4da4ba2a84679b3fd297fc;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 03:09:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6uqNnpll2kgC_0_t5e9yp0AgFAvprQq_GF_jgwj2sX2TE9S1l023Aw==
via: 1.1 c21a0d27ceec21e266c9f962d0349438.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 05:29:48 GMT
age: 68343
etag: "60a83a1618ffae06e49ca3002bac1db9980dcfe8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg | 34.120.237.76 | 200 OK | 5.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash61059307f07edc4e2ba9d07a258bca43 370d166426ad83fc04ccb6e300238d8cb6ab644a 55ec802097ab49f275686e99844ff4a3b554c8998213bb9c3f0380709297c55b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5936
x-amzn-requestid: 39e79389-c158-4427-aae0-b1d0dc1d0377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VowElZoAMF2Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd1-2da28eb66f876af76158b090;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -DSp0__jaBzizsfagTtIpwhkPqkvjS1L6T17J0OS5W0QhZww03ywpw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:42:39 GMT
age: 6372
etag: "370d166426ad83fc04ccb6e300238d8cb6ab644a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg | 34.120.237.76 | 200 OK | 9.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3056431736af42cc145a77dbc77c45a7 977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e d299e38c678f4c4548cd2e7cf7ff1b07910b316bfc8b13c492b4fbee0a66b079
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9892
x-amzn-requestid: c492a572-0b9e-4176-91e9-a11fedf8c06e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yyj8OE7nIAMFwQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a804e-0d6e804d4368880535f6c115;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 03:09:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Te1oX4iUxYNB19Uuk39k9DrhHiCVSwnNSpdYQDK_N5AYtXqJIe-ggg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 04:26:52 GMT
age: 72119
etag: "977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Lato:400,700 | 216.58.211.10 | 200 OK | 10 kB |
URL HTTP/2fonts.googleapis.com/css?family=Lato:400,700 IP216.58.211.10:0
Hash2397cfc3b269d6a0756a975117121c92 9727d55b6db15cbe34a77fb5d6ac11da92131818 ddb8aeb27bc08237f48a9577cd66e1bf19184d6675a7603d68fe6a0b77af121f
GET /css?family=Lato:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Sep 2022 00:28:50 GMT
date: Fri, 23 Sep 2022 00:28:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash3298c9d0f91ce5f263a4288f2f5eaf34 e81662bc7ff8c1640f5979374d3d08d3106dc240 a31e538b97cf3534b1fd41d3fa463838ba1b13b1f0f7f0ea44fbde8a989e6894
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:51 GMT
Last-Modified: Thu, 22 Sep 2022 23:25:30 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: P2Nq3b2KIGEAmvTDthnkDBXbCIzBeyY2GI5PX-KCfu2RZOhhMueffQ==
Age: 3801
|
|
| static.fmgsuite.com/media/images/d5549bfa-c8d0-4c6c-b679-e1ed71b20c6d.png | 54.230.111.28 | 200 OK | 168 B |
URL HTTP/2static.fmgsuite.com/media/images/d5549bfa-c8d0-4c6c-b679-e1ed71b20c6d.png IP54.230.111.28:0
File typePNG image data, 292 x 34, 8-bit/color RGBA, non-interlaced\012- data Hashcdd1015adf277e7dd28c51a94bd43f6e 304309145f7888a56893015417479140f2f2ea8d d6dd5fc86404df93ebf4fd148b2b2249377009622668808cc0ff5811233bfc6c
GET /media/images/d5549bfa-c8d0-4c6c-b679-e1ed71b20c6d.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 168
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Sep 2018 16:12:37 GMT
x-amz-version-id: OZdrjeDpF64qfLGqflCBeyR7G0HBMl28
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 00:28:51 GMT
