email.mail.usbfund.com/c/eJxdkdtqAyEQhp9G7zZ42kMuvCiUvMYy6uxGqrvBQ0LevqZJSygIo_Mp__y_qPkwMn5UU6-o04aNA18szWVPOCdcNOdSSXrWbhA4OWdxglHYcRBmsGYEzo4GmHEDLQnsF5iAc7lfUBMhLMQL-HVrWxr0uZRLJvKDiFNbt9vtULNZ6uYOdo-ts2LpoMsRQuhMzX7DnLuww_Z4IE-1xDnvNVkk8tPAHbcVViRieICIztfYwK9khxF8eNG_ORpP7Wbpsm32umVP__SIkG8-vGvhKDZRrwUTggumhGRM9gcumZM49qN0ToDpiWIPvXdHNGlna0o-Y6NXj7lgCPYHFV22Mj-TLdpGM7_KFdL8lHx-QK1thhafg0U6mAyAMu34DZbOj2k
302 Found 650 B URL HTTP/1.1 email.mail.usbfund.com/c/eJxdkdtqAyEQhp9G7zZ42kMuvCiUvMYy6uxGqrvBQ0LevqZJSygIo_Mp__y_qPkwMn5UU6-o04aNA18szWVPOCdcNOdSSXrWbhA4OWdxglHYcRBmsGYEzo4GmHEDLQnsF5iAc7lfUBMhLMQL-HVrWxr0uZRLJvKDiFNbt9vtULNZ6uYOdo-ts2LpoMsRQuhMzX7DnLuww_Z4IE-1xDnvNVkk8tPAHbcVViRieICIztfYwK9khxF8eNG_ORpP7Wbpsm32umVP__SIkG8-vGvhKDZRrwUTggumhGRM9gcumZM49qN0ToDpiWIPvXdHNGlna0o-Y6NXj7lgCPYHFV22Mj-TLdpGM7_KFdL8lHx-QK1thhafg0U6mAyAMu34DZbOj2k
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (340)
Hash f974de9d863f5c73c799a44400421ff0
00ecc17127a3b453efc9dbf4114c36b5224633cb
911cfa84a182b9477d6c3df21d0eabb2102062643072cf508f860bc29deb5d10
Analyzer Verdict Alert fortinet Malware
GET /c/eJxdkdtqAyEQhp9G7zZ42kMuvCiUvMYy6uxGqrvBQ0LevqZJSygIo_Mp__y_qPkwMn5UU6-o04aNA18szWVPOCdcNOdSSXrWbhA4OWdxglHYcRBmsGYEzo4GmHEDLQnsF5iAc7lfUBMhLMQL-HVrWxr0uZRLJvKDiFNbt9vtULNZ6uYOdo-ts2LpoMsRQuhMzX7DnLuww_Z4IE-1xDnvNVkk8tPAHbcVViRieICIztfYwK9khxF8eNG_ORpP7Wbpsm32umVP__SIkG8-vGvhKDZRrwUTggumhGRM9gcumZM49qN0ToDpiWIPvXdHNGlna0o-Y6NXj7lgCPYHFV22Mj-TLdpGM7_KFdL8lHx-QK1thhafg0U6mAyAMu34DZbOj2k HTTP/1.1
Host: email.mail.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: no-store
Content-Length: 650
Content-Type: text/html
Date: Mon, 05 Dec 2022 07:06:50 GMT
Location: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
X-Robots-Tag: noindex
X-Xss-Protection: 1; mode=block
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12269
Expires: Mon, 05 Dec 2022 10:31:19 GMT
Date: Mon, 05 Dec 2022 07:06:50 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6288
Cache-Control: max-age=104954
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:51 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 12:16:05 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 06:20:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2798
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11975
Expires: Mon, 05 Dec 2022 10:26:26 GMT
Date: Mon, 05 Dec 2022 07:06:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: OVrxN1FPP4jfKENg2kr+qV5DXRjSEPQZl9YJ42HvtmYB/SiKHIAISpVgroF/xp95It1LCfKjZds=
x-amz-request-id: DMM4NZCAJGQ951NJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 06:47:18 GMT
age: 1173
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 07:06:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f173d2f092fea0ac66124173f169e5b
30dbaec80a1529e847e9f62adeab139644be2707
b96d1c3fad1be62e2672a3e91bcb6bbf00245e814817d7f516772785c89a8458
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B96D1C3FAD1BE62E2672A3E91BCB6BBF00245E814817D7F516772785C89A8458"
Last-Modified: Sun, 04 Dec 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21560
Expires: Mon, 05 Dec 2022 13:06:11 GMT
Date: Mon, 05 Dec 2022 07:06:51 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 06:11:19 GMT
cache-control: public,max-age=3600
age: 3332
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6282
Cache-Control: max-age=99882
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:51 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 10:51:33 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 05 Dec 2022 01:28:24 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7FhNw1_AUQjTjbEyy9YV8pdednp1oWZIXE4boUxfSheFZ5C_pVkDyg==
age: 20309
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CRuSFWe7KY8CnM/J9EJHYQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DUsdXypA8X9w2C6kueM0s0/3mSc=
www.usbfund.com/wp-content/themes/usb/css/grid.css
200 OK 10 kB URL HTTP/2 www.usbfund.com/wp-content/themes/usb/css/grid.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type assembler source, ASCII text, with very long lines (3536), with CRLF line terminators
Hash 8ca3e3908b8e627dd53a2bde9ab330b4
dfc94081f2e0acfbc95cb633810897271692e5db
5a17844298059c3adb2103842f6893bf6a798221afa1c7a3217c610fc4aebeec
GET /wp-content/themes/usb/css/grid.css HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:35:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 10146
content-type: text/css
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/plugins/wp-pagenavi/pagenavi-css.css
200 OK 239 B URL HTTP/2 www.usbfund.com/wp-content/plugins/wp-pagenavi/pagenavi-css.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 21fec527969cbcfec759744ce51f94c0
827130fb99b0005a5206028abfe82e93610184f2
fe2a280a5ffe9f5d3b1bf125035d478e46bae689a2f0cde07d48bef1ba7c74b1
GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Oct 2021 18:28:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 239
content-type: text/css
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/plugins/AffiliateWP-master/assets/css/forms.min.css
200 OK 1.1 kB URL HTTP/2 www.usbfund.com/wp-content/plugins/AffiliateWP-master/assets/css/forms.min.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3296), with no line terminators
Hash e4f0e46d63eb641d8cfe1579ff0217cb
37e2ef45ef74f0a3b869d447b4d9e22d0b424945
6b7e532056e7c449a8e080eb2967563fdb20ce9cfdcb95216205a769b65033c4
GET /wp-content/plugins/AffiliateWP-master/assets/css/forms.min.css HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:24:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1141
content-type: text/css
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
assets.anytrack.io/1y0o6qdBqYHr.js
200 OK 103 B URL HTTP/2 assets.anytrack.io/1y0o6qdBqYHr.js
IP
File type ASCII text, with no line terminators
Hash 69b5271584dd67a9e6ae79216fe30110
7753fe034a0843770954f6979f6830ff9a82f987
b55a87e172f834369dfb6a2176712509026e5b3de676343ccdc64410245081d9
GET /1y0o6qdBqYHr.js HTTP/1.1
Host: assets.anytrack.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 103
access-control-allow-origin: *
date: Mon, 05 Dec 2022 07:06:41 GMT
cache-control: public, max-age=600
etag: W/"67-d1P+A0oIQ3cJVPaXn2gw/5qC+Yc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iWbMz5TSsCG2ZnJGqh5Ws30BhZ03bgPd6pyBjs3YgXXbbF_n5I-fSQ==
age: 160
X-Firefox-Spdy: h2
scripts.iconnode.com/100980.js
200 OK 7.7 kB URL HTTP/2 scripts.iconnode.com/100980.js
IP
File type Unicode text, UTF-8 text, with very long lines (46582), with no line terminators
Hash 05a6d57113e7870d8851ed0faf8ca12f
315c52641f469ec7e571648d5333982579cb6da3
0f4d04e15b0a5cb9f2e59f3cc9a7b36d522db0e7712454d1f962e77723348eb3
GET /100980.js HTTP/1.1
Host: scripts.iconnode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 7683
last-modified: Mon, 26 Sep 2022 18:10:24 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 06:37:55 GMT
cache-control: max-age=0
etag: "05a6d57113e7870d8851ed0faf8ca12f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CQekZ-7NFDngAcCakoaU4kqMGaau9DSXJPX9hx1WV1X-ZhQxL0iBhg==
age: 29709
X-Firefox-Spdy: h2
code.jquery.com/jquery-migrate-1.2.1.js
200 OK 5.8 kB URL HTTP/2 code.jquery.com/jquery-migrate-1.2.1.js
IP
Hash ab50f392b13415af57f9720f4d24e981
8bee0d6d15bc0bf62197f6a33493df7494bf42c2
3c7ae468bcd5eefaf92cfac278a5a998f871e0aaa190f87b0f56fd79f93d00b7
GET /jquery-migrate-1.2.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:52 GMT
content-encoding: gzip
content-length: 5783
content-type: application/javascript; charset=utf-8
last-modified: Fri, 12 Aug 2022 13:47:02 GMT
accept-ranges: bytes
server: nginx
etag: W/"62f659d6-40ed"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670224012.dop002.sk1.t,1670224012.cds026.sk1.hn,1670224012.cds234.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5f16a534222e5749ef240d413826c2f6
11683d84d420dd6f919425094edb8961278f7fed
691ebf7feb1f7d6ae7e5e7efd678626c62042dda520506f262c7d9a67a48e3ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 955ed67bbb1ab4603216dbbd803b3d3a
55c7f2732bbc251aeab384e73c3b648a0be5e7c8
025c44944ac12bef7996938c5162897daa4c8f60d2d37ae636881cc2d03f7bc4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5610
Cache-Control: max-age=102826
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Etag: "638c714c-118"
Expires: Tue, 06 Dec 2022 11:40:38 GMT
Last-Modified: Sun, 04 Dec 2022 10:07:08 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 399d68606c3eca4bf8ad3253e90fbd8c
d0328251de27f93f94fce2e529b74931189a158a
9136e12c3eed4f1b9184d6ec4fd97fc08aec2972bd54e13ef740953e219f8bd0
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 07:06:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 09 Dec 2022 05:13:18 GMT
ETag: "d0328251de27f93f94fce2e529b74931189a158a"
Last-Modified: Mon, 05 Dec 2022 05:13:19 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 611
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774af10d98ce0b69-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-210860007-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-210860007-1
IP
File type ASCII text, with very long lines (1921)
Hash d2085e785d23412ab55ac918ef383469
3a6a1ef40120a665334e1833c844d331eafb6b66
b4f8f3945d6370bda348689b800ee2933e6f9656e25605e6a573213ad9897ff2
GET /gtag/js?id=UA-210860007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:52 GMT
expires: Mon, 05 Dec 2022 07:06:52 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43628
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.usbfund.com/wp-content/plugins/AffiliateWP-master/assets/js/jquery.cookie.min.js?ver=1.4.0
200 OK 758 B URL HTTP/2 www.usbfund.com/wp-content/plugins/AffiliateWP-master/assets/js/jquery.cookie.min.js?ver=1.4.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1667), with no line terminators
Hash 94c6b3b214659c68b42fb0c428cac279
eb3a852e1bcf8a32ac304dc89995ffdeaf623033
8cdab12fffba1162b02761c8e7631003efebf03e3af5ca9072023ffda52353ad
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/AffiliateWP-master/assets/js/jquery.cookie.min.js?ver=1.4.0 HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:24:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 758
content-type: application/javascript
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 www.usbfund.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Oct 2021 18:27:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 4618
content-type: application/javascript
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 399d68606c3eca4bf8ad3253e90fbd8c
d0328251de27f93f94fce2e529b74931189a158a
9136e12c3eed4f1b9184d6ec4fd97fc08aec2972bd54e13ef740953e219f8bd0
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 07:06:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 09 Dec 2022 05:13:18 GMT
ETag: "d0328251de27f93f94fce2e529b74931189a158a"
Last-Modified: Mon, 05 Dec 2022 05:13:19 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 611
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774af10e091b0b69-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash a59d3b23d783e023015800e20aee5012
35ed18d7f60ab6583c94d83cfdc7f8a70daef652
4f979b4f99b92c75d0ecd2b9924b4d4e6ffbcc767b0a483152fc34769428955c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1268
Cache-Control: max-age=87311
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Etag: "638c45a7-117"
Expires: Tue, 06 Dec 2022 07:22:03 GMT
Last-Modified: Sun, 04 Dec 2022 07:00:55 GMT
Server: ECS (amb/6B91)
X-Cache: HIT
Content-Length: 279
www.usbfund.com/wp-content/uploads/featured-logo-03.png
200 OK 3.8 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/featured-logo-03.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 83 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash ea461093328a47d28ed34df6be0ad850
5fad4dd9e9daea5b1cac739624cbd673c20fe7c2
37ea654d17c80dfb22d0ad091907b6d4009c76c4671728321fd51376a8df7cce
GET /wp-content/uploads/featured-logo-03.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:15:13 GMT
accept-ranges: bytes
content-length: 3840
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NW5DZCL
200 OK 55 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NW5DZCL
IP
File type ASCII text, with very long lines (7865)
Hash 38a784aae29b897d66d474e3ff2cf354
09bb731e05025c9b6dcdc78b19b434037fc5e41b
31e228daed16181d790e27d249b2fc351fe4ab6de6623b32c1760e1c3ae4f108
GET /gtm.js?id=GTM-NW5DZCL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:52 GMT
expires: Mon, 05 Dec 2022 07:06:52 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 55085
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
shield.sitelock.com/shield/usbfund.com
200 OK 10 kB URL HTTP/1.1 shield.sitelock.com/shield/usbfund.com
IP
File type PNG image data, 117 x 67, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a0527f1498b72961c2b540f4ad53106
2c0d0f66db9224e0c2c34c79264f36df21b080e0
551c67d46342d431bfa8902dcfad8c1c3b581825f31ae550c61b4daa6a49ce3a
GET /shield/usbfund.com HTTP/1.1
Host: shield.sitelock.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Etag: "47119117"
Content-Type: image/png; charset=ISO-8859-1
Content-Length: 10454
Cache-Control: max-age=5400, public
Expires: Mon, 05 Dec 2022 08:36:51 GMT
Date: Mon, 05 Dec 2022 07:06:51 GMT
Set-Cookie: visid_incap_275317=j84xEtKcQmK60BA6o3YxZIuYjWMAAAAAQUIPAAAAAADertHnOubpRG7MoxWkhiW3; expires=Mon, 04 Dec 2023 22:33:44 GMT; HttpOnly; path=/; Domain=.sitelock.com
incap_ses_721_275317=toqnE0nq2GUrtpDy84EBCouYjWMAAAAAXnfxbjL77vloZMx66y0DXw==; path=/; Domain=.sitelock.com
X-CDN: Imperva
X-Iinfo: 4-26556639-0 0CNN RT(1670224011919 40) q(0 -1 -1 -1) r(0 -1)
js.hs-scripts.com/5627136.js?integration=WordPress&ver=8.16.28
200 OK 648 B URL HTTP/2 js.hs-scripts.com/5627136.js?integration=WordPress&ver=8.16.28
IP
File type ASCII text, with very long lines (857), with no line terminators
Hash f4696c50440ac444252a89456537e911
cbb4325ee8b23aa0ee380925a02b699b3ad30cb3
347042d01890a2ad28516fd90704ed5ef079daf6168d5f0a72e9da48994e6f6d
GET /5627136.js?integration=WordPress&ver=8.16.28 HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:52 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://www.usbfund.com
access-control-max-age: 3600
cache-control: public, max-age=60
cf-bgj: minify
cf-polished: origSize=964
last-modified: Mon, 05 Dec 2022 06:37:56 GMT
vary: origin, Accept-Encoding
x-hubspot-correlation-id: ca70bf7c-b6fe-48d9-8fec-b79da499887c
x-trace: 2B8409FD685F93E9908263191555E03257C32BFB6A000000000000000000
cf-cache-status: HIT
age: 11
expires: Mon, 05 Dec 2022 07:07:52 GMT
server: cloudflare
cf-ray: 774af10e0cb1b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5f16a534222e5749ef240d413826c2f6
11683d84d420dd6f919425094edb8961278f7fed
691ebf7feb1f7d6ae7e5e7efd678626c62042dda520506f262c7d9a67a48e3ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.usbfund.com/wp-content/uploads/featured-logo-06.png
200 OK 2.7 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/featured-logo-06.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 175 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash b7b5570d5d29fd453a5e65063849fcb1
b07b87612c74febb32961e10ed154dc2efdf19cb
886d709e142c957b0d93269a57fccc13800907c8ab90acc1f18c8bec259d3992
GET /wp-content/uploads/featured-logo-06.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:14:38 GMT
accept-ranges: bytes
content-length: 2693
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/featured-logo-05.png
200 OK 3.7 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/featured-logo-05.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 135 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 646b30b6704a2457b04bb12da4144c97
acadca7b80819db2100f2cf8341acdf47a2eb773
b6e64d31c4f5ab917ad1cddfe7fa745e7c4bfc2d5af33cfdaa8130eb14247bc8
GET /wp-content/uploads/featured-logo-05.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:15:03 GMT
accept-ranges: bytes
content-length: 3721
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/featured-logo-04.png
200 OK 5.8 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/featured-logo-04.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 123 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash e94a0244f1a51d7565de08744375bd07
dde753e74a85c5f094dda6661ada486fdae50422
47bff975ef1626c064613532b237bd114911cdc835effdccb0d124c1432c17b2
GET /wp-content/uploads/featured-logo-04.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:15:18 GMT
accept-ranges: bytes
content-length: 5757
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/us-business-funding-logo-small.png
200 OK 2.0 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/us-business-funding-logo-small.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash a5a71307aefd12c55fd16f36356f9a83
679b01f07d71f673b74fde71a5a0a9da8a8e486d
a2e02fabad9f481343e4e8050843b371e239956a637488eb7d2a9deff98245de
GET /wp-content/uploads/us-business-funding-logo-small.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:14:51 GMT
accept-ranges: bytes
content-length: 2020
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/themes/usb/images/logo_icon.png
200 OK 2.2 kB URL HTTP/2 www.usbfund.com/wp-content/themes/usb/images/logo_icon.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 53 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash 50946e7f85431c547526705a530f893f
573eff13df4dc4f2e6e0e1db1a9339d79e22ce3c
05bc3e4202452433d51079e0d6e348cb850ea55330da7786c1d5c7290d13400a
GET /wp-content/themes/usb/images/logo_icon.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:36:10 GMT
accept-ranges: bytes
content-length: 2165
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/accredited-business-usbfunding.png
200 OK 2.2 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/accredited-business-usbfunding.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 180 x 75, 8-bit colormap, non-interlaced\012- data
Hash 3befe9c6fb5e6602893570b99d3920aa
1e7c1d352448864975a23135097e59593ae71456
d59962c29e3487892da60ef799f75523576b6f006d54fc3dd43bb6993588f1dc
GET /wp-content/uploads/accredited-business-usbfunding.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:15:06 GMT
accept-ranges: bytes
content-length: 2244
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/norton-secured.png
200 OK 3.0 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/norton-secured.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 180 x 75, 8-bit colormap, non-interlaced\012- data
Hash 7d05b62893199c911ab6f798ec8127d2
e7dc7368c55a2fbccb17a82c1a25de39cea2907d
0b691c8e6d1b07ce3e066744ccfbf643d61f013ce51503b0a3ceb7a356562ed6
GET /wp-content/uploads/norton-secured.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:14:45 GMT
accept-ranges: bytes
content-length: 3017
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/featured-logo-02.png
200 OK 5.8 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/featured-logo-02.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 93 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash d2bfb41e522705be8e4a48895b996bca
df2507b75f1c0362bd168ea7ecf829f11469a926
968570479e59e9ff339d5c1d25e4c15011f8cb5ad243776b8cf62f51d28b0903
GET /wp-content/uploads/featured-logo-02.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:13:58 GMT
accept-ranges: bytes
content-length: 5795
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 118c6922fd407ff83a1e6ef4bae0c5d3
f3de58fb7fb3c2dfd12d55a7e2d99cb20e7576ee
0f6b02af32a84789f01ffde70dbe9e2b495de8164d233e4e1d6076acc35fbd87
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 07:06:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 02:09:18 GMT
Expires: Sun, 11 Dec 2022 02:09:17 GMT
Etag: "f3de58fb7fb3c2dfd12d55a7e2d99cb20e7576ee"
Cache-Control: max-age=499944,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774af10d98c3b503-OSL
www.usbfund.com/wp-content/uploads/featured-logo-01.png
200 OK 3.3 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/featured-logo-01.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 164 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 30427e02eea1cec61004e2fdb293e4d2
d3ba51be6c31147f379670d59cab54ec01b3b448
32161c4a44a1dcdddeeb852e2b6eea070839630ac3a719ac79a503cfd4d3892d
GET /wp-content/uploads/featured-logo-01.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:14:38 GMT
accept-ranges: bytes
content-length: 3311
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/themes/usb/images/logo_text.png
200 OK 6.3 kB URL HTTP/2 www.usbfund.com/wp-content/themes/usb/images/logo_text.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 250 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash 198c7fed73cadb12c23066fcad4e33e8
1f2616bb88b86ec79f3ce8cbbf74b3392c0b46bc
0053eb54a0f54484a915313939d858e1844208d2d0c4b410ce30e25d9cbc09ba
GET /wp-content/themes/usb/images/logo_text.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:36:10 GMT
accept-ranges: bytes
content-length: 6307
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/plugins/AffiliateWP-master/assets/js/tracking.min.js?ver=2.1.6.1
200 OK 1.3 kB URL HTTP/2 www.usbfund.com/wp-content/plugins/AffiliateWP-master/assets/js/tracking.min.js?ver=2.1.6.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2972), with no line terminators
Hash da0e82022a32e0c42e125fe915cf9955
1c583a11b9e444a26cfd1443d3dade9c6f9e996a
e205081b6febab912d75f2aa70bc3ae2af58bb7d2b1e44927f17cb7631374ff0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/AffiliateWP-master/assets/js/tracking.min.js?ver=2.1.6.1 HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:24:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1315
content-type: application/javascript
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
d.impactradius-event.com/A870624-b043-4b58-adb6-a8c4d22ccc5b1.js
200 OK 13 kB URL HTTP/2 d.impactradius-event.com/A870624-b043-4b58-adb6-a8c4d22ccc5b1.js
IP
File type C source, ASCII text, with very long lines (40914), with no line terminators
Hash 833e9c2431f16a9e4e590d8c18a01169
d932b0dc73f5dbe2f30c5991fbc95d598a7d6855
ba6dea3209c3bf545ed7db2f134ab8d241599d778988697a345124a4aa8d491a
GET /A870624-b043-4b58-adb6-a8c4d22ccc5b1.js HTTP/1.1
Host: d.impactradius-event.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu8WoXpOPSEjWtywA-5PscS_mSp3q9rfryi5GkmUAvQ1au2x8lhuNIcbq9jlfGACKQS778BuCRZInFvIIGVuwRANVR9Ny94
x-goog-generation: 1581997649126919
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12876
content-encoding: gzip
x-goog-hash: crc32c=PZt+Nw==, md5=gz6cJDHxap5OWQ2MGKARaQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 12876
server: UploadServer
date: Mon, 05 Dec 2022 07:06:41 GMT
expires: Mon, 05 Dec 2022 07:11:41 GMT
cache-control: public,max-age=900,s-maxage=300
age: 11
last-modified: Tue, 18 Feb 2020 03:47:29 GMT
etag: "833e9c2431f16a9e4e590d8c18a01169"
content-type: text/javascript; charset=utf-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/themes/usb/js/accounting.min.js
200 OK 1.3 kB URL HTTP/2 www.usbfund.com/wp-content/themes/usb/js/accounting.min.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3019)
Hash 05f645a76aff3fc02e18295a07c54e09
509581a5e2e4760e2163d704d21b2604329b514e
c7834a5ef896adfc8b40eb2a1db07bd867fe84da57ad234bfa487cfbc610a16a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/usb/js/accounting.min.js HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:35:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1345
content-type: application/javascript
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/themes/usb/js/site.js
200 OK 4.8 kB URL HTTP/2 www.usbfund.com/wp-content/themes/usb/js/site.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash ba21d11b60199ed26dfb2a2d8352065a
3e78915e922b60ca87f5860c67b99861de96830c
c000c3cc081106de80fb4995e40b363752494290c9090e0980a5b4a4cfc37c49
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/usb/js/site.js HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:35:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 4830
content-type: application/javascript
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/?display_custom_css=css&ver=6.0.3
200 OK 541 B URL HTTP/2 www.usbfund.com/?display_custom_css=css&ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 0e67503cdf8a23b7d3aaff6f35c76b72
63edc0c8bf04ceec8dc3c8c44bd129b89adeb61a
d765ab66c61ec9c967f9f2e4b649326eb28a6f8dfb0fe064b4ed1cf9af1f18b6
GET /?display_custom_css=css&ver=6.0.3 HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 541
content-type: text/css;charset=UTF-8
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
200 OK 5.3 kB URL HTTP/2 www.usbfund.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15660)
Hash 710f8b142ea44c0682dc2c30f318f065
49144e9b3a76d3d383b1d4359cf7a25e947f4233
708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Aug 2022 11:46:13 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 5321
content-type: application/javascript
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/themes/usb/js/plugins.js
200 OK 34 kB URL HTTP/2 www.usbfund.com/wp-content/themes/usb/js/plugins.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 2f3944708faa05b6ac8db1d5bd2d4b87
7a41b498a1b7a20f971a6058f467422f7730d5bb
ac6caa3be4fcc676a55703e22c2e55c15ecff982ad876f1451ebfca146d7e6ee
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/usb/js/plugins.js HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:35:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f5f13ebece32c8dd4ce5d4038b9330a1
2b68ee69f0c1c1b0484959c4b0b43ad5e644cd08
f530f5560a17e57214ceb8d1accebee9f48b1330c50a89bad2e64a62ca22fef6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3949
Cache-Control: max-age=102628
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Etag: "638c7704-117"
Expires: Tue, 06 Dec 2022 11:37:20 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:32 GMT
Server: ECS (amb/6BC7)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 9b5617499c7273752290acf2012b28dd
71b5048650cdec4ecb275f23f4eb66c8e389bccc
81bf1e6bef9b02d5540da0a2c853cbeb2245e3bc79c71a701d5328a70a2915f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1381
Cache-Control: max-age=158356
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Etag: "638d5abb-117"
Expires: Wed, 07 Dec 2022 03:06:08 GMT
Last-Modified: Mon, 05 Dec 2022 02:43:07 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
forms.hsforms.com/embed/v3/form/540751/8e06fd82-42e9-4211-9f65-32b7dbc43b43/json?hs_static_app=forms-embed&hs_static_app_version=1.2431&X-HubSpot-Static-App-Info=forms-embed-1.2431&hutk=9a54385fe1b96d4beed4b97fc12373ff
404 Not Found 371 B URL HTTP/2 forms.hsforms.com/embed/v3/form/540751/8e06fd82-42e9-4211-9f65-32b7dbc43b43/json?hs_static_app=forms-embed&hs_static_app_version=1.2431&X-HubSpot-Static-App-Info=forms-embed-1.2431&hutk=9a54385fe1b96d4beed4b97fc12373ff
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash eec6b86a162823f7d68f26f0551710e8
b5c53085fe32dbffd1e25d103153475f2885f4c7
765c710b70f50f0795a4fd10ce91e9888141153fd5b0e87b13f5a8c11e730aa5
GET /embed/v3/form/540751/8e06fd82-42e9-4211-9f65-32b7dbc43b43/json?hs_static_app=forms-embed&hs_static_app_version=1.2431&X-HubSpot-Static-App-Info=forms-embed-1.2431&hutk=9a54385fe1b96d4beed4b97fc12373ff HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Mon, 05 Dec 2022 07:06:52 GMT
content-type: application/json;charset=utf-8
x-trace: 2B663E1EC71410B58AF115778FD68E925D2D220AA4000000000000000000
x-hubspot-notfound: true
x-origin-hublet: na1
vary: origin
x-hubspot-correlation-id: e01519a0-acd1-419a-9754-41230b339ee9
access-control-allow-origin: https://www.usbfund.com
access-control-allow-methods: OPTIONS, GET
access-control-allow-headers: *
access-control-allow-credentials: false
access-control-max-age: 180
access-control-expose-headers: X-Origin-Hublet
cache-control: max-age=0, no-cache, no-store
x-robots-tag: none
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 774af10fece8b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/bg-section-header.png
200 OK 22 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/bg-section-header.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1920 x 149, 8-bit colormap, non-interlaced\012- data
Hash 65b13235e26653c77b0ed328dfdb8dc2
2dcc21d12b909058345b01f087062f6b59f4f05c
acba6ce2f083bf3e78176be5f1c68dfbeb67e609472b4f8c034ba8676d0995b2
GET /wp-content/uploads/bg-section-header.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP; wc_client_current=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; IR_gbd=usbfund.com; IR_7486=1670224010099%7C0%7C1670224010099%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:14:58 GMT
accept-ranges: bytes
content-length: 22531
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/icon-arrow-down-white.png
200 OK 172 B URL HTTP/2 www.usbfund.com/wp-content/uploads/icon-arrow-down-white.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 14 x 14, 8-bit gray+alpha, non-interlaced\012- data
Hash 26d3bceaf73fad28fb322b6646860f78
1b70241f618df47a01729534d376a57c57bd8c07
0077bc52b60eb51d8785f3aa812a2cdcce59acd3a0b70a801b82c563787e1a7c
GET /wp-content/uploads/icon-arrow-down-white.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP; wc_client_current=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; IR_gbd=usbfund.com; IR_7486=1670224010099%7C0%7C1670224010099%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:15:12 GMT
accept-ranges: bytes
content-length: 172
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
tag.getdrip.com/9726461.js
200 OK 8 B URL HTTP/2 tag.getdrip.com/9726461.js
IP
File type ASCII text, with no line terminators
Hash de2e1607e500ee465eca3ec4505c0859
cfd432c8178796a4af548a7ed62f09bdf5fbb897
295bdad3ed86f4eeb0249f30e724344ec7be85582094013a85403ecbb77a0047
GET /9726461.js HTTP/1.1
Host: tag.getdrip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 8
last-modified: Fri, 20 May 2022 20:08:53 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 07:06:42 GMT
etag: "de2e1607e500ee465eca3ec4505c0859"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SQNMyxleEipFj3l7sg_2A2ekmD0dLaRYx5BdX0tUfXEOHft2SZGK3w==
age: 159
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 277 B IP
Hash 1eca549b959e69c0e5da0d23026cc6b4
611b0f910b4e9de05b5a7a14121bcc939f89da55
c3bfd9cb0598952f0549867f7f4f2e49a3454272d4966748af07d8e022b59bc6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3215
Cache-Control: max-age=139318
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Etag: "638d0933-115"
Expires: Tue, 06 Dec 2022 21:48:50 GMT
Last-Modified: Sun, 04 Dec 2022 20:55:15 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 277
ocsp.digicert.com/
200 OK 279 B IP
Hash 65bc405f9c5bf030921b3635d9a760b6
1d9a95db0d7a8657aec2075630ebb8aa93f8597b
b546bcdf76a83c36c0cb2facd683be0a957f16193c8a8e5ecb79fef0a6eed70b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2585
Cache-Control: max-age=87211
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Etag: "638c401e-117"
Expires: Tue, 06 Dec 2022 07:20:23 GMT
Last-Modified: Sun, 04 Dec 2022 06:37:18 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 9b5617499c7273752290acf2012b28dd
71b5048650cdec4ecb275f23f4eb66c8e389bccc
81bf1e6bef9b02d5540da0a2c853cbeb2245e3bc79c71a701d5328a70a2915f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1381
Cache-Control: max-age=158356
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Etag: "638d5abb-117"
Expires: Wed, 07 Dec 2022 03:06:08 GMT
Last-Modified: Mon, 05 Dec 2022 02:43:07 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash add99fbb4423b6041b4dd534c77941ea
1c4fb88dbd1419b0b8ae485127488e316365b55f
c1641a2aa162af0aaba271e2812ae196a24e0bd1ad7212a4fbd0e99d588c668a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3147
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:52 GMT
Etag: "638c6050-118"
Last-Modified: Mon, 05 Dec 2022 06:14:26 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash d26eb994333d199aa1d6e2abc22526c3
b6a4390096f7ea22b3f00620bd49da38e3b1b618
f7cd06d11a6f207f3c1cb4708e191f352e4ab6cb428937975abc0b548d4a29bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1841
Cache-Control: max-age=125657
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:53 GMT
Etag: "638cd935-116"
Expires: Tue, 06 Dec 2022 18:01:10 GMT
Last-Modified: Sun, 04 Dec 2022 17:30:29 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 278
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ea1cfc4ab75f658f873244e426754e41
9a01309058cbc81e5ffa5315b89f5b75082aab25
059ccaa6bd69fa2c5718b94c77be0573f508a22883bde498fa44894338ca4f3d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118067
Date: Mon, 05 Dec 2022 07:06:53 GMT
Etag: "638cb085-1d7"
Expires: Tue, 06 Dec 2022 15:54:40 GMT
Last-Modified: Sun, 04 Dec 2022 14:36:53 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 34sed8SHOhZhZTfvHH4SorfkgT2w7LouWVQF7fBbA98JKBUBv3qjBg==
Age: 4667
www.usbfund.com/wp-content/uploads/icon-arrow-down-black.png
200 OK 195 B URL HTTP/2 www.usbfund.com/wp-content/uploads/icon-arrow-down-black.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash f984736b4b9dfe03bb8831a718c6a238
d95304fa5fed6fdf9020c21ece2b7e35aec4808c
4944824b4a23581a4660857551680fffd806f6fa42e3d9414fb1529ba78651b9
GET /wp-content/uploads/icon-arrow-down-black.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP; wc_client_current=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; IR_gbd=usbfund.com; IR_7486=1670224010099%7C0%7C1670224010099%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:15:09 GMT
accept-ranges: bytes
content-length: 195
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7d8043da1203d5e463ed497538051c69
62103ce789c870e0be0d9f64430594af96c857c7
596c2833092b1acce2e856498e7632e7caecd6dc017bdca4c5910e5340de9b0e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "596C2833092B1ACCE2E856498E7632E7CAECD6DC017BDCA4C5910E5340DE9B0E"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4861
Expires: Mon, 05 Dec 2022 08:27:54 GMT
Date: Mon, 05 Dec 2022 07:06:53 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 278 B IP
Hash 4d2314e9f3c51aaa368eef8f00037ad8
e83a51f1d17709329ca60e53189fe8e18181330a
d1c3a6f3afb942c6432ab948df09f4b0e410d663e11589ce558c76eb18578157
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5478
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:53 GMT
Last-Modified: Mon, 05 Dec 2022 05:35:35 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 278
process.iconnode.com/google-ads/