etag: "cdd1015adf277e7dd28c51a94bd43f6e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L3WHD74nITpt9tlMqi9vxEbKvqKXFjzcXBw4tLyxANnfbqarmvZp9Q==
age: 141
X-Firefox-Spdy: h2
|
|
| static.fmgsuite.com/media/images/80a0a59d-37e9-4cac-9999-3b7f80029c37.png | 54.230.111.28 | 200 OK | 168 B |
URL HTTP/2static.fmgsuite.com/media/images/80a0a59d-37e9-4cac-9999-3b7f80029c37.png IP54.230.111.28:0
File typePNG image data, 292 x 34, 8-bit/color RGBA, non-interlaced\012- data Hashcdd1015adf277e7dd28c51a94bd43f6e 304309145f7888a56893015417479140f2f2ea8d d6dd5fc86404df93ebf4fd148b2b2249377009622668808cc0ff5811233bfc6c
GET /media/images/80a0a59d-37e9-4cac-9999-3b7f80029c37.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 168
x-amz-replication-status: COMPLETED
last-modified: Fri, 14 Sep 2018 16:12:29 GMT
x-amz-version-id: Up8CjEy78drhM2Cg4IuVmC9HzsRMf.Fz
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 00:28:51 GMT
etag: "cdd1015adf277e7dd28c51a94bd43f6e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vL5JIjXI-0h-VKruuyFgHVt_ktr7zbBGKGrM5oe4Z4PPpfcRAy1S4A==
age: 141
X-Firefox-Spdy: h2
|
|
| static.fmgsuite.com/media/images/5da9d55f-4874-4c04-b98b-442f93101464.png | 54.230.111.28 | 200 OK | 168 B |
URL HTTP/2static.fmgsuite.com/media/images/5da9d55f-4874-4c04-b98b-442f93101464.png IP54.230.111.28:0
File typePNG image data, 292 x 34, 8-bit/color RGBA, non-interlaced\012- data Hash10209bfe8cabf4c2e596031854cf8365 2371b6d25b98030dfa4bb2c47c0266d74d05877d 728d270b5c9b6c4bc87a34da5686c12c3d1201f94b4d0997a3823553bc305f6d
GET /media/images/5da9d55f-4874-4c04-b98b-442f93101464.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 168
x-amz-replication-status: COMPLETED
last-modified: Mon, 10 Sep 2018 17:50:01 GMT
x-amz-version-id: PmXH8lkRIsqv0xwMDW7KQMz5n9V9Jckd
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 00:28:51 GMT
etag: "10209bfe8cabf4c2e596031854cf8365"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Mb-xvyrfgGtp9Z5vmFPfArt5KOZrUmu5GKuFOOW5Q_vjqGq82qm-8g==
age: 140
X-Firefox-Spdy: h2
|
|
| s3.amazonaws.com/static.contentres.com/media/images/ff7f9876-3fba-4104-b6c4-195bf1641866.png | 54.231.201.248 | 200 OK | 17 kB |
URL HTTP/1.1s3.amazonaws.com/static.contentres.com/media/images/ff7f9876-3fba-4104-b6c4-195bf1641866.png IP54.231.201.248:0
File typePNG image data, 1198 x 328, 8-bit/color RGBA, non-interlaced\012- data Hashf42aee9b482dcb7962a091de97caedeb 1731bb19c7e74a1f1c442264a52263b9d1453438 6e43d5829103f07e97318e24f33221f5682037f31ca4800cb5811293a3ebb510
GET /static.contentres.com/media/images/ff7f9876-3fba-4104-b6c4-195bf1641866.png HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fmg-websites-custom.s3.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Hf744YLk8r24Pr7n0BgZXMBEomHEgn1NORyhUcFIWOla72dH8Z0WsOHEAUlKDb0aT3nz9Nz1Ayk=
x-amz-request-id: H9QMB8RR0Z6XV7WX
Date: Fri, 23 Sep 2022 00:28:52 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 12 Sep 2018 18:16:35 GMT
ETag: "f42aee9b482dcb7962a091de97caedeb"
x-amz-version-id: XzWSlVQ8qWa.PAOKIkSSDPaH.razXRCx
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 17159
|
|
| static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586 | 54.230.111.72 | 200 OK | 22 kB |
URL HTTP/1.1static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586 IP54.230.111.72:0
File typeASCII text, with very long lines (32144) Hash5869e4aefabe888c591606de2e2f5d78 1533266b9ee27da5a254f6344c8805912e04041f 101990976c44f678463721c36b31539c9382c5a9ef9323fe3765dc99f1f527c9
GET /beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586 HTTP/1.1