200 OK 0 B URL HTTP/2 process.iconnode.com/google-ads/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /google-ads/ HTTP/1.1
Host: process.iconnode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: text/html; charset=UTF-8
content-length: 0
server: Apache/2.4.54 () OpenSSL/1.0.2k-fips PHP/7.4.30
x-powered-by: PHP/7.4.30
access-control-allow-origin: https://www.usbfund.com
access-control-allow-credentials: true
access-control-max-age: 86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 4d2314e9f3c51aaa368eef8f00037ad8
e83a51f1d17709329ca60e53189fe8e18181330a
d1c3a6f3afb942c6432ab948df09f4b0e410d663e11589ce558c76eb18578157
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5478
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:53 GMT
Last-Modified: Mon, 05 Dec 2022 05:35:35 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 278
www.usbfund.com/wp-content/uploads/USBusinessFunding-Home1.png
200 OK 944 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/USBusinessFunding-Home1.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1696 x 1131, 8-bit colormap, non-interlaced\012- data
Size 944 kB (944072 bytes)
Hash b4b6bd078ef229456fc9d5b22d31ca0e
51cb87382bfb8b0029df296adb021229ad4cf6da
870b85b6771aeb0fc9c84c444ca24919dd6f71e4b34a6bb97003a0a4f34bdfd3
GET /wp-content/uploads/USBusinessFunding-Home1.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP; wc_client_current=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; IR_gbd=usbfund.com; IR_7486=1670224010099%7C0%7C1670224010099%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:14:13 GMT
accept-ranges: bytes
content-length: 944072
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/fonts/socicon.woff
200 OK 31 kB URL HTTP/2 www.usbfund.com/fonts/socicon.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 31444, version 1.0\012- data
Hash dcbd1f9c4275862f002f21619e96b8f4
a97cd865925e5102ae7c25aa5dd09112ccf50651
a680b776319127695950fd7c490b17cd15120d683bde57845707a2f7dc0f1a74
Analyzer Verdict Alert fortinet Malware
GET /fonts/socicon.woff HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP; wc_client_current=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; IR_gbd=usbfund.com; IR_7486=1670224010099%7C0%7C1670224010099%7C%7C
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 27 Sep 2019 21:47:06 GMT
accept-ranges: bytes
content-length: 31444
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: font/woff
date: Mon, 05 Dec 2022 07:06:53 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/How-to-get-a-small-business-loan-in-6-steps.jpg
200 OK 24 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/How-to-get-a-small-business-loan-in-6-steps.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 720x405, components 3\012- data
Hash d1cae1f956bfabbba06040d89efc8ac4
569cdf2fdfeefc8d2d59534ed7a2167439b750aa
dd76e74ef6c5e47d625dae207c3ca8a8d30c5257450f9f0c0b9dfb2ad1e7aac8
GET /wp-content/uploads/How-to-get-a-small-business-loan-in-6-steps.jpg HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP; wc_client_current=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; IR_gbd=usbfund.com; IR_7486=1670224010099%7C0%7C1670224010099%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 20 Apr 2022 05:16:52 GMT
accept-ranges: bytes
content-length: 24385
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/jpeg
date: Mon, 05 Dec 2022 07:06:53 GMT
server: Apache
X-Firefox-Spdy: h2
track.sendlane.com/track/event?event_id=xWMCUM2gF97YD&uri=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&cb=e5nk091ip8ij48xnj8nr
204 No Content 0 B URL HTTP/1.1 track.sendlane.com/track/event?event_id=xWMCUM2gF97YD&uri=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&cb=e5nk091ip8ij48xnj8nr
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/event?event_id=xWMCUM2gF97YD&uri=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&cb=e5nk091ip8ij48xnj8nr HTTP/1.1
Host: track.sendlane.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Mon, 05 Dec 2022 07:06:53 GMT
Server: Apache
Cache-Control: no-cache, private, max-age=2592000
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 57
Set-Cookie: track_session=eyJpdiI6IkZnbTFTMzFZMjlPd00zWGxEUFZRQ2c9PSIsInZhbHVlIjoidXdMN0hVL283QkpNL2l6cXF5NXduWGFaaS91OXpYeGhIS0p6Y3RzQmtCcGZPaWw2RGNhZ205QVd3YWJBUStMT0VxVytvbnBmbXhCOXdyM0NKcnNZcE5CMkZiK2xudjRXZWVGMUtVS09IMDNBTVZpcS9TVUVYM2R5RWo3Y1VRUHAiLCJtYWMiOiIwYTZiMWU0ZTM4ZjM0OTJjMmExOTk4NTE0NTI0ZDhhZTczM2VhNzUyZGI4MTQ5MTY5ODcxZjM1ZDMyZmM3ODczIiwidGFnIjoiIn0%3D; expires=Mon, 05-Dec-2022 09:06:53 GMT; Max-Age=7200; path=/; domain=sendlane.com; secure; httponly; samesite=lax
Expires: Wed, 04 Jan 2023 07:06:53 GMT
Connection: close
forms.soundestlink.com/REST/forms/v1/renderedForms?v=2022-12-05T07&brandID=60034c978a48f7337bc1a105&displayType=popup,embedded
200 OK 2 B URL HTTP/2 forms.soundestlink.com/REST/forms/v1/renderedForms?v=2022-12-05T07&brandID=60034c978a48f7337bc1a105&displayType=popup,embedded
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /REST/forms/v1/renderedForms?v=2022-12-05T07&brandID=60034c978a48f7337bc1a105&displayType=popup,embedded HTTP/1.1
Host: forms.soundestlink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Origin: https://www.usbfund.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: application/json
content-length: 2
access-control-allow-methods: GET,OPTIONS
access-control-allow-origin: *
cache-control: max-age=0, s-maxage=600, public
expires: Mon, 05 Dec 2022 08:06:43 GMT
last-modified: Mon, 05 Dec 2022 07:06:43 GMT
x-envoy-upstream-service-time: 3
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 774af113880cb4ed-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a8094369996a2de7a4215291351ae444
c55a5ebc596b854e16820b489a0bda868a7f78be
252e18f7be54f26b6b162d2d115da68461b1ff58571d86f16f51fe7a6af54c5b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3623
Cache-Control: max-age=117052
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:53 GMT
Etag: "638cb0a2-117"
Expires: Tue, 06 Dec 2022 15:37:45 GMT
Last-Modified: Sun, 04 Dec 2022 14:37:22 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
www.checkbca.org/CompanyWidget.aspx?ID=100094667&WidgetType=1
301 Moved Permanently 196 B URL HTTP/2 www.checkbca.org/CompanyWidget.aspx?ID=100094667&WidgetType=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e4450c4791dadbc8f0fe8409a9b278ec
70f8e597f291a8a247c4f1bbbc4586e300f75723
e350fe60679b3272336147b700171d459374f3a66c6e228673a94ec0d9239b7e
GET /CompanyWidget.aspx?ID=100094667&WidgetType=1 HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
location: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 196
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f2e65e29364fb83c36767fc96e406397
61b3cfedf0a44e02f937be4606d1ed5d62b337d0
fe3f3b09e4ac93e8cbb101047aa1578db94d51a34be14514aae8fdc5de8a807b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115456
Date: Mon, 05 Dec 2022 07:06:53 GMT
Etag: "638ca0ff-1d7"
Expires: Tue, 06 Dec 2022 15:11:09 GMT
Last-Modified: Sun, 04 Dec 2022 13:30:39 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TVLhiqy_NUgUf88ZeD3sRNYnFM-MY3gb1XWWAmZaAyGlWt9TCJ-jAg==
Age: 6030
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f2e65e29364fb83c36767fc96e406397
61b3cfedf0a44e02f937be4606d1ed5d62b337d0
fe3f3b09e4ac93e8cbb101047aa1578db94d51a34be14514aae8fdc5de8a807b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115435
Date: Mon, 05 Dec 2022 07:06:53 GMT
Etag: "638ca0ff-1d7"
Expires: Tue, 06 Dec 2022 15:10:48 GMT
Last-Modified: Sun, 04 Dec 2022 13:30:39 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Bfp0I4CSHPQg3a0lTilxzsasvDa6X1AzqNJK9-PkkNs7VMabVBTt5g==
Age: 6009
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f2e65e29364fb83c36767fc96e406397
61b3cfedf0a44e02f937be4606d1ed5d62b337d0
fe3f3b09e4ac93e8cbb101047aa1578db94d51a34be14514aae8fdc5de8a807b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115466
Date: Mon, 05 Dec 2022 07:06:53 GMT
Etag: "638ca0ff-1d7"
Expires: Tue, 06 Dec 2022 15:11:19 GMT
Last-Modified: Sun, 04 Dec 2022 13:30:39 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rtekhjHUHffoa2FlyJ1AhLiPe9IizeuZ3eehg7rOqqEPpTO87TXo5g==
Age: 6040
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10450
Expires: Mon, 05 Dec 2022 10:01:03 GMT
Date: Mon, 05 Dec 2022 07:06:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10450
Expires: Mon, 05 Dec 2022 10:01:03 GMT
Date: Mon, 05 Dec 2022 07:06:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10450
Expires: Mon, 05 Dec 2022 10:01:03 GMT
Date: Mon, 05 Dec 2022 07:06:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10450
Expires: Mon, 05 Dec 2022 10:01:03 GMT
Date: Mon, 05 Dec 2022 07:06:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10450
Expires: Mon, 05 Dec 2022 10:01:03 GMT
Date: Mon, 05 Dec 2022 07:06:53 GMT
Connection: keep-alive
process.iconnode.com/keyword/
200 OK 37 B URL HTTP/2 process.iconnode.com/keyword/
IP
File type ASCII text, with no line terminators
Hash 294301a02c05b5e45a73a1ab34e1f481
a20a918090a79dad1a597ad7d9723f86da6ebf0b
fd65c5d696a53a04485aa8f8025ad82a0bba859fc3fa198bdc6cd36e4baa1557
POST /keyword/ HTTP/1.1
Host: process.iconnode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 903
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: text/html; charset=UTF-8
content-length: 37
server: Apache/2.4.54 () OpenSSL/1.0.2k-fips PHP/7.4.30
x-powered-by: PHP/7.4.30
access-control-allow-origin: https://www.usbfund.com
access-control-allow-credentials: true
access-control-max-age: 86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9e8d044-2cda-4dba-9da8-c0a296845bca.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9e8d044-2cda-4dba-9da8-c0a296845bca.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8e6f84dff61fedd8ff9baa9bb648883
f8d5cc7b315879b66a11b403463da1330617d2fa
025c66a4a0e7927353e1733d7f8cfb6ec3c9c0228d34267cbff11f09cf112127
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9e8d044-2cda-4dba-9da8-c0a296845bca.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12348
x-amzn-requestid: 72f681ef-9ae7-4fc5-8539-230e1d4277a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKa_HpTIAMFrcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abddf-43ef45165fd982997e5018c8;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:09:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGsNaADKr1KoJT7rxDSFf8dxM1_IXsaF67Eqe8DIO9PAJy8HtqQKng==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 03:21:42 GMT
age: 13511
etag: "f8d5cc7b315879b66a11b403463da1330617d2fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 99d1ff8fa2e095dcf2bda3d1e1af1221
f914f04a0e1fb45a221d31d2105bfc73015b03e6
90325d4299a44dbd213857ada6f6880db8c33ad61685cfcb60c4a2455a84cf87
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10183
x-amzn-requestid: 0cdea572-aab4-4d52-948b-976170a787a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_uLHQZoAMF4hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1327-7948052f39c4f6071b4a0e0d;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WDqUFMBT59kulx4WLxNh5XTsHzr4_u524juvZJnGMYBH-mUaJclnTg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:49:03 GMT
age: 33470
etag: "f914f04a0e1fb45a221d31d2105bfc73015b03e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6034ca-f8c1-4979-8165-5f755e5d12a1.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6034ca-f8c1-4979-8165-5f755e5d12a1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c36448c65274ebbe1eb21e3bf02385e
e03cf1c7c2ec15b3cc50d9c54bebbf81aa08cf28
6f17788a394f1305755805a1b92117b1c1a03a1e3a075cb97a0da5184d574553
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6034ca-f8c1-4979-8165-5f755e5d12a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6430
x-amzn-requestid: ae2ec151-d383-4554-9ac2-3d204701251c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_ttFDKoAMFp0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1324-15aebb1a06253068472a6ab0;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hEiLpBd0Tubj3-Wgqh_jpK6XEekyrHfuQxpVD_JLlNSAQj41XK_1EA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:52:15 GMT
age: 33278
etag: "e03cf1c7c2ec15b3cc50d9c54bebbf81aa08cf28"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2955536-4372-40c4-bbce-37f3da5c8a64.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2955536-4372-40c4-bbce-37f3da5c8a64.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb029b41d342a82250aef6d6f713be6e
cd754bb6094d2e456b95dce8daace45a0de8a121
c16e364547c9e7a3c487b614073d59c7c495c5e5387b75136afab0dc68bebca4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2955536-4372-40c4-bbce-37f3da5c8a64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10031
x-amzn-requestid: ca6c11c5-8842-4ffb-bb9e-5351c4e60c5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjY0CGUVIAMFxog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ad4e6-4282be9f505aa5764e9b1fa2;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 04:47:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: vg9n0d9YqjfrKwJHGGcztV4gsGENhNYUuC1HUmWFsxRlDdMSpV4IQw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 15:58:47 GMT
age: 54486
etag: "cd754bb6094d2e456b95dce8daace45a0de8a121"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:49:44 GMT
age: 33429
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24c69d7ef356b352956d6dcbc9f5df1d
2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9
94d068620c34652cb2d24ca8b3cf962febe9606e6d3a33d937fc9d99f176edef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10396
x-amzn-requestid: b879fd2e-b6cf-4373-b780-2d97481c45f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cioNbH5KoAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a8722-6add7f8e225878473b20c015;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 23:15:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ir97GJKaFoW6BNXCcmMqp0JSUd5JhCACyUvLh5G-0BWCDVJsqs7XhQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 12:09:06 GMT
age: 68267
etag: "2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
trackcmp.net/t_prism_sitemessages.php?trackid=224499963&prismid=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business
200 OK 0 B URL HTTP/2 trackcmp.net/t_prism_sitemessages.php?trackid=224499963&prismid=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t_prism_sitemessages.php?trackid=224499963&prismid=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business HTTP/1.1
Host: trackcmp.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: text/javascript;charset=UTF-8
content-length: 0
x-powered-by: PHP/7.1.33
cache-control: no-cache, private
p3p: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"
x-privacy-policy: You can find our privacy policy here: https://www.activecampaign.com/help/privacy-policy/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 774af113ba7cb509-OSL
X-Firefox-Spdy: h2
aorta.clickagy.com/data
200 OK 14 kB IP
File type ASCII text, with very long lines (39152), with no line terminators
Hash fd3951545f25dcc11da9751f8e71bec7
bb153ec98c15b5718ba4859d9eb7f4be572da141
d15b9ad0ccf5884b91b0ea191fece511ddeb9275a17a580ea624b4b567066b7d
POST /data HTTP/1.1
Host: aorta.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 371
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: application/json
content-length: 82
server: Aorta/20221117.e7edcc499
x-aorta-host: 67cc7ce25770
x-aorta-region: us-east-1
access-control-allow-credentials: true
access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction
access-control-expose-headers: Set-Cookie
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: https://www.usbfund.com
access-control-max-age: 31536000
cache-control: no-cache, no-store, must-revalidate
expect: 0
content-encoding: gzip
X-Firefox-Spdy: h2
www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
200 OK 39 kB URL HTTP/2 www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash bdb5f9b9c096c4e44be775cfa353197b
c33dfa35440174a27caf003f7e41ecc9893011a8
16bf6d2bb2c7aa6595f539d171b100201ec45f9eb77b43ca5e29addb1b43c5c7
GET /get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
link: <https://www.usbfund.com/wp-json/>; rel="https://api.w.org/", <https://www.usbfund.com/wp-json/wp/v2/posts/2540>; rel="alternate"; type="application/json", <https://www.usbfund.com/?p=2540>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/html; charset=UTF-8
date: Mon, 05 Dec 2022 07:06:51 GMT
server: Apache
X-Firefox-Spdy: h2
www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
200 OK 6.8 kB URL HTTP/2 www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (604), with CRLF line terminators
Hash e950fea6781ddce2e52178ffa6cc7c21
1e9d97cbd500c00310d2769c7023bea4aafe2879
70f3180b12eac1ae120a528a354566479b2d74f541af3c568071e12afefb8da5
GET /companywidget.aspx?ID=100094667&WidgetType=1 HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: ASP.NET_SessionId=bm5uxxqug50cfqyly3ayulxe; path=/; secure; HttpOnly; SameSite=Lax
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 6794
X-Firefox-Spdy: h2
hemsync.clickagy.com/external/hasHashes?clkgypv=jstag&cb=null
200 OK 28 B URL HTTP/2 hemsync.clickagy.com/external/hasHashes?clkgypv=jstag&cb=null
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 830cb026fae1a13104725d2b3100ec10
40188da405f4a93c90f0b5e060e0ccca8e483eba
4d32822dd4fd4e7b58950d7c693e301eaa19b29305077afaebc12852df7f4ee0
GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1
Host: hemsync.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: text/plain; charset=utf-8
content-length: 28
access-control-allow-origin: https://www.usbfund.com
vary: origin
access-control-allow-credentials: true
access-control-expose-headers: content-length, last-modified, expires, content-type
content-encoding: gzip
X-Firefox-Spdy: h2
serve.albacross.com/track.js
200 OK 4.1 kB URL HTTP/1.1 serve.albacross.com/track.js
IP
File type ASCII text, with very long lines (10418)
Hash e062066a14a30b3ed3b72c5b31f21ffe
064e97457f03f59e40134ea46a21ba6e98a90c68
7bc78e48c07227b97701737a2799c978d37ff3f2350b02043ce69464de7399de
GET /track.js HTTP/1.1
Host: serve.albacross.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Apr 2021 13:13:21 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 05 Dec 2022 07:06:43 GMT
Cache-Control: max-age=120
ETag: W/"b769e9b4f23be6c9bab7c715fdf2526a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DzbGCD00Nt2kNkHd_yPr2MHM1Kt6qjn7QeqQ-5PvvCiGAOiE-rtPwA==
Age: 10
ocsp.digicert.com/
200 OK 279 B IP
Hash 288e63af9866c4bb3e06b5e1f77f300c
bbfe8b98577596f36a58e07a860268cd0cfe79be
2c3c513c12a0daf43f7b311ddbe52ddf6fb22d96d787bed9092ac24d4f3b2c20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3935
Cache-Control: max-age=146872
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:53 GMT
Etag: "638d23e6-117"
Expires: Tue, 06 Dec 2022 23:54:45 GMT
Last-Modified: Sun, 04 Dec 2022 22:49:10 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.6 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (12961)
Hash c1a25b303b61b25e995516f5559bcdea
3c16a6fa3a2a6dc59d57a9ea1588c4f259884688
2063d2d1415ce9437e9331cb9a798714a5b2e106a65d6dc0ef0d426a5a4c30f2
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 17 Nov 2022 18:52:45 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=51620
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 4581
x-cdn: AKAM
X-Firefox-Spdy: h2
munchkin.marketo.net/munchkin.js
200 OK 728 B URL HTTP/1.1 munchkin.marketo.net/munchkin.js
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (521)
Hash 51a92d8c69733d719447dea0416ed039
69f4c1e0b7ebba812bc096708d57627927dff265
cb483c0ea4012ac512bcba6204b37622b388c1aefd4ae9028f60abb965f23d29
GET /munchkin.js HTTP/1.1
Host: munchkin.marketo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "92b41a298690c047b0c4602dd843cba4:1662686319.691662"
Last-Modified: Fri, 09 Sep 2022 01:18:39 GMT
Server: AkamaiNetStorage
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 05 Dec 2022 07:06:53 GMT
Content-Length: 728
Connection: keep-alive
www.checkbca.org/stylesheets/font-awesome.min.css
200 OK 7.0 kB URL HTTP/2 www.checkbca.org/stylesheets/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 775375b17c16dc85854ba29bbba28807
91c2f8c2838211a85090f061340b6c0c24e763af
e05c4f03a6c957e6b769e9ac46b9b6d7f1de8f46f49fc894be7c7493aaf4e033
GET /stylesheets/font-awesome.min.css HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: text/css
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 21:47:32 GMT
accept-ranges: bytes
etag: "032466bcfed81:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 6965
X-Firefox-Spdy: h2
www.checkbca.org/stylesheets/jquery.selectBox.css
301 Moved Permanently 180 B URL HTTP/2 www.checkbca.org/stylesheets/jquery.selectBox.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 65d99af646ca7622a01fc0d3eb7a6b6d
a6b71820c0572f17c183b5669255346947bc3492
425fea6b4acfc8c48eee414af2be035b5c77a87742cf0bb46b136d07e0c29f6a
GET /stylesheets/jquery.selectBox.css HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: no-cache
content-type: text/html; charset=UTF-8
location: https://www.checkbca.org/stylesheets/jquery.selectbox.css
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 180
X-Firefox-Spdy: h2
www.checkbca.org/stylesheets/style.css
200 OK 11 kB URL HTTP/2 www.checkbca.org/stylesheets/style.css
IP
File type assembler source, Unicode text, UTF-8 text, with very long lines (548), with CRLF line terminators
Hash a3ec3a585ca53c4eaa1082ae3427a329
7f08739e149ab8dc280a05b280c31b04bfb1bd6d
1e44bca5aecfd50bff07a4df9f9bb9c524f6addd9c24bb8c463eef67798283c9
GET /stylesheets/style.css HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: text/css
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 21:47:32 GMT
accept-ranges: bytes
etag: "032466bcfed81:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 10899
X-Firefox-Spdy: h2
ws.zoominfo.com/pixel/62e2c4ac62a6b2008e05e3be
200 OK 2.3 kB URL HTTP/2 ws.zoominfo.com/pixel/62e2c4ac62a6b2008e05e3be
IP
Hash 56fe7cb8e3ce2a64dcbc50513a9eae4c
5a1f76bd7bce18d89f341bddccbca373c894843f
82e5ecc4c32e4d8ecceaee184a7aabbd1dae6b59649bea89ff9e46d37c4a4044
GET /pixel/62e2c4ac62a6b2008e05e3be HTTP/1.1
Host: ws.zoominfo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Cookie: visitorId=4f9420445738193f536f785dbb7a61b0f82e36b70d46afa8052baca5f475fea3; __cf_bm=4gM6smva7Gcqa4D69vKtLqUZlr_j0m1v9savVDgVyAQ-1670222276-0-AS0h+DXmoB9VIDLV6AkgdHJeWWIqQKoCl1plWiq3LBszYYVGWRgCQnPxFMllNGrUAj+5m1SP6R+plGpeONvSKk8=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:52 GMT
content-type: text/javascript
vary: Accept-Encoding
x-powered-by: Express
x-content-type-options: nosniff
access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type
access-control-allow-credentials: true
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=sgVFAWlW9QEv3DUX0m7hDwShoxfE.HZeD_WEUEd3FMU-1670224012-0-AbVeluXc8rGMkXjGF9NvupGKHvggg7oMwPcZaVkFGsxvuAQWySZ6KB9NDhKcgFrMcLNzPq4we96s3tkhXjA3sRE=; path=/; expires=Mon, 05-Dec-22 07:36:52 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 774af10fc931b4f3-OSL
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/cropped-iconusbfund-192x192.png
200 OK 20 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/cropped-iconusbfund-192x192.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 273b22a347363c8bfaa20ddcca897d53
0bf5106cb96db26030ae4bee997db3aef8914130
3c673a54e1fea64b6b57dc31365058249f665f327b0e032746b310a2f6a2c0b2
GET /wp-content/uploads/cropped-iconusbfund-192x192.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.1.1670224010.0.0.0; _ga=GA1.1.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP; wc_client_current=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; IR_gbd=usbfund.com; IR_7486=1670224010099%7C0%7C1670224010099%7C%7C; soundestID=20221205070650-d5NGR0EiwjzsSh78IUkVK1FEtFdT6A416gxzYIQR1bWG6KLvH; soundest-views=1; wc_swap=9494033493+..+9494611140+..+68836
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:15:06 GMT
accept-ranges: bytes
content-length: 19606
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:53 GMT
server: Apache
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/uploads/cropped-iconusbfund-32x32.png
200 OK 1.4 kB URL HTTP/2 www.usbfund.com/wp-content/uploads/cropped-iconusbfund-32x32.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 331f8022f00882988b3dd50a45511040
295b137770dedf8de5101ba30c05f515e21b6fb0
f83bb7fbb6ab6b05a6129fdc513d6edeb3b9029b0cbe6cf3eae361ad56c58cf5
GET /wp-content/uploads/cropped-iconusbfund-32x32.png HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.1.1670224010.0.0.0; _ga=GA1.1.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP; wc_client_current=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; IR_gbd=usbfund.com; IR_7486=1670224010099%7C0%7C1670224010099%7C%7C; soundestID=20221205070650-d5NGR0EiwjzsSh78IUkVK1FEtFdT6A416gxzYIQR1bWG6KLvH; soundest-views=1; wc_swap=9494033493+..+9494611140+..+68836
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 28 Sep 2019 00:14:07 GMT
accept-ranges: bytes
content-length: 1438
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Mon, 05 Dec 2022 07:06:53 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a97c490a5f57669e4779f159c4dc7c2e
a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc
440bae73a0f989f36ec69b72d2cd21fab3637efc498af4a5e77d74a55ea7fca7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 07:06:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 01:42:53 GMT
Expires: Sun, 11 Dec 2022 01:42:52 GMT
Etag: "a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc"
Cache-Control: max-age=498358,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774af1165945b503-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 95b7c06c28263152be8f9b93be817df1
0832b6bda49d24e42a1a4d65691056a31831ee89
408abdb40f3e63a2c5fe8481e626fcf07181eb6d8ffb60474ad3b72adb0aef4f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148025
Date: Mon, 05 Dec 2022 07:06:53 GMT
Etag: "638d2c3b-1d7"
Expires: Wed, 07 Dec 2022 00:13:58 GMT
Last-Modified: Sun, 04 Dec 2022 23:24:43 GMT
Server: ECS (dcb/7FA7)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Kmg-eWQj9G-oenfIVsZ0KiAKz1hNLT0PtFe6AzNd08DyONfayrVPIA==
Age: 2955
www.checkbca.org/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZBAd-3g2iBrrqGpefWWgmRAZw8TONzGF-aV_9TjkbkyCvwDWnstKlAYe583il9NLzw2&t=637823077705833095
200 OK 23 kB URL HTTP/2 www.checkbca.org/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZBAd-3g2iBrrqGpefWWgmRAZw8TONzGF-aV_9TjkbkyCvwDWnstKlAYe583il9NLzw2&t=637823077705833095
IP
File type ASCII text, with CRLF line terminators
Hash 20180537e2ac64e5c60143ac90c84998
82d03de61c4dededbc9fd79d8c3a8e18d3b43744
0999cb5dfb2dcd76a944ef880be49f8e2d66fc60d00817e2b251ba0a67090cbf
GET /WebResource.axd?d=pynGkmcFUV13He1Qd6_TZBAd-3g2iBrrqGpefWWgmRAZw8TONzGF-aV_9TjkbkyCvwDWnstKlAYe583il9NLzw2&t=637823077705833095 HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: application/x-javascript
content-encoding: gzip
expires: Tue, 05 Dec 2023 03:44:05 GMT
last-modified: Tue, 08 Mar 2022 11:42:50 GMT
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 23086
X-Firefox-Spdy: h2
www.checkbca.org/Scripts/WebForms/MsAjax/MicrosoftAjax.js
301 Moved Permanently 188 B URL HTTP/2 www.checkbca.org/Scripts/WebForms/MsAjax/MicrosoftAjax.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6f83537ac9d2567aa0049ad8d28282d8
7e4975fe0edee16d97ab1f59dd7473a95902f30e
c614ae1fc44d88ab3555782295fd0de23f7b1062ef93e0777530a9ff2fdb2fe6
GET /Scripts/WebForms/MsAjax/MicrosoftAjax.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: no-cache
content-type: text/html; charset=UTF-8
location: https://www.checkbca.org/scripts/webforms/msajax/microsoftajax.js
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 188
X-Firefox-Spdy: h2
www.checkbca.org/Scripts/WebForms/MsAjax/MicrosoftAjaxWebForms.js
301 Moved Permanently 196 B URL HTTP/2 www.checkbca.org/Scripts/WebForms/MsAjax/MicrosoftAjaxWebForms.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 95d708e49ef3d81c5832e354dbdafb01
ddb6aa6d1990a59c42331129fef517bb9101fad1
429e36746d58356e8d7fd50c755f2ec8de5fcf67bc3980f782eef9c14e89db18
GET /Scripts/WebForms/MsAjax/MicrosoftAjaxWebForms.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: no-cache
content-type: text/html; charset=UTF-8
location: https://www.checkbca.org/scripts/webforms/msajax/microsoftajaxwebforms.js
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 196
X-Firefox-Spdy: h2
aorta.clickagy.com/pixel.gif?clkgypv=jstag
302 Found 0 B URL HTTP/2 aorta.clickagy.com/pixel.gif?clkgypv=jstag
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?clkgypv=jstag HTTP/1.1
Host: aorta.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: application/json
content-length: 0
location: https://cm.g.doubleclick.net/pixel?google_nid=clickagy&google_sc&google_cm&google_hm=YzozYjQ5NjgzYjY4YmU4NjE1NDNhZWVlMDE3MTNmYTUwYw
server: Aorta/20221117.e7edcc499
x-aorta-host: 8353f936eb14
x-aorta-region: us-east-1
access-control-allow-credentials: true
access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction
access-control-expose-headers: Set-Cookie
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin:
access-control-max-age: 31536000
cache-control: no-cache, no-store, must-revalidate
expect: 0
X-Firefox-Spdy: h2
munchkin.marketo.net/162/munchkin.js
200 OK 4.7 kB URL HTTP/1.1 munchkin.marketo.net/162/munchkin.js
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (606)
Hash 3e9baed982956735f6e0a0e756d97ed9
9223be6a494a10959101a7942419df7b05b84d73
930a508ed0ea6b4861d19c0738360182514010913c4ebfe9352064ae5006f8a1
GET /162/munchkin.js HTTP/1.1
Host: munchkin.marketo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "75daf56f6191efe42577301908659c29:1656637152.894482"
Last-Modified: Fri, 01 Jul 2022 00:59:12 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=8640000
Expires: Wed, 15 Mar 2023 07:06:54 GMT
Date: Mon, 05 Dec 2022 07:06:54 GMT
Content-Length: 4677
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
id.rlcdn.com/711861.gif
451 Unavailable For Legal Reasons 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /711861.gif HTTP/1.1
Host: id.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 451 Unavailable For Legal Reasons
date: Mon, 05 Dec 2022 07:06:54 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rec.smartlook.com/recorder.js
200 OK 1.1 kB URL HTTP/2 rec.smartlook.com/recorder.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (3010), with no line terminators
Hash 2259ed13f785b1353730458ac40b28b7
b94f0bcd1c490209bc603c9485e4e13f63069a79
3117cf47ee412e1e3bd27ebe8fc14577c74d03ddbdb21f13fb2074f33f7a9b91
GET /recorder.js HTTP/1.1
Host: rec.smartlook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=600
cross-origin-resource-policy: cross-origin
etag: W/"63861b50-bc2"
last-modified: Tue, 29 Nov 2022 14:46:40 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-accel-expires: @1670224018
server: CDN77-Turbo
x-77-nzt: AblMCQ1MKpH/UwIAAA
x-77-nzt-ray: c0a4cc286fe3d8a68d988d630d05f230
x-cache: HIT
x-age: 595
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.checkbca.org/scripts/jquery-3.3.1.min.js
200 OK 30 kB URL HTTP/2 www.checkbca.org/scripts/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash a263be51483c81a54aa8c85104a93e55
555a54a73531c553bd2aede6abc25c128b63312e
b2f13ad730928958c09d89e6e32bb6a227c0260d032a39ca464d998a59e57a66
GET /scripts/jquery-3.3.1.min.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 16 Oct 2018 20:49:20 GMT
accept-ranges: bytes
etag: "0c813b69165d41:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 30394
X-Firefox-Spdy: h2
www.checkbca.org/scripts/jquery.simplemodal.1.4.4.min.js
200 OK 3.1 kB URL HTTP/2 www.checkbca.org/scripts/jquery.simplemodal.1.4.4.min.js
IP
File type ASCII text, with very long lines (626), with CRLF, LF line terminators
Hash 487fda8eb4e12565909588706300e2fb
9224d8c027d499bb7ec852c2bf3c580e593f5d5b
664736273b9cff9b035c3c682e6ea5e1220468bf24d3199d45148b0a45e101dc
GET /scripts/jquery.simplemodal.1.4.4.min.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 16 Oct 2018 20:49:20 GMT
accept-ranges: bytes
etag: "0c813b69165d41:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 3081
X-Firefox-Spdy: h2
tag.simpli.fi/sifitag/7c49dfc0-b0ef-0139-b544-06a60fe5fe77
200 OK 3.1 kB URL HTTP/2 tag.simpli.fi/sifitag/7c49dfc0-b0ef-0139-b544-06a60fe5fe77
IP
File type ASCII text, with very long lines (3100)
Hash 3f39bd6aa96de4bb5bd9275b06354981
14f61e1cbeb536266027c98d8f48cc3211f1a2b2
4f8cbfd5c952dcec41e51c8cdf551acc7acf44e7e4d51ab90be179a503fb4b00
GET /sifitag/7c49dfc0-b0ef-0139-b544-06a60fe5fe77 HTTP/1.1
Host: tag.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 3101
set-cookie: suid=56DECC8C03304D94A12792E97619C24B; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:53 GMT; SameSite=none; Secure;
suid_legacy=56DECC8C03304D94A12792E97619C24B; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:53 GMT; Secure;
x-request-id: Fy3T5D6v6WK2hOCdjP5h
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=0, private, must-revalidate, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache, no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT, Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5670c32d73c3d5771a2d9396774a7eb9
3fb62916ff54f22a011e11730ba87fea48e5d239
062531ed89864b713048421c9639d4a6249e92f33ef4177206f1deb5d85a8757
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cm.g.doubleclick.net/pixel?google_nid=clickagy&google_sc&google_cm&google_hm=YzozYjQ5NjgzYjY4YmU4NjE1NDNhZWVlMDE3MTNmYTUwYw
302 Found 357 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=clickagy&google_sc&google_cm&google_hm=YzozYjQ5NjgzYjY4YmU4NjE1NDNhZWVlMDE3MTNmYTUwYw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash bc322d093c370839097f9df9f81a670e
8d13c22098d746b540209ebba67ab40f9ba8c9f9
c50375f48b204af3f442f1feb19dab0a99ff661a1a4c97cebc1a8455bc37c7f0
GET /pixel?google_nid=clickagy&google_sc&google_cm&google_hm=YzozYjQ5NjgzYjY4YmU4NjE1NDNhZWVlMDE3MTNmYTUwYw HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=clickagy&google_sc=&google_cm=&google_hm=YzozYjQ5NjgzYjY4YmU4NjE1NDNhZWVlMDE3MTNmYTUwYw&google_tc=
date: Mon, 05 Dec 2022 07:06:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 357
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 05-Dec-2022 07:21:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.checkbca.org/scripts/jquery.bxslider.min.js