Host: static.site24x7rum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=ISO-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 23 Sep 2022 00:28:51 GMT
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Server: ZGS
Vary: accept-encoding
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RdjjKAZr1dhNVNP1TeLw_FRaJsV6KN0glsWNoJufa5phrN1s6qyMcA==
|
|
| static.fmgsuite.com/media/images/92d7e6bf-10a6-424b-876e-6d626e69d74f.ico | 54.230.111.28 | 200 OK | 4.2 kB |
URL HTTP/2static.fmgsuite.com/media/images/92d7e6bf-10a6-424b-876e-6d626e69d74f.ico IP54.230.111.28:0
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data Hashe338cca5f3614abe4255fd0c64b41d6c 71f416a1b0fbd19ef80f7bc74c0dfaf998b6cf09 278329fac12f4c5b91fa85d964dc0404298fd6d0becec4743a3b92f967c64cd0
GET /media/images/92d7e6bf-10a6-424b-876e-6d626e69d74f.ico HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 4158
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Nov 2018 19:12:26 GMT
x-amz-version-id: K06K08oKzcGpBu8.7r9eLuG1bP.GXMuc
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 02:03:10 GMT
etag: "e338cca5f3614abe4255fd0c64b41d6c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NVva7DGzKQjDBbUQegoRgeR2tDWS2a7KT1AeuV5AjAff5O5LObrtrA==
age: 80742
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hashcae538dcce82598fbe43c0bf443e62dd cc68ac6be9c5e0087a0000e5735b83270ace30f5 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Thu, 22 Sep 2022 22:41:09 GMT
expires: Fri, 23 Sep 2022 00:41:09 GMT
cache-control: public, max-age=7200
age: 6463
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/j/collect?v=1&_v=j97&a=1957791448&t=pageview&_s=1&dl=https%3A%2F%2Fwww.mfg-financial.com%2F%3FredirectUrl%3D%2Fftp%2Fxchange%2Flogin.php&ul=en-us&de=UTF-8&dt=Home&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=1072151751&gjid=1598206821&cid=1540053079.1663892931&tid=UA-24680519-10&_gid=301376811.1663892931&_r=1>m=2ou9l0&z=636065322 | 142.250.74.174 | 200 OK | 2 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j97&a=1957791448&t=pageview&_s=1&dl=https%3A%2F%2Fwww.mfg-financial.com%2F%3FredirectUrl%3D%2Fftp%2Fxchange%2Flogin.php&ul=en-us&de=UTF-8&dt=Home&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=1072151751&gjid=1598206821&cid=1540053079.1663892931&tid=UA-24680519-10&_gid=301376811.1663892931&_r=1>m=2ou9l0&z=636065322 IP142.250.74.174:0
File typeASCII text, with no line terminators Hashcc7a1e792bca8ccb1946b7a07f6dbc03 11a2757082428311f587b7664fa9840376137f80 de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j97&a=1957791448&t=pageview&_s=1&dl=https%3A%2F%2Fwww.mfg-financial.com%2F%3FredirectUrl%3D%2Fftp%2Fxchange%2Flogin.php&ul=en-us&de=UTF-8&dt=Home&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=1072151751&gjid=1598206821&cid=1540053079.1663892931&tid=UA-24680519-10&_gid=301376811.1663892931&_r=1>m=2ou9l0&z=636065322 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.mfg-financial.com
date: Fri, 23 Sep 2022 00:28:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe6561e23e9d181a4b18c7174cb89a590 221a300522f62c4bde7dd23420609a12ae3bd5b6 a66e6d4e834dfd29d86921222d86c7f8ac5d11a4e0c83ab40ff150629f2b9cec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-24680519-10&cid=1540053079.1663892931&jid=1072151751&gjid=1598206821&_gid=301376811.1663892931&_u=YEBAAUAAAAAAAC~&z=2087665719 | 142.251.1.156 | 200 OK | 4 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-24680519-10&cid=1540053079.1663892931&jid=1072151751&gjid=1598206821&_gid=301376811.1663892931&_u=YEBAAUAAAAAAAC~&z=2087665719 IP142.251.1.156:0