200 OK 5.1 kB URL HTTP/2 www.checkbca.org/scripts/jquery.bxslider.min.js
IP
File type ASCII text, with very long lines (18813)
Hash 9777aab0bd6025cd5c7ecaebd409284d
ab73cc0c1c09e58a1fa0d5bda44c313f697f14da
7b01c6335fa7c91f0b359d56158676c2553323f6e09dd01db242b0da0d104d1b
GET /scripts/jquery.bxslider.min.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 16 Oct 2018 20:49:20 GMT
accept-ranges: bytes
etag: "0c813b69165d41:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 5135
X-Firefox-Spdy: h2
www.checkbca.org/scripts/jquery.selectBox.js
301 Moved Permanently 175 B URL HTTP/2 www.checkbca.org/scripts/jquery.selectBox.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 46da262b5b1399dfbf30fac73e57a298
c176cf3cfa6da6a0748c497591ff3619467d6434
4089029c368f61bcc5e6be36c952e1c440e0e20475e247b8316c6ce57ea7cc99
GET /scripts/jquery.selectBox.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: no-cache
content-type: text/html; charset=UTF-8
location: https://www.checkbca.org/scripts/jquery.selectbox.js
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 175
X-Firefox-Spdy: h2
www.checkbca.org/scripts/scripts.js
200 OK 4.3 kB URL HTTP/2 www.checkbca.org/scripts/scripts.js
IP
File type ASCII text, with CRLF line terminators
Hash 3b38a1caac14cc0685da48549e84da3b
2ce4f852dced2ddee12614640dcfeb0f3a96ae48
4e45d270791d6d30c782e95c1763ef0a1ac7b934d5cb703b651f3c6434c8b22b
GET /scripts/scripts.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 21:47:29 GMT
accept-ranges: bytes
etag: "806e7c4bcfed81:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 4272
X-Firefox-Spdy: h2
www.checkbca.org/images/widget_member_seal.png
200 OK 4.9 kB URL HTTP/2 www.checkbca.org/images/widget_member_seal.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash b16b18a3bc55b39e53d58026662582b1
f1ef3e2605c0eb6afd312dcc7b354b4d0dee54a2
fb715daa7fae403543290995b70576747818581d044e57b5ac072fd27c84e1bf
GET /images/widget_member_seal.png HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: image/png
last-modified: Sat, 09 May 2020 03:31:08 GMT
accept-ranges: bytes
etag: "8a855647b225d61:0"
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 4897
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=clickagy&google_sc=&google_cm=&google_hm=YzozYjQ5NjgzYjY4YmU4NjE1NDNhZWVlMDE3MTNmYTUwYw&google_tc=
302 Found 265 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=clickagy&google_sc=&google_cm=&google_hm=YzozYjQ5NjgzYjY4YmU4NjE1NDNhZWVlMDE3MTNmYTUwYw&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 9f1fbfff37b680f152cc71b6eecdb9d1
068b67c14ee6a05b91435957019babb787d18212
d1678feba8438532e9c3cb5d3d41dbd316e8947604241a7954214a3bd599816b
GET /pixel?google_nid=clickagy&google_sc=&google_cm=&google_hm=YzozYjQ5NjgzYjY4YmU4NjE1NDNhZWVlMDE3MTNmYTUwYw&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://aorta.clickagy.com/pixel.gif?ch=8&cm=&google_error=3
date: Mon, 05 Dec 2022 07:06:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 265
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.checkbca.org/stylesheets/jquery.selectbox.css
200 OK 844 B URL HTTP/2 www.checkbca.org/stylesheets/jquery.selectbox.css
IP
File type ASCII text, with very long lines (2823), with no line terminators
Hash ef6ac3dc00cd170fb2e40e76489dc10d
02964dcc31527690062facef2f5ca2c0cf24ea23
06e4f8e3d1d4e68a23c9fd4927304906f912307b71f80025f6b74dfe3945d813
GET /stylesheets/jquery.selectbox.css HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: text/css
content-encoding: gzip
last-modified: Fri, 02 Aug 2019 17:52:06 GMT
accept-ranges: bytes
etag: "0a783ff5a49d51:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 844
X-Firefox-Spdy: h2
rec.smartlook.com/es6/init.462db28866d53d1d25a1.js
200 OK 15 kB URL HTTP/2 rec.smartlook.com/es6/init.462db28866d53d1d25a1.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (54308)
Hash 307c68cc941a995c4fd2c7819fbc6536
fae95ee16274ba19438e78646c577ad9cda90d45
61bb9b2cbd62cfeb5cd9485c4c32729b19d1bb16a369bbb302c900c9c3695ad6
GET /es6/init.462db28866d53d1d25a1.js HTTP/1.1
Host: rec.smartlook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:54 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
cross-origin-resource-policy: cross-origin
etag: W/"63861b50-d477"
last-modified: Tue, 29 Nov 2022 14:46:40 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-accel-expires: @1701270485
server: CDN77-Turbo
x-77-nzt: AblMCQ1QJ2D/OXgHAA
x-77-nzt-ray: c0a4cc282fde8aa98e988d63b5096e05
x-cache: HIT
x-age: 489529
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.checkbca.org/scripts/webforms/msajax/microsoftajax.js
200 OK 24 kB URL HTTP/2 www.checkbca.org/scripts/webforms/msajax/microsoftajax.js
IP
File type ASCII text, with very long lines (65262), with CRLF line terminators
Hash 1aa546445a52ff5e781cb1e335f445c4
a8071c7d8f7c2798100ceed7ef5842a587cc41d2
6a3e80b4cc602560e187e061ff5070fdda5c608125956f878f417b01867f6b09
GET /scripts/webforms/msajax/microsoftajax.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 21:47:32 GMT
accept-ranges: bytes
etag: "032466bcfed81:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 24320
X-Firefox-Spdy: h2
www.checkbca.org/scripts/webforms/msajax/microsoftajaxwebforms.js
200 OK 9.6 kB URL HTTP/2 www.checkbca.org/scripts/webforms/msajax/microsoftajaxwebforms.js
IP
File type ASCII text, with very long lines (39257), with CRLF line terminators
Hash 211aa6b9096a11187131cbc6c3ab6d16
380ff6b00fc93d78031319a6d1b0e78f2a9e6017
4f1ec7256c84b77776b8c75fd59dca0c6b5560fa3a5010a290e46b6b5d8d4f5f
GET /scripts/webforms/msajax/microsoftajaxwebforms.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 21:47:32 GMT
accept-ranges: bytes
etag: "032466bcfed81:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 9603
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=58092&time=1670224011293&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=58092&time=1670224011293&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=58092&time=1670224011293&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D58092%26time%3D1670224011293%26url%3Dhttps%253A%252F%252Fwww.usbfund.com%252Fget-a-small-business-loan%252F%253Futm_source%253Dbayengage%2526utm_medium%253Dcampaign-email%2526utm_campaign%253Dcredit-score-for-small-business%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKOUQmjdHz5aAAAAYThG-s8sNT3q5HLaLZtDblNZQEi82Gx7QdigtJDZmJOJOSIA8GbQBqIbMdYwg; Max-Age=2592000; Expires=Wed, 04 Jan 2023 07:06:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJHKSTTPqjptwAAAYThG-s9Y4AtBBrECrC8ZYP93Dg6I7c-ks5Hlj9vD7NbMIT1L7YT1OMI_VEmQn-bVjCLXw; Max-Age=2592000; Expires=Wed, 04 Jan 2023 07:06:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&ec3c4313-1cd8-4538-88f7-992df86632df"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 05-Dec-2023 07:06:54 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2427:u=1:x=1:i=1670224014:t=1670310414:v=2:sig=AQHhwwpiNzJi4mYIXMcjg2O5nAt1ORIM"; Expires=Tue, 06 Dec 2022 07:06:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXvD1UOxnseiYGIqrF9vw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 1C39BF29798B4860AAECCC07A39F6AE2 Ref B: OSL30EDGE0414 Ref C: 2022-12-05T07:06:54Z
date: Mon, 05 Dec 2022 07:06:54 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a97c490a5f57669e4779f159c4dc7c2e
a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc
440bae73a0f989f36ec69b72d2cd21fab3637efc498af4a5e77d74a55ea7fca7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 07:06:54 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 01:42:53 GMT
Expires: Sun, 11 Dec 2022 01:42:52 GMT
Etag: "a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc"
Cache-Control: max-age=498357,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774af1180ae3b503-OSL
aorta.clickagy.com/pixel.gif?ch=8&cm=&google_error=3
302 Found 0 B URL HTTP/2 aorta.clickagy.com/pixel.gif?ch=8&cm=&google_error=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?ch=8&cm=&google_error=3 HTTP/1.1
Host: aorta.clickagy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Mon, 05 Dec 2022 07:06:54 GMT
content-type: application/json
content-length: 0
location: https://sync.crwdcntrl.net/map/c=8545/tp=CKGY/tpid=c:3b49683b68be861543aeee01713fa50c/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D
server: Aorta/20221117.e7edcc499
x-aorta-host: 632e66014583
x-aorta-region: us-east-1
access-control-allow-credentials: true
access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction
access-control-expose-headers: Set-Cookie
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin:
access-control-max-age: 31536000
cache-control: no-cache, no-store, must-revalidate
expect: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d9e6901efe7120f273b10256a6c09bcd
8e1b9ce969db430c2812f340f9b84d7de4ad7529
31ec040b2c1552c3e4671ff2de82a68e6d82ea4ac03e3afc25f7438c7d0df802
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171974
Date: Mon, 05 Dec 2022 07:06:54 GMT
Etag: "638d84d5-1d7"
Expires: Wed, 07 Dec 2022 06:53:08 GMT
Last-Modified: Mon, 05 Dec 2022 05:42:45 GMT
Server: ECS (dcb/7EED)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iC9UPyXG7qYK2ElrPuixFvbxWhnoX4kNSUpaWDa6j2C1wqZERO2E2A==
Age: 4223
www.checkbca.org/scripts/jquery.selectbox.js
200 OK 4.2 kB URL HTTP/2 www.checkbca.org/scripts/jquery.selectbox.js
IP
File type Unicode text, UTF-8 text, with very long lines (15896), with no line terminators
Hash 786f2eb7bf72098ca18b9afd6d127237
5e75cb575c23f13e064a913cbe55570670e718ab
d8a1f1df33bbe0f528bfd53be5c1388890220e54c5aaa7281b889a1e5dde3189
GET /scripts/jquery.selectbox.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 16 Oct 2018 20:49:20 GMT
accept-ranges: bytes
etag: "0c813b69165d41:0"
vary: Accept-Encoding
date: Mon, 05 Dec 2022 07:06:53 GMT
content-length: 4192
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D58092%26time%3D1670224011293%26url%3Dhttps%253A%252F%252Fwww.usbfund.com%252Fget-a-small-business-loan%252F%253Futm_source%253Dbayengage%2526utm_medium%253Dcampaign-email%2526utm_campaign%253Dcredit-score-for-small-business%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D58092%26time%3D1670224011293%26url%3Dhttps%253A%252F%252Fwww.usbfund.com%252Fget-a-small-business-loan%252F%253Futm_source%253Dbayengage%2526utm_medium%253Dcampaign-email%2526utm_campaign%253Dcredit-score-for-small-business%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D58092%26time%3D1670224011293%26url%3Dhttps%253A%252F%252Fwww.usbfund.com%252Fget-a-small-business-loan%252F%253Futm_source%253Dbayengage%2526utm_medium%253Dcampaign-email%2526utm_campaign%253Dcredit-score-for-small-business%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=58092&time=1670224011293&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&e5c19221-51c9-47bf-8c06-4c3395100674"; Domain=.linkedin.com; Expires=Tue, 05-Dec-2023 07:06:54 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202212050706549397c216-c807-4afb-8670-2c6b59cb3e01AQF-qphsQs_W3GVOh7DrdNMYXFXRYggQ"; Domain=.www.linkedin.com; Expires=Tue, 05-Dec-2023 07:06:54 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzAyMjQwMTQ7MjswMjFjEK20FLPAa2a3rxzS9mDlrc8aLPxlJBWi9yhSfHDZwA==; Domain=.linkedin.com; Expires=Sat, 03 Jun 2023 07:06:54 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2443:u=1:x=1:i=1670224014:t=1670310414:v=2:sig=AQHCpkDhh92t2i2k2-n7ywoi6FMuT39a"; Expires=Tue, 06 Dec 2022 07:06:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com onyx.www.linkedin.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXvD1USXmgHIGrqzw6+nQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: EC4779322460404F8E99E929FE4CF33A Ref B: OSL30EDGE0414 Ref C: 2022-12-05T07:06:54Z
date: Mon, 05 Dec 2022 07:06:54 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash ba3e9a2efa547ae31f6deb0bf26ed328
d53b7d4d39e04e39db7b625ed5e3ed3ef94ef3c4
8cd24e12e6f7464c3a8c4838237bb24e42c66e899a9224f1ac0c17d225014834
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 05 Dec 2022 07:06:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 04 Dec 2022 22:11:49 GMT
Expires: Mon, 05 Dec 2022 22:11:49 GMT
ETag: "d53b7d4d39e04e39db7b625ed5e3ed3ef94ef3c4"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sync.crwdcntrl.net/map/c=8545/tp=CKGY/tpid=c:3b49683b68be861543aeee01713fa50c/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D
404 Not Found 49 B URL HTTP/2 sync.crwdcntrl.net/map/c=8545/tp=CKGY/tpid=c:3b49683b68be861543aeee01713fa50c/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 56398e76be6355ad5999b262208a17c9
a1fdee122b95748d81cee426d717c05b5174fe96
2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
GET /map/c=8545/tp=CKGY/tpid=c:3b49683b68be861543aeee01713fa50c/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D HTTP/1.1
Host: sync.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Mon, 05 Dec 2022 07:06:54 GMT
content-type: image/gif
content-length: 49
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.16.45
access-control-allow-origin: *
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
sc.cdnma.com/apps/18595/capture.js
200 OK 8.4 kB URL HTTP/2 sc.cdnma.com/apps/18595/capture.js
IP
Hash 00cbc4c9da6c4eb6592242effe712ce9
5f47d76d69bc52f91b039dafe225400523d02027
2c23425b292432bce5aaa3d3a6fda81b98df2b338d8fdd6dbd7c1f80aa7accce
GET /apps/18595/capture.js HTTP/1.1
Host: sc.cdnma.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 05 Dec 2022 05:05:23 GMT
last-modified: Mon, 13 Jun 2022 17:04:49 GMT
etag: W/"62a76e31-6b96"
expires: Mon, 05 Dec 2022 09:05:23 GMT
cache-control: max-age=14400
access-control-allow-origin: *
strict-transport-security: max-age=0; includeSubDomains; preload
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: HxgJaBrzjQBKuUytYZkw4AHszY5Irk0jCWiR48WOP4N1B_IZYnCFgA==
age: 7290
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=58092&time=1670224011293&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=58092&time=1670224011293&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=58092&time=1670224011293&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&be345994-09ce-4338-85ef-c769d8b37e19"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 05-Dec-2023 07:06:54 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2427:u=1:x=1:i=1670224014:t=1670310414:v=2:sig=AQHhwwpiNzJi4mYIXMcjg2O5nAt1ORIM"; Expires=Tue, 06 Dec 2022 07:06:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXvD1UU7YHQSKLXaEH1qg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 89C3FE07BBC54C2F97CA1C289BD97D0C Ref B: OSL30EDGE0414 Ref C: 2022-12-05T07:06:54Z
date: Mon, 05 Dec 2022 07:06:54 GMT
content-length: 0
X-Firefox-Spdy: h2
www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
200 OK 6.8 kB URL HTTP/2 www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (604), with CRLF line terminators
Hash a9c60bd63bf77eb51d5d3583ea760a54
532e8a69726fb1c3ff31d0525ac2e1bf4c0b7c8b
e3825bd861a97ec72154aa0b7e23a1fb9f4157629be84b39e3bdf308a2af2db7
GET /companywidget.aspx?ID=100094667&WidgetType=1 HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: ASP.NET_SessionId=abyul3dm35fvy2ca2kl1no0x; path=/; secure; HttpOnly; SameSite=Lax
date: Mon, 05 Dec 2022 07:06:54 GMT
content-length: 6794
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2836e295833b779aa6b7cf3f590483fb
2309e95b835542006504b73c08e6bc23946a224e
3af6e9e3b03983fd28b2f804b34f3e89ae9ef287df1d83f28e80149bc64a7c3d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3AF6E9E3B03983FD28B2F804B34F3E89AE9EF287DF1D83F28E80149BC64A7C3D"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19877
Expires: Mon, 05 Dec 2022 12:38:11 GMT
Date: Mon, 05 Dec 2022 07:06:54 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash b6b458ae21a3d306bd53c0f4a6d6b06f
38c8bf5fe6d69b3daea87ed282e1c09c46313079
bfe3ec21d78efa6b37d90da8ddb147f5f849d598cd232f686d03a99ea2071ab9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4728
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:54 GMT
Last-Modified: Mon, 05 Dec 2022 05:48:07 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
511-lvj-854.mktoresp.com/webevents/visitWebPage?_mchNc=1670224011484&_mchCn=&_mchId=511-LVJ-854&_mchTk=_mch-usbfund.com-1670222275328-57144&_mchHo=www.usbfund.com&_mchPo=&_mchRu=%2Fget-a-small-business-loan%2F&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=&_mchQp=utm_source%3Dbayengage__-__utm_medium%3Dcampaign-email__-__utm_campaign%3Dcredit-score-for-small-business
200 OK 43 B URL HTTP/1.0 511-lvj-854.mktoresp.com/webevents/visitWebPage?_mchNc=1670224011484&_mchCn=&_mchId=511-LVJ-854&_mchTk=_mch-usbfund.com-1670222275328-57144&_mchHo=www.usbfund.com&_mchPo=&_mchRu=%2Fget-a-small-business-loan%2F&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=&_mchQp=utm_source%3Dbayengage__-__utm_medium%3Dcampaign-email__-__utm_campaign%3Dcredit-score-for-small-business
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 7e1a751d6f8efada000e3df3aac35514
4c73d56e1221bcee6aca2e954b71b9d6216de36e
cbbd42bb1d88693e6805bd9d676840424af5ecf3e13d874fd06e6b57d53d8d40
POST /webevents/visitWebPage?_mchNc=1670224011484&_mchCn=&_mchId=511-LVJ-854&_mchTk=_mch-usbfund.com-1670222275328-57144&_mchHo=www.usbfund.com&_mchPo=&_mchRu=%2Fget-a-small-business-loan%2F&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=&_mchQp=utm_source%3Dbayengage__-__utm_medium%3Dcampaign-email__-__utm_campaign%3Dcredit-score-for-small-business HTTP/1.1
Host: 511-lvj-854.mktoresp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.0 200 OK
Server: BigIP
Connection: Keep-Alive
Content-Length: 43
www.checkbca.org/stylesheets/font-awesome.min.css
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/stylesheets/font-awesome.min.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stylesheets/font-awesome.min.css HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 22 Nov 2022 21:47:32 GMT
If-None-Match: "032466bcfed81:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
www.checkbca.org/stylesheets/jquery.selectBox.css
301 Moved Permanently 180 B URL HTTP/2 www.checkbca.org/stylesheets/jquery.selectBox.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 65d99af646ca7622a01fc0d3eb7a6b6d
a6b71820c0572f17c183b5669255346947bc3492
425fea6b4acfc8c48eee414af2be035b5c77a87742cf0bb46b136d07e0c29f6a
GET /stylesheets/jquery.selectBox.css HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: no-cache
content-type: text/html; charset=UTF-8
location: https://www.checkbca.org/stylesheets/jquery.selectbox.css
date: Mon, 05 Dec 2022 07:06:54 GMT
content-length: 180
X-Firefox-Spdy: h2
www.checkbca.org/stylesheets/style.css
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/stylesheets/style.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stylesheets/style.css HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 22 Nov 2022 21:47:32 GMT
If-None-Match: "032466bcfed81:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
www.checkbca.org/Scripts/WebForms/MsAjax/MicrosoftAjax.js
301 Moved Permanently 188 B URL HTTP/2 www.checkbca.org/Scripts/WebForms/MsAjax/MicrosoftAjax.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6f83537ac9d2567aa0049ad8d28282d8
7e4975fe0edee16d97ab1f59dd7473a95902f30e
c614ae1fc44d88ab3555782295fd0de23f7b1062ef93e0777530a9ff2fdb2fe6
GET /Scripts/WebForms/MsAjax/MicrosoftAjax.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: no-cache
content-type: text/html; charset=UTF-8
location: https://www.checkbca.org/scripts/webforms/msajax/microsoftajax.js
date: Mon, 05 Dec 2022 07:06:54 GMT
content-length: 188
X-Firefox-Spdy: h2
www.checkbca.org/Scripts/WebForms/MsAjax/MicrosoftAjaxWebForms.js
301 Moved Permanently 196 B URL HTTP/2 www.checkbca.org/Scripts/WebForms/MsAjax/MicrosoftAjaxWebForms.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 95d708e49ef3d81c5832e354dbdafb01
ddb6aa6d1990a59c42331129fef517bb9101fad1
429e36746d58356e8d7fd50c755f2ec8de5fcf67bc3980f782eef9c14e89db18
GET /Scripts/WebForms/MsAjax/MicrosoftAjaxWebForms.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: no-cache
content-type: text/html; charset=UTF-8
location: https://www.checkbca.org/scripts/webforms/msajax/microsoftajaxwebforms.js
date: Mon, 05 Dec 2022 07:06:54 GMT
content-length: 196
X-Firefox-Spdy: h2
www.checkbca.org/scripts/jquery-3.3.1.min.js
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/scripts/jquery-3.3.1.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/jquery-3.3.1.min.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 16 Oct 2018 20:49:20 GMT
If-None-Match: "0c813b69165d41:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c79c7b37c4590cf35971dfdd1cd01272
937c294377c949f1c730f036d2324b46fbb9e5f6
15d825384982dfb5ca285b01c4dd92feb5fca5058bae4e8cec479ca554a0e253
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 05 Dec 2022 07:06:55 GMT
Last-Modified: Mon, 05 Dec 2022 05:52:45 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: psGL_u8MoKjYGWwWcbS0WMx4nP8cbGgHm3gZHQS3XLwSrKC4__x2Yw==
Age: 4450
www.checkbca.org/scripts/jquery.simplemodal.1.4.4.min.js
304 Not Modified 139 B URL HTTP/2 www.checkbca.org/scripts/jquery.simplemodal.1.4.4.min.js
IP
File type gzip compressed data, max speed, from Unix\012- data
Hash 5bbde79f5ff6985fcfad6c5021b6ea0b
4a1f394449987425be17399554659850f5d9aec7
ffc1b36c736f6e4011a4c335746a655cacc3167b5218511b9525733469dfcc99
GET /scripts/jquery.simplemodal.1.4.4.min.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 16 Oct 2018 20:49:20 GMT
If-None-Match: "0c813b69165d41:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
www.checkbca.org/scripts/jquery.bxslider.min.js
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/scripts/jquery.bxslider.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/jquery.bxslider.min.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 16 Oct 2018 20:49:20 GMT
If-None-Match: "0c813b69165d41:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/plugins/formidable/css/formidableforms.css
200 OK 29 kB URL HTTP/2 www.usbfund.com/wp-content/plugins/formidable/css/formidableforms.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 836f76116358d0cfa49d508e1afa1ff0
28d3242d26998c4fdd5e8921041a4e0e81b98135
f6614f4889a3b96c989a0a92f7f543ee0f774316fdc9791a5cfd7b4e034cff30
GET /wp-content/plugins/formidable/css/formidableforms.css HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 16:10:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/css
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
speedyfox.io/anywhere/5f1d4e2f1d5e403592a56487267b609f40807d7ef69744e7aa045795455c9581?t=&u=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&r=
403 Forbidden 18 B URL HTTP/1.1 speedyfox.io/anywhere/5f1d4e2f1d5e403592a56487267b609f40807d7ef69744e7aa045795455c9581?t=&u=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&r=
IP
File type ASCII text, with no line terminators
Hash 25f009f228cd844020264ff74a36bb64
8e2ada0df86c2ea12930c55ebdc0575aa5e31d87
a4578829918d4df61d980bf0665df65a68d19ea4de6d0dfdb75fb099b47474bf
GET /anywhere/5f1d4e2f1d5e403592a56487267b609f40807d7ef69744e7aa045795455c9581?t=&u=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&r= HTTP/1.1
Host: speedyfox.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Content-Type: application/json
Content-Length: 18
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
X-Timing: lt=0
Date: Mon, 05 Dec 2022 07:06:55 GMT
Connection: close
www.checkbca.org/scripts/scripts.js
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/scripts/scripts.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/scripts.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 22 Nov 2022 21:47:29 GMT
If-None-Match: "806e7c4bcfed81:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
manager.eu.smartlook.cloud/rec/sessions/8yeMmMQylYAXL5CaVe6vh/active?projectKey=532e326dd2a3ae45d5a84ad0772bb857a7a355ce
200 OK 28 B URL HTTP/1.1 manager.eu.smartlook.cloud/rec/sessions/8yeMmMQylYAXL5CaVe6vh/active?projectKey=532e326dd2a3ae45d5a84ad0772bb857a7a355ce
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash da1ca745357e0fd9bc374003c45f1435
887a292f6f79b933fef37f7f0332c1a913388916
47ff0c0992e6e1717fc00314c60872d0c21d27d29a7263ac82bad2dff8443182
GET /rec/sessions/8yeMmMQylYAXL5CaVe6vh/active?projectKey=532e326dd2a3ae45d5a84ad0772bb857a7a355ce HTTP/1.1
Host: manager.eu.smartlook.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.usbfund.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request, X-Requested-With, Content-Type, Cookie
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: https://www.usbfund.com
Content-Type: application/json; charset=utf-8
Date: Mon, 05 Dec 2022 07:06:55 GMT
sl-trace-id: k_ft12TVbNBhcZZWr9R7C
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Content-Length: 28
Connection: keep-alive
www.checkbca.org/stylesheets/jquery.selectbox.css
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/stylesheets/jquery.selectbox.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stylesheets/jquery.selectbox.css HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Fri, 02 Aug 2019 17:52:06 GMT
If-None-Match: "0a783ff5a49d51:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 181b661534dc3f6bbe887293452f685b
bf4e024b51870992b7b41ee50e570bebf4705bfb
4d7472e9a604e69e65040a318534883d14275d6ef7e19c6eb42a8a25099d8eeb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.checkbca.org/scripts/webforms/msajax/microsoftajax.js
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/scripts/webforms/msajax/microsoftajax.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/webforms/msajax/microsoftajax.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 22 Nov 2022 21:47:32 GMT
If-None-Match: "032466bcfed81:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
www.checkbca.org/scripts/webforms/msajax/microsoftajaxwebforms.js
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/scripts/webforms/msajax/microsoftajaxwebforms.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/webforms/msajax/microsoftajaxwebforms.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 22 Nov 2022 21:47:32 GMT
If-None-Match: "032466bcfed81:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
um.simpli.fi/triplelift
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /triplelift HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://eb2.3lift.com/xuid?mid=7969&xuid=C5C7F3798FB54460B3393AB7C7283A6D&dongle=yf3
set-cookie: suid=C5C7F3798FB54460B3393AB7C7283A6D; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=C5C7F3798FB54460B3393AB7C7283A6D; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/freewheel
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /freewheel HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=0644F1459CD64CD0AA8CD629EB181B7C; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=0644F1459CD64CD0AA8CD629EB181B7C; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/dtnx
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /dtnx HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://fei.pro-market.net/engine?du=24;csync=582E5804A63947C1B72D576AF5CBFEB6;mimetype=img;
set-cookie: suid=582E5804A63947C1B72D576AF5CBFEB6; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=582E5804A63947C1B72D576AF5CBFEB6; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/exelatem
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /exelatem HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://loadm.exelator.com/load/?p=204&g=2191&simid=D2DD060CDA0B413F8CF0E3FA6A779CB4&j=0
set-cookie: suid=D2DD060CDA0B413F8CF0E3FA6A779CB4; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=D2DD060CDA0B413F8CF0E3FA6A779CB4; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/yahoo
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /yahoo HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=27459BA933A04F598C98FAED81AA9587; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=27459BA933A04F598C98FAED81AA9587; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/beachfront
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /beachfront HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://sync.bfmio.com/sync?pid=141&uid=74ADACD70AD34216911D2BB94C66FE04
set-cookie: suid=74ADACD70AD34216911D2BB94C66FE04; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=74ADACD70AD34216911D2BB94C66FE04; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/bluekai
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /bluekai HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://stags.bluekai.com/site/29931?id=F725A5376F19460DABB3F9EE974EECE1
set-cookie: suid=F725A5376F19460DABB3F9EE974EECE1; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=F725A5376F19460DABB3F9EE974EECE1; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/crwdcntrl
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /crwdcntrl HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=DF24694B60964152A6BF1F74D1F9AC57
set-cookie: suid=DF24694B60964152A6BF1F74D1F9AC57; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=DF24694B60964152A6BF1F74D1F9AC57; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/lj_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /lj_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://ce.lijit.com/merge?pid=2&3pid=B1BFB51735304412857A0C70E7D7DED6
set-cookie: suid=B1BFB51735304412857A0C70E7D7DED6; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=B1BFB51735304412857A0C70E7D7DED6; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
www.checkbca.org/scripts/jquery.selectbox.js
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/scripts/jquery.selectbox.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/jquery.selectbox.js HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Tue, 16 Oct 2018 20:49:20 GMT
If-None-Match: "0c813b69165d41:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:54 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b01b16fb7e18301251b0a89703e5895a
5237d4cd06bcfc464411fe5cdceaf93d13dcbd83
944a7b4600d41a8ea2fa5acb7ecb8021ecafd9d736a10f968682b3d189b77783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
um.simpli.fi/liveramp_match
302 Found 142 B URL HTTP/2 um.simpli.fi/liveramp_match
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /liveramp_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://idsync.rlcdn.com/419566.gif?partner_uid=CB71F31C518B49B2B281B1FA19EBC725
set-cookie: suid=CB71F31C518B49B2B281B1FA19EBC725; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=CB71F31C518B49B2B281B1FA19EBC725; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/spotx_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /spotx_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://sync.search.spotxchange.com/partner?adv_id=7797&uid=3DC4F5E3A93D4072B11F13C87B272721
set-cookie: suid=3DC4F5E3A93D4072B11F13C87B272721; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=3DC4F5E3A93D4072B11F13C87B272721; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/an
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /an HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://ib.adnxs.com/setuid?entity=66&code=773A5CB9F9F940738D3BAA2C7541FC78
set-cookie: suid=773A5CB9F9F940738D3BAA2C7541FC78; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=773A5CB9F9F940738D3BAA2C7541FC78; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
omnisnippet1.com/inShop/forms.js?v=2022-12-05T07
200 OK 30 kB URL HTTP/2 omnisnippet1.com/inShop/forms.js?v=2022-12-05T07
IP
File type ASCII text, with very long lines (32114)
Hash 3c75230c8dd629deeb4df86b653031ee
2a0cd3c3918b71b3fd02f14afa373c25056998c2
7f4b1246b450155963826c17cc2fc167dfb8421cbd7afe8bb12cd7f094625d29
GET /inShop/forms.js?v=2022-12-05T07 HTTP/1.1
Host: omnisnippet1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 07:45:26 GMT
etag: W/"63885b96-2029c"
expires: Mon, 05 Dec 2022 07:02:57 GMT
cache-control: max-age=3600
x-envoy-upstream-service-time: 2
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 808
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 774af1125955b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
um.simpli.fi/ox_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ox_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://us-u.openx.net/w/1.0/sd?id=537072966&val=380D059A15214BAD9AD06AA9EA9D8AB7
set-cookie: suid=380D059A15214BAD9AD06AA9EA9D8AB7; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=380D059A15214BAD9AD06AA9EA9D8AB7; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/g_match?id=&google_error=3
204 No Content 0 B URL HTTP/2 um.simpli.fi/g_match?id=&google_error=3
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g_match?id=&google_error=3 HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 05 Dec 2022 07:06:55 GMT
set-cookie: suid=C0D84361B0114FA1BBEC09C6877755C3; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=C0D84361B0114FA1BBEC09C6877755C3; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/telaria_p
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /telaria_p HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://simplifi.partners.tremorhub.com/sync?UISF=D44F506A57D944DB8D055C77FC927B85
set-cookie: suid=D44F506A57D944DB8D055C77FC927B85; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=D44F506A57D944DB8D055C77FC927B85; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/ad_advisor
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ad_advisor HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=5F12849BE48B4338A6E6CD302D2D9832
set-cookie: suid=5F12849BE48B4338A6E6CD302D2D9832; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=5F12849BE48B4338A6E6CD302D2D9832; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/tapad
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /tapad HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=CF73C7594CB04847B9DEC52D5BAA6C96
set-cookie: suid=CF73C7594CB04847B9DEC52D5BAA6C96; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=CF73C7594CB04847B9DEC52D5BAA6C96; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/intentiq
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /intentiq HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=5ADA274B7D1A4888A4C347B621440248
set-cookie: suid=5ADA274B7D1A4888A4C347B621440248; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=5ADA274B7D1A4888A4C347B621440248; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/pubmatic