File typeASCII text, with no line terminators Hash48c0473b7821185d937e685216e2168b 3743e47f8a429a5e87b86cb582d78940733d9d2e 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-24680519-10&cid=1540053079.1663892931&jid=1072151751&gjid=1598206821&_gid=301376811.1663892931&_u=YEBAAUAAAAAAAC~&z=2087665719 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.mfg-financial.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 23 Sep 2022 00:28:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash75a6c13f18620214e5e013385d752044 174c34759a1e50884846a2505f0be16c285d75cc fe6fcbbe324ceefc1e833208faedaeae6934b34f868690e5ad4676b02c0b3bf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe6561e23e9d181a4b18c7174cb89a590 221a300522f62c4bde7dd23420609a12ae3bd5b6 a66e6d4e834dfd29d86921222d86c7f8ac5d11a4e0c83ab40ff150629f2b9cec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb19c871f8d68a5cf507d6d29cb89da17 11197481d015eb6d7811381df5ee51d9ff31bb3b 48ce88e049d6f9a08ab2bd0812c037b4b4401e1a788cacefb539831978054b7c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1540053079.1663892931&jid=1072151751&_u=YEBAAUAAAAAAAC~&z=1905293854 | 142.250.74.164 | 200 OK | 42 B |
URL HTTP/2www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1540053079.1663892931&jid=1072151751&_u=YEBAAUAAAAAAAC~&z=1905293854 IP142.250.74.164:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1540053079.1663892931&jid=1072151751&_u=YEBAAUAAAAAAAC~&z=1905293854 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Sep 2022 00:28:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1540053079.1663892931&jid=1072151751&_u=YEBAAUAAAAAAAC~&z=1905293854 | 142.250.74.3 | 200 OK | 42 B |
URL HTTP/2www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1540053079.1663892931&jid=1072151751&_u=YEBAAUAAAAAAAC~&z=1905293854 IP142.250.74.3:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=1540053079.1663892931&jid=1072151751&_u=YEBAAUAAAAAAAC~&z=1905293854 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 23 Sep 2022 00:28:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashf4589cef50f0426b60bf56a1fadb93a5 7db92337dc8c6161e31f89f49db18c4cd22b871f db8b6e5f5a4e43b9e8e835e9434f0f94ead7965c04dc4641dad639ac778d8215
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb19c871f8d68a5cf507d6d29cb89da17 11197481d015eb6d7811381df5ee51d9ff31bb3b 48ce88e049d6f9a08ab2bd0812c037b4b4401e1a788cacefb539831978054b7c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:28:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash2e763afe00ea49836737801e3210a68f 4d75845e37a0eb1d55a6c47ab5fa5cf7d0e52541 a22d7d7d09f2ce313bc05d24dac08dceea69c8a2ff79dddfd08bfe06c7ebe11e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:28:52 GMT
Last-Modified: Thu, 22 Sep 2022 22:48:06 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6ETj-rXva0Gvmpu1otqO4vs6OO0PW-oKIm_8Dm6QwHX11mwuCm9PAA==
Age: 6046
|
|
| col.site24x7rum.com/rum/data | 54.187.55.4 | 200 OK | 0 B |
URL HTTP/2col.site24x7rum.com/rum/data IP54.187.55.4:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rum/data HTTP/1.1
Host: col.site24x7rum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1999
Origin: https://www.mfg-financial.com
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 00:28:52 GMT
content-type: application/json;charset=ISO-8859-1
content-length: 0
access-control-allow-methods: POST,OPTIONS
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-headers: request-id, request-context, Origin, Accept-Language
set-cookie: s247cname=e1ebc00d-904d-43c6-8adf-73b558ac8778;path=/;SameSite=None;Secure;priority=high
_zcsr_tmp=e1ebc00d-904d-43c6-8adf-73b558ac8778;path=/;SameSite=Strict;Secure;priority=high