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pubmatic HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=BFA6A5C4860D4F2BAC961487E841C337; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=BFA6A5C4860D4F2BAC961487E841C337; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
expires: Sun, 04 Dec 2022 07:06:55 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
manager.eu.smartlook.cloud/rec/setup-recording/website
200 OK 221 B URL HTTP/1.1 manager.eu.smartlook.cloud/rec/setup-recording/website
IP
File type JSON data\012- , ASCII text, with very long lines (468), with no line terminators
Hash acfbb5f3c4d0c9ec8f080de1f9726a0d
7f4afa2809700cea3a4ad97a611e95857f31a0fe
b6f78f7d964ae97858b742cacb4250eeaff178aa2d1dbc4ebb1b54be7490c17b
POST /rec/setup-recording/website HTTP/1.1
Host: manager.eu.smartlook.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.usbfund.com
Content-Length: 122
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request, X-Requested-With, Content-Type, Cookie
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: https://www.usbfund.com
Content-Encoding: br
Content-Type: application/json; charset=utf-8
Date: Mon, 05 Dec 2022 07:06:55 GMT
sl-trace-id: s1QeBJWjwBd75n7wqyt2I
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Content-Length: 221
Connection: keep-alive
ocsp.usertrust.com/
200 OK 472 B IP
Hash a61c25da0f593fcc685902b0ad889b51
e826c5bc5060e84b82d779639903796e6ce43d09
388d6e76134527e9c6f99288e03f9b550b0d001a2bc97ee30ac2be4bb0fab09a
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 07:06:55 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 22:10:18 GMT
Expires: Sat, 10 Dec 2022 22:10:17 GMT
Etag: "e826c5bc5060e84b82d779639903796e6ce43d09"
Cache-Control: max-age=603503,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 515
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774af120abdeb4f4-OSL
bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=DF24694B60964152A6BF1F74D1F9AC57
404 Not Found 49 B URL HTTP/2 bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=DF24694B60964152A6BF1F74D1F9AC57
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 56398e76be6355ad5999b262208a17c9
a1fdee122b95748d81cee426d717c05b5174fe96
2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
GET /map/c=7625/tp=SIMP/tpid=DF24694B60964152A6BF1F74D1F9AC57 HTTP/1.1
Host: bcp.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: image/gif
content-length: 49
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.0.165
access-control-allow-origin: *
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
fei.pro-market.net/engine?du=24;csync=582E5804A63947C1B72D576AF5CBFEB6;mimetype=img;
302 Found 0 B URL HTTP/2 fei.pro-market.net/engine?du=24;csync=582E5804A63947C1B72D576AF5CBFEB6;mimetype=img;
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /engine?du=24;csync=582E5804A63947C1B72D576AF5CBFEB6;mimetype=img; HTTP/1.1
Host: fei.pro-market.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Apache-Coyote/1.1
p3p: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC"
anserver: gapp-eu-5.c.datonics-gcp-01.internal
set-cookie: anProfile="1+1+1f=1+1g=2+1j=57:1+rs=s+rt=5B5A2A9A+s2=(rmep3j)"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None;
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: Mon, 1 Jan 1990 0:0:0 GMT
access-control-allow-origin: *
location: https://fei.pro-market.net/engine?du=24;csync=582E5804A63947C1B72D576AF5CBFEB6;mimetype=img;sr
content-type: image/gif
content-length: 0
date: Mon, 05 Dec 2022 07:06:54 GMT
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4e7b418157c36d6de9afca4b6bd2075e
bda4aab996c6dd33b05dce7d5b61073a03662bc0
0a30286f8b9a72d72df9ff1493b0cd68b0c88e19ed69866d00ebef298e574bbb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 05 Dec 2022 07:06:55 GMT
Last-Modified: Mon, 05 Dec 2022 05:21:37 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: J8HQFChpz-78lm7DrXZK9tszxsrME8kRBFnEW2aAHkMe4_TwUExsUw==
Age: 6318
ocsp.digicert.com/
200 OK 471 B IP
Hash aa6cf67ee3fe0989ba6ab2ea5223c482
e77d928b60522f88db0c34b30423c48119823762
e8f87a9b4c6379ee6285c9623108d4cf2030cfbede1476f33d1ab28c871017bd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4020
Cache-Control: max-age=118509
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Etag: "638cb4c8-1d7"
Expires: Tue, 06 Dec 2022 16:02:04 GMT
Last-Modified: Sun, 04 Dec 2022 14:55:04 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
eb2.3lift.com/xuid?mid=7969&xuid=C5C7F3798FB54460B3393AB7C7283A6D&dongle=yf3
200 OK 37 B URL HTTP/2 eb2.3lift.com/xuid?mid=7969&xuid=C5C7F3798FB54460B3393AB7C7283A6D&dongle=yf3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /xuid?mid=7969&xuid=C5C7F3798FB54460B3393AB7C7283A6D&dongle=yf3 HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9d27fd2680313b3918e17b38080c6d2a
55dd64eacda90f27d3feeb321e459e6300bea215
0b240b7b6e40de91769829ab07af9335c920927a7babd05ff377dd1c37239ca9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6103
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Last-Modified: Mon, 05 Dec 2022 05:25:12 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
fei.pro-market.net/engine?du=24;csync=582E5804A63947C1B72D576AF5CBFEB6;mimetype=img;sr
200 OK 43 B URL HTTP/2 fei.pro-market.net/engine?du=24;csync=582E5804A63947C1B72D576AF5CBFEB6;mimetype=img;sr
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 968c3ad2c1183fee0bf0dd479f7904b7
1d770800ecb05eb9133f9b51620c9e4349656859
3331a0486cb3e8a75c8c2fdf02bf80fd8fe2b811dfe5c7b4aa892d38bfcf604a
GET /engine?du=24;csync=582E5804A63947C1B72D576AF5CBFEB6;mimetype=img;sr HTTP/1.1
Host: fei.pro-market.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
p3p: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC"
anserver: gapp-eu-5.c.datonics-gcp-01.internal
set-cookie: anProfile="0+1+1f=1+1g=2+1j=57:1+rs=s+rt=5B5A2A9A+s2=(rmep3j)"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None;
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: Mon, 1 Jan 1990 0:0:0 GMT
access-control-allow-origin: *
content-type: image/gif
content-length: 43
date: Mon, 05 Dec 2022 07:06:55 GMT
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
stags.bluekai.com/site/29931?id=F725A5376F19460DABB3F9EE974EECE1
200 OK 62 B URL HTTP/2 stags.bluekai.com/site/29931?id=F725A5376F19460DABB3F9EE974EECE1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3f386f5061436a0338a64e0910db495d
599fe4a552c991a2b3ce5a1660732bf7b21fb901
0af3aae90b7de9fdceee2ab421378ea2f54c74be81ef43fc6c1790a032755d80
GET /site/29931?id=F725A5376F19460DABB3F9EE974EECE1 HTTP/1.1
Host: stags.bluekai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 62
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Mon, 05 Dec 2022 07:06:55 GMT
set-cookie: bku=blx99/IRMV1KVsAQ; Path=/; Domain=.bluekai.com; Expires=Mon, 05 Jun 2023 07:06:55 GMT; Secure; SameSite=None
bkpa=KJy9nyexd02pSUHknp/8mE1hwtkAwDRl1MPOBE1lBARhmExt1WHOxA/pHMkaHEAlBWPax6Dh9y9oUxFP; Path=/; Domain=.bluekai.com; Expires=Mon, 05 Jun 2023 07:06:55 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fa9d0c9ccc7700108195e28acb4cf584
0943f764a369f0448c6ba1703d186630889f5be7
a62a76dcd60e4aba7d3a24fbd90046c6b0273c798990594cb4ef28e7f2274a2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4548
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Last-Modified: Mon, 05 Dec 2022 05:51:07 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash a1c3dcd903e006874b4a35db44c4063c
9b4dec9be09f1f3b8a084b0532d4ffeae115b956
63a968cf1ed0760cedd3561a6870372d7b57a28cd30ac47b3450f91f9884d9e7
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1312
Cache-Control: max-age=115787
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Etag: "638cb4ba-1d7"
Expires: Tue, 06 Dec 2022 15:16:42 GMT
Last-Modified: Sun, 04 Dec 2022 14:54:50 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
www.checkbca.org/images/widget_member_seal.png
304 Not Modified 0 B URL HTTP/2 www.checkbca.org/images/widget_member_seal.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/widget_member_seal.png HTTP/1.1
Host: www.checkbca.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Sat, 09 May 2020 03:31:08 GMT
If-None-Match: "8a855647b225d61:0"
TE: trailers
HTTP/2 304 Not Modified
cache-control: no-cache
date: Mon, 05 Dec 2022 07:06:55 GMT
X-Firefox-Spdy: h2
loadm.exelator.com/load/?p=204&g=2191&simid=D2DD060CDA0B413F8CF0E3FA6A779CB4&j=0
204 No Content 0 B URL HTTP/2 loadm.exelator.com/load/?p=204&g=2191&simid=D2DD060CDA0B413F8CF0E3FA6A779CB4&j=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load/?p=204&g=2191&simid=D2DD060CDA0B413F8CF0E3FA6A779CB4&j=0 HTTP/1.1
Host: loadm.exelator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Mon, 05 Dec 2022 07:06:55 GMT
cache-control: no-cache
x-powered-by: Undertow/1
access-control-allow-credentials: true
p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA, policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 345bb700ba4027282c1883db30c6abeb
aca3b6ddf5da09aab213ee53fe3b2a2303df222c
ffe4b6ddd34034c6db80029b2019bab2cbb638343350b61201885c1b4cf13347
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6275
Cache-Control: max-age=154243
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Etag: "638d378f-1d7"
Expires: Wed, 07 Dec 2022 01:57:38 GMT
Last-Modified: Mon, 05 Dec 2022 00:13:03 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=5ADA274B7D1A4888A4C347B621440248
403 Forbidden 986 B URL HTTP/2 sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=5ADA274B7D1A4888A4C347B621440248
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bcd7b26e906cc695866895b359162f18
7adbb32f3cece2023df93a4006665aefc17dd52d
c8099a68ff5da59cfa49c87eec2f9518253654bda6244f46d51e17c79a921a52
GET /profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=5ADA274B7D1A4888A4C347B621440248 HTTP/1.1
Host: sync.intentiq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: CloudFront
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 986
x-cache: Error from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Snxc6z6i3DiaNm8cD2rIBW2xneKe9WgiINSVNwoLWLP_vcbruxKswg==
X-Firefox-Spdy: h2
pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=A65B1A0F1BE044F090C30D4512133C5E&expires=365
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=A65B1A0F1BE044F090C30D4512133C5E&expires=365
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=6286&nid=2132&put=A65B1A0F1BE044F090C30D4512133C5E&expires=365 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 8f052d4f888ae4e0626c5f819879cacd
Content-Type: image/gif
ocsp.digicert.com/
200 OK 727 B IP
Hash 5fb333840ee6a4cbed1cc07b4c1d6ccf
8933670471f3042ea2957218d5abdd4d546f8303
d60461ff4beb9347c9e40c56a4313ffa1027c56edda01a104ddc1d34a98ebaf6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3412
Cache-Control: max-age=87645
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Etag: "638c3e98-2d7"
Expires: Tue, 06 Dec 2022 07:27:40 GMT
Last-Modified: Sun, 04 Dec 2022 06:30:48 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e388f1ab4ec88104f57cf23944ee684
39178c45ed645709cc388d5790b1b58a3272a62f
e33b88f6f77d90b65a8fed943a45623e51f1efbdae401a1652f24be68408dba0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ib.adnxs.com/setuid?entity=66&code=773A5CB9F9F940738D3BAA2C7541FC78
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=66&code=773A5CB9F9F940738D3BAA2C7541FC78
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=66&code=773A5CB9F9F940738D3BAA2C7541FC78 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 05 Dec 2022 07:06:55 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D66%26code%3D773A5CB9F9F940738D3BAA2C7541FC78
AN-X-Request-Uuid: 754a94a8-6d30-4bd8-b55f-def762489550
Set-Cookie: uuid2=6813227571596616456; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 05-Mar-2023 07:06:55 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
us-u.openx.net/w/1.0/sd?id=537072966&val=380D059A15214BAD9AD06AA9EA9D8AB7
200 OK 43 B URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537072966&val=380D059A15214BAD9AD06AA9EA9D8AB7
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537072966&val=380D059A15214BAD9AD06AA9EA9D8AB7 HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7797&uid=3DC4F5E3A93D4072B11F13C87B272721
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7797&uid=3DC4F5E3A93D4072B11F13C87B272721
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7797&uid=3DC4F5E3A93D4072B11F13C87B272721 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 05 Dec 2022 07:06:55 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=66fdc9ea-746b-11ed-b44d-1342c0320506; expires=Mon, 02-Jan-2023 07:06:55 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7797&uid=3DC4F5E3A93D4072B11F13C87B272721&__user_check__=1&sync_id=66fdca24-746b-11ed-b44d-1342c0320506
X-fe: 90
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 379decf0dc0986be08cfc8df099b3f26
500090e4cb61ad13466d8a17dbd116b1a2376b0b
6e86f187248ce593d53ed7a86593916c6d02e0933ca010f7844349d8ee0ed0b5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 05 Dec 2022 07:06:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 04 Dec 2022 21:04:13 GMT
Expires: Mon, 05 Dec 2022 21:04:13 GMT
ETag: "500090e4cb61ad13466d8a17dbd116b1a2376b0b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=CF73C7594CB04847B9DEC52D5BAA6C96
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=CF73C7594CB04847B9DEC52D5BAA6C96
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive?partner_id=2305&partner_device_id=CF73C7594CB04847B9DEC52D5BAA6C96 HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Dec 2022 07:06:55 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1670224015674;Expires=Fri, 03 Feb 2023 07:06:55 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=6fa8450f-83a4-492a-943a-092d0ea75199;Expires=Fri, 03 Feb 2023 07:06:55 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=CF73C7594CB04847B9DEC52D5BAA6C96
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash a1c3dcd903e006874b4a35db44c4063c
9b4dec9be09f1f3b8a084b0532d4ffeae115b956
63a968cf1ed0760cedd3561a6870372d7b57a28cd30ac47b3450f91f9884d9e7
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6317
Cache-Control: max-age=120792
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Etag: "638cb4ba-1d7"
Expires: Tue, 06 Dec 2022 16:40:07 GMT
Last-Modified: Sun, 04 Dec 2022 14:54:50 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
www.google.com/pagead/1p-conversion/1026675585/?random=553869052&cv=7&fst=1670224014918&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=j5iNY6v3EpKeZ4jRhMgL&random=3205873661
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-conversion/1026675585/?random=553869052&cv=7&fst=1670224014918&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=j5iNY6v3EpKeZ4jRhMgL&random=3205873661
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/1026675585/?random=553869052&cv=7&fst=1670224014918&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=j5iNY6v3EpKeZ4jRhMgL&random=3205873661 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 05 Dec 2022 07:06:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1026675585/?random=553869052&cv=7&fst=1670224014918&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=j5iNY6v3EpKeZ4jRhMgL&random=3205873661&ipr=y&prhg=0
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fa9d0c9ccc7700108195e28acb4cf584
0943f764a369f0448c6ba1703d186630889f5be7
a62a76dcd60e4aba7d3a24fbd90046c6b0273c798990594cb4ef28e7f2274a2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4354
Cache-Control: max-age=166331
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Etag: "638d6e48-1d7"
Expires: Wed, 07 Dec 2022 05:19:06 GMT
Last-Modified: Mon, 05 Dec 2022 04:06:32 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
ce.lijit.com/merge?pid=2&3pid=B1BFB51735304412857A0C70E7D7DED6
204 No Content 0 B URL HTTP/1.1 ce.lijit.com/merge?pid=2&3pid=B1BFB51735304412857A0C70E7D7DED6
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge?pid=2&3pid=B1BFB51735304412857A0C70E7D7DED6 HTTP/1.1
Host: ce.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Mon, 05 Dec 2022 07:06:55 GMT
X-MERGE: GDPR Optout true
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
Expires: Fri, 20 Mar 2009 00:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap4ams1
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ab705253a128d07f3875e4fba69a9452
577f5c62a9992fbb4637af473c42c5b24cb5dd5e
796b5b07126753a12a8e43da5ba89046a5ef89a05e6576277b391741c02b4a9b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 05 Dec 2022 07:06:55 GMT
Last-Modified: Mon, 05 Dec 2022 05:26:25 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zS10jpYRhKHg9J_v4MyylmTY6v2zA5RxgGlwi3OwuOHfeaAaqcqQRg==
Age: 6031
sync.search.spotxchange.com/partner?adv_id=7797&uid=3DC4F5E3A93D4072B11F13C87B272721&__user_check__=1&sync_id=66fdca24-746b-11ed-b44d-1342c0320506
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7797&uid=3DC4F5E3A93D4072B11F13C87B272721&__user_check__=1&sync_id=66fdca24-746b-11ed-b44d-1342c0320506