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
vary: Origin
server: ZGS
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8822718-7784-42f7-9be3-17d81593a755.jpeg | 34.120.237.76 | 200 OK | 5.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8822718-7784-42f7-9be3-17d81593a755.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb577444b5b0cf15747fe28a9d7f22d53 e6097275af3204124c48aa0d876eba0d18b26e7e 0f57e130b23b87fa4e1f9c2a2beff54f1ca73d87a244442558209e378befef11
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8822718-7784-42f7-9be3-17d81593a755.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4999
x-amzn-requestid: 6f7b073e-f199-4bfa-8f9c-6688dbfba15a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn7p7GyRIAMF1EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263fd8-566d8b3c1c25e3fa36259812;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:44:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 67IkCpdOLJbKDPzgrIgyWV4axpopLuln041fPgEQKn0Zc2dvdDHnkA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:54:39 GMT
age: 5659
etag: "e6097275af3204124c48aa0d876eba0d18b26e7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.mfg-financial.com/ftp/xchange/login.php | 104.16.66.197 | 302 Found | 0 B |
URL HTTP/2www.mfg-financial.com/ftp/xchange/login.php IP104.16.66.197:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /ftp/xchange/login.php HTTP/1.1
Host: www.mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Fri, 23 Sep 2022 00:28:50 GMT
content-type: text/html; charset=utf-8
location: https://www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php
x-stackifyid: V2|aa979267-175f-422f-93b3-f2c55fd835ff|C78253|CD44802
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=4n0g3QvXy8DMane7pj2FeJTKiSPjpPSwoDJyniVUMg4-1663892930-0-AU5puNPb27C0jG5Wjxr+BIlPk1bmLiSMero3AIFUubW8LRxvk4cpuhWsxk7IVuzPTae86bJBspFqXvrKJiV5zocQajIfSrDBVzXa4USuAEKt; path=/; expires=Fri, 23-Sep-22 00:58:50 GMT; domain=.www.mfg-financial.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 74ef299c7ba2b51b-OSL
X-Firefox-Spdy: h2
|
|
| www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php | 104.16.66.197 | 200 OK | 0 B |
URL HTTP/2www.mfg-financial.com/?redirectUrl=/ftp/xchange/login.php IP104.16.66.197:0
GET /?redirectUrl=/ftp/xchange/login.php HTTP/1.1
Host: www.mfg-financial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __cf_bm=4n0g3QvXy8DMane7pj2FeJTKiSPjpPSwoDJyniVUMg4-1663892930-0-AU5puNPb27C0jG5Wjxr+BIlPk1bmLiSMero3AIFUubW8LRxvk4cpuhWsxk7IVuzPTae86bJBspFqXvrKJiV5zocQajIfSrDBVzXa4USuAEKt
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Sep 2022 00:28:50 GMT
content-type: text/html; charset=utf-8
cache-control: private
vary: Accept-Encoding
x-stackifyid: V2|f72e324f-ef5d-425f-b719-5b05d5292bf7|C78253|CD19159
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74ef299f7cbdb51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.29790.353 | 54.230.111.28 | 200 OK | 0 B |
URL HTTP/2static.fmgsuite.com/site/templates/007/dist/scripts.js?v=2.86.45.29790.353 IP54.230.111.28:0
GET /site/templates/007/dist/scripts.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfg-financial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
date: Thu, 22 Sep 2022 16:39:39 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:36 GMT
etag: W/"1e64aeff7efbad65f6f8e256dce05ed1"
x-amz-server-side-encryption: AES256
x-amz-version-id: oJFrxe64h0nObFgJWKFFdw.UUCSRtUTs
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: putzb4ploEvWT3y06AEbmdVzRuaVWxxqkW14goOeUKwuAWP_yC1jsw==
age: 28153
X-Firefox-Spdy: h2
|
|