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7797&uid=3DC4F5E3A93D4072B11F13C87B272721&__user_check__=1&sync_id=66fdca24-746b-11ed-b44d-1342c0320506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Dec 2022 07:06:55 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=670b61ad-746b-11ed-b434-16a7f9820306; expires=Mon, 02-Jan-2023 07:06:55 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 106
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D66%26code%3D773A5CB9F9F940738D3BAA2C7541FC78
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D66%26code%3D773A5CB9F9F940738D3BAA2C7541FC78
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D66%26code%3D773A5CB9F9F940738D3BAA2C7541FC78 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 05 Dec 2022 07:06:55 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 164ca2fa-a174-4780-88b9-f3a9a568920e
Set-Cookie: anj=dTM7k!M4.FE:2jUF']wIg2C')iD51A!]tbPl1N!7On*M$=BXIAk`<7'foPZ*=ft:-2V7:--%*%2gyYsDm75dE#Wy(uW(9Wm(EWos>wL5L!!%L<)]s(F; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 05-Mar-2023 07:06:55 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8ead0ac4ce19cef2471bae0458759d89
af02fd3fcd2e10cfa2458407c0c2e59a43e18517
507b93c64bab73e393cf8d8131415ef4d4b01e65e0f2ab73597715197845e75e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 917d281ca22c901597795b51fd9df338
be0e026d76f26092edfc1f67ea98ddc4a539439a
5f47f5ac32d4c80f29c4a69a830ec9427dd0055fc57973f01f73ec22503cd30c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 838d243942d48827243c3bcee18d11ed
26243d17a8493cbaa1759bde860c0a2a54f36e02
bf818584bae52201d47f2fadf57114acdcadf908a7003b26b846196ccef11ede
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=129067
Date: Mon, 05 Dec 2022 07:06:55 GMT
Etag: "638cd528-1d7"
Expires: Tue, 06 Dec 2022 18:58:02 GMT
Last-Modified: Sun, 04 Dec 2022 17:13:12 GMT
Server: ECS (nyb/1DCD)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wxygMuCH9pXIl-R1XIvCbfVnea5y_BXT1quZQIJZ_opibzJuqLkfgQ==
Age: 6290
www.google.no/pagead/1p-conversion/1026675585/?random=553869052&cv=7&fst=1670224014918&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=j5iNY6v3EpKeZ4jRhMgL&random=3205873661&ipr=y&prhg=0
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-conversion/1026675585/?random=553869052&cv=7&fst=1670224014918&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=j5iNY6v3EpKeZ4jRhMgL&random=3205873661&ipr=y&prhg=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/1026675585/?random=553869052&cv=7&fst=1670224014918&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=j5iNY6v3EpKeZ4jRhMgL&random=3205873661&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 05 Dec 2022 07:06:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sync.bfmio.com/sync?pid=141&uid=74ADACD70AD34216911D2BB94C66FE04
204 0 B URL HTTP/1.1 sync.bfmio.com/sync?pid=141&uid=74ADACD70AD34216911D2BB94C66FE04
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?pid=141&uid=74ADACD70AD34216911D2BB94C66FE04 HTTP/1.1
Host: sync.bfmio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204
Date: Mon, 05 Dec 2022 07:06:54 GMT
Set-Cookie: __141_cid=74ADACD70AD34216911D2BB94C66FE04; Domain=.bfmio.com; Expires=Tue, 05-Dec-2023 07:06:55 GMT; Path=/
__io_cid=352364dd44b152190025de45e63b08d7a71e7743; Domain=.bfmio.com; Expires=Tue, 05-Dec-2023 07:06:55 GMT; Path=/
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 917d281ca22c901597795b51fd9df338
be0e026d76f26092edfc1f67ea98ddc4a539439a
5f47f5ac32d4c80f29c4a69a830ec9427dd0055fc57973f01f73ec22503cd30c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d.agkn.com/pixel/10751/?che=1670224015678&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D216713104356000543440
302 Found 0 B URL HTTP/1.1 d.agkn.com/pixel/10751/?che=1670224015678&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D216713104356000543440
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/10751/?che=1670224015678&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D216713104356000543440 HTTP/1.1
Host: d.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache, must-revalidate
Date: Mon, 05 Dec 2022 07:06:55 GMT
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://um.simpli.fi/aa_px?sk=216713104356000543440
P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: Apache-Coyote/1.1
Set-Cookie: ab=0001%3AKRlbNIDqalGAD9S%2FzALNx9sj22JJm6KN;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
u=C|0AAArIFUPKyBVDwAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
Content-Length: 0
Connection: keep-alive
um.simpli.fi/aa_px?sk=216713104356000543440
302 Found 142 B URL HTTP/2 um.simpli.fi/aa_px?sk=216713104356000543440
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /aa_px?sk=216713104356000543440 HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: text/html
content-length: 142
set-cookie: suid=B838046BAFE94955AB65AF02A0DC2611; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=B838046BAFE94955AB65AF02A0DC2611; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
location: /empty.gif
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/empty.gif
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /empty.gif HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=8F6FC341C68C4BD884C8CFAB39DBF695; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; SameSite=none; Secure;
suid_legacy=8F6FC341C68C4BD884C8CFAB39DBF695; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:55 GMT; Secure;
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a3a7dc16e02a92f3b0eae4310a08cd9d
e499e7ad1a50909acce05c96c45d4cd1c9ece7d0
570a227ca84863a7bdb10a9bf0dff799c2cd76db0adc2e50357cca7bfdbf0bc4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=101898
Date: Mon, 05 Dec 2022 07:06:56 GMT
Etag: "638c72a8-1d7"
Expires: Tue, 06 Dec 2022 11:25:14 GMT
Last-Modified: Sun, 04 Dec 2022 10:12:56 GMT
Server: ECS (nyb/1D06)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wkBNWW7CuW2TywgGhWupQc3CSfB6j2GGSAAeBs6CPa9K9EvxuppnEQ==
Age: 4339
web-writer.eu.smartlook.cloud/rec/v3/write?rid=WcT9j42tSPODpBhiC5K47&sid=o0Xw9YQTMMNqKXdjBl4jj&vid=fgPnKVcsIBqwKFlPay0yP
204 No Content 0 B URL HTTP/1.1 web-writer.eu.smartlook.cloud/rec/v3/write?rid=WcT9j42tSPODpBhiC5K47&sid=o0Xw9YQTMMNqKXdjBl4jj&vid=fgPnKVcsIBqwKFlPay0yP
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rec/v3/write?rid=WcT9j42tSPODpBhiC5K47&sid=o0Xw9YQTMMNqKXdjBl4jj&vid=fgPnKVcsIBqwKFlPay0yP HTTP/1.1
Host: web-writer.eu.smartlook.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Content-Type: multipart/form-data; boundary=---------------------------212771231736933348834039541392
Origin: https://www.usbfund.com
Content-Length: 124721
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Request, X-Requested-With, Content-Type, Cookie
Access-Control-Allow-Methods: POST
Access-Control-Allow-Origin: https://www.usbfund.com
Cross-Origin-Resource-Policy: cross-origin
Date: Mon, 05 Dec 2022 07:06:56 GMT
sl-trace-id: XPG2luIOBs89_t4sKxfJP
Strict-Transport-Security: max-age=63072000; includeSubDomains
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 20f2c66323bb5dfc8dddf12b5bfefa52
a9b61b2f7d14cb53904ec27a7cc6daaed97058ff
1975127fe3123e40eeda198ba1c547ad655d72ad404f9ec96e9c7f4a022da655
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=166215
Date: Mon, 05 Dec 2022 07:06:56 GMT
Etag: "638d68c2-1d7"
Expires: Wed, 07 Dec 2022 05:17:11 GMT
Last-Modified: Mon, 05 Dec 2022 03:42:58 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ajbO7h-1kmlDzPZIE_qET8Jw0C3wDHbodVStL-N4xYBaLTFpsEokhw==
Age: 5653
new-collect.albacross.com/e.gif?s=JSCollector%2C3.1.1&e0=pageview&ci0=50919bba-b8a5-ee57-6f62-311fb12faf18&v0=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p0=c4b009fa-8dfb-1210-364c-9ff00deb6005&u0=c4b009fa-8dfb-1210-364c-9ff00deb6005&c0=89342177&t0=1670224011258&ur0=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&ti0=How%20To%20Get%20A%20Small%20Business%20Loan%20In%206%20Easy%20Steps%3F%20-%20US%20Business%20Funding&re0=1280&re0=1024&o0=landscape-primary&us0=bayengage&um0=campaign-email&uca0=credit-score-for-small-business&e1=pageview_ping&ci1=50919bba-b8a5-ee57-6f62-311fb12faf18&v1=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p1=c4b009fa-8dfb-1210-364c-9ff00deb6005&u1=d9c78dc7-98f3-ef34-d69e-65be2892f102&c1=89342177&t1=1670224011258&li1=1670224011256&e2=pageview_ping&ci2=50919bba-b8a5-ee57-6f62-311fb12faf18&v2=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p2=c4b009fa-8dfb-1210-364c-9ff00deb6005&u2=bcd85ada-5921-806d-d007-08acded15a4c&c2=89342177&t2=1670224011259&li2=1670224011256
200 OK 37 B URL HTTP/2 new-collect.albacross.com/e.gif?s=JSCollector%2C3.1.1&e0=pageview&ci0=50919bba-b8a5-ee57-6f62-311fb12faf18&v0=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p0=c4b009fa-8dfb-1210-364c-9ff00deb6005&u0=c4b009fa-8dfb-1210-364c-9ff00deb6005&c0=89342177&t0=1670224011258&ur0=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&ti0=How%20To%20Get%20A%20Small%20Business%20Loan%20In%206%20Easy%20Steps%3F%20-%20US%20Business%20Funding&re0=1280&re0=1024&o0=landscape-primary&us0=bayengage&um0=campaign-email&uca0=credit-score-for-small-business&e1=pageview_ping&ci1=50919bba-b8a5-ee57-6f62-311fb12faf18&v1=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p1=c4b009fa-8dfb-1210-364c-9ff00deb6005&u1=d9c78dc7-98f3-ef34-d69e-65be2892f102&c1=89342177&t1=1670224011258&li1=1670224011256&e2=pageview_ping&ci2=50919bba-b8a5-ee57-6f62-311fb12faf18&v2=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p2=c4b009fa-8dfb-1210-364c-9ff00deb6005&u2=bcd85ada-5921-806d-d007-08acded15a4c&c2=89342177&t2=1670224011259&li2=1670224011256
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 637eb2cda011678b8ccd6b5b3c6e3570
300ffa6cb3b70adc05038ef2a4e9936978459ff2
49059d42ad3423fb9f04b2330cdce035e4d555aa9ea7a7ceae097de0c69be05d
GET /e.gif?s=JSCollector%2C3.1.1&e0=pageview&ci0=50919bba-b8a5-ee57-6f62-311fb12faf18&v0=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p0=c4b009fa-8dfb-1210-364c-9ff00deb6005&u0=c4b009fa-8dfb-1210-364c-9ff00deb6005&c0=89342177&t0=1670224011258&ur0=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&ti0=How%20To%20Get%20A%20Small%20Business%20Loan%20In%206%20Easy%20Steps%3F%20-%20US%20Business%20Funding&re0=1280&re0=1024&o0=landscape-primary&us0=bayengage&um0=campaign-email&uca0=credit-score-for-small-business&e1=pageview_ping&ci1=50919bba-b8a5-ee57-6f62-311fb12faf18&v1=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p1=c4b009fa-8dfb-1210-364c-9ff00deb6005&u1=d9c78dc7-98f3-ef34-d69e-65be2892f102&c1=89342177&t1=1670224011258&li1=1670224011256&e2=pageview_ping&ci2=50919bba-b8a5-ee57-6f62-311fb12faf18&v2=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p2=c4b009fa-8dfb-1210-364c-9ff00deb6005&u2=bcd85ada-5921-806d-d007-08acded15a4c&c2=89342177&t2=1670224011259&li2=1670224011256 HTTP/1.1
Host: new-collect.albacross.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:57 GMT
content-type: image/gif
content-length: 37
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-YYEX7W0G95>m=2oebu0&_p=152505908&cid=2058110097.1670222274&ul=en-us&sr=1280x1024&_s=1&sid=1670222273&sct=1&seg=1&dl=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&dt=How%20To%20Get%20A%20Small%20Business%20Loan%20In%206%20Easy%20Steps%3F%20-%20US%20Business%20Funding&en=page_view&ep.debud_mode=false
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-YYEX7W0G95>m=2oebu0&_p=152505908&cid=2058110097.1670222274&ul=en-us&sr=1280x1024&_s=1&sid=1670222273&sct=1&seg=1&dl=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&dt=How%20To%20Get%20A%20Small%20Business%20Loan%20In%206%20Easy%20Steps%3F%20-%20US%20Business%20Funding&en=page_view&ep.debud_mode=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-YYEX7W0G95>m=2oebu0&_p=152505908&cid=2058110097.1670222274&ul=en-us&sr=1280x1024&_s=1&sid=1670222273&sct=1&seg=1&dl=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&dt=How%20To%20Get%20A%20Small%20Business%20Loan%20In%206%20Easy%20Steps%3F%20-%20US%20Business%20Funding&en=page_view&ep.debud_mode=false HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.usbfund.com
date: Mon, 05 Dec 2022 07:06:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
new-collect.albacross.com/e.gif?s=JSCollector%2C3.1.1&e0=pageview_ping&ci0=50919bba-b8a5-ee57-6f62-311fb12faf18&v0=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p0=c4b009fa-8dfb-1210-364c-9ff00deb6005&u0=3e687edd-dd84-bde9-b3c6-cfd16155d3f1&c0=89342177&t0=1670224015760&li0=1670224011256&e1=pageview_ping&ci1=50919bba-b8a5-ee57-6f62-311fb12faf18&v1=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p1=c4b009fa-8dfb-1210-364c-9ff00deb6005&u1=5e07d234-aece-bda0-46c0-90e8edae0e46&c1=89342177&t1=1670224017090&li1=1670224011256
200 OK 37 B URL HTTP/2 new-collect.albacross.com/e.gif?s=JSCollector%2C3.1.1&e0=pageview_ping&ci0=50919bba-b8a5-ee57-6f62-311fb12faf18&v0=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p0=c4b009fa-8dfb-1210-364c-9ff00deb6005&u0=3e687edd-dd84-bde9-b3c6-cfd16155d3f1&c0=89342177&t0=1670224015760&li0=1670224011256&e1=pageview_ping&ci1=50919bba-b8a5-ee57-6f62-311fb12faf18&v1=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p1=c4b009fa-8dfb-1210-364c-9ff00deb6005&u1=5e07d234-aece-bda0-46c0-90e8edae0e46&c1=89342177&t1=1670224017090&li1=1670224011256
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 637eb2cda011678b8ccd6b5b3c6e3570
300ffa6cb3b70adc05038ef2a4e9936978459ff2
49059d42ad3423fb9f04b2330cdce035e4d555aa9ea7a7ceae097de0c69be05d
GET /e.gif?s=JSCollector%2C3.1.1&e0=pageview_ping&ci0=50919bba-b8a5-ee57-6f62-311fb12faf18&v0=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p0=c4b009fa-8dfb-1210-364c-9ff00deb6005&u0=3e687edd-dd84-bde9-b3c6-cfd16155d3f1&c0=89342177&t0=1670224015760&li0=1670224011256&e1=pageview_ping&ci1=50919bba-b8a5-ee57-6f62-311fb12faf18&v1=ce5dae60-44b9-3f9b-e61a-2b45d9e42379&p1=c4b009fa-8dfb-1210-364c-9ff00deb6005&u1=5e07d234-aece-bda0-46c0-90e8edae0e46&c1=89342177&t1=1670224017090&li1=1670224011256 HTTP/1.1
Host: new-collect.albacross.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:59 GMT
content-type: image/gif
content-length: 37
X-Firefox-Spdy: h2
sendlane.com/js/eventing.js
200 OK 0 B URL HTTP/2 sendlane.com/js/eventing.js
IP
GET /js/eventing.js HTTP/1.1
Host: sendlane.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:52 GMT
content-type: text/javascript
cache-control: public, max-age=60
cf-bgj: minify
etag: W/"711-5900675a88b6e-gzip"
expires: Mon, 05 Dec 2022 07:07:52 GMT
last-modified: Tue, 13 Aug 2019 21:38:21 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 10
x-content-type-options: nosniff
server: cloudflare
cf-ray: 774af10e3a3cb50f-OSL
content-encoding: br
X-Firefox-Spdy: h2
rec.smartlook.com/es6/bundle.766e6d0f96e22d2b6500.js
200 OK 0 B URL HTTP/2 rec.smartlook.com/es6/bundle.766e6d0f96e22d2b6500.js
IP
ASN #60068 Datacamp Limited
GET /es6/bundle.766e6d0f96e22d2b6500.js HTTP/1.1
Host: rec.smartlook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
cross-origin-resource-policy: cross-origin
etag: W/"63861b50-227d0"
last-modified: Tue, 29 Nov 2022 14:46:40 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-accel-expires: @1701270546
server: CDN77-Turbo
x-77-nzt: AblMCQ0gZVb//XcHAA
x-77-nzt-ray: c0a4cc282fde8aa98f988d63e73bee1c
x-cache: HIT
x-age: 489469
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
js.hsforms.net/forms/v2.js
200 OK 0 B URL HTTP/2 js.hsforms.net/forms/v2.js
IP
GET /forms/v2.js HTTP/1.1
Host: js.hsforms.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:52 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 11:19:56 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: ii__Cj1KR4hF5EMokiA8h.FRRe4t2Kk5
etag: W/"3c51dbe4a1cd853aee0ba979c190f8d2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 68a3b1d5c75429221abc685a453afb60.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: 2fxtMdoVTHSbOL3RMCVAV6Sr7gMssga40ygMfDVMl16TYLN7VO-nyQ==
cache-control: s-maxage=600, max-age=300
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=forms-embed/static-1.2431/bundles/project-v2.js&cfRay=7733b9f2ab99be53-IAD
x-hs-target-asset: forms-embed/static-1.2431/bundles/project-v2.js
access-control-allow-origin: *
x-hs-cache-status: HIT
cache-tag: staticjsapp-forms-embed-v2-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 113
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vd2bzF9%2FWzNi1uGShEM7lEz0TJjJEoRjRsWysW3ZI%2FbWK%2Fue%2Fa1CwJIKXaQLQZMC%2BZqv7wYov0mZRrQGQsAeIfQLI1j6I%2BI0PJKTEnCmuSqf2Aw1VWhnZ5pNvmzjVOqV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 774af10dcd171c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=5F12849BE48B4338A6E6CD302D2D9832
302 Found 0 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=5F12849BE48B4338A6E6CD302D2D9832
IP
GET /adscores/g.pixel?sid=9201915418&sifi_uid=5F12849BE48B4338A6E6CD302D2D9832 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Dec 2022 07:06:55 GMT
location: https://d.agkn.com/pixel/10751/?che=1670224015678&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D216713104356000543440
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
set-cookie: ab=0001%3Aoai%2FcHCfyew0tUTao69PEYTTHEGgq2Rh; Path=/; Domain=.agkn.com; Expires=Tue, 05-Dec-2023 07:06:55 GMT; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
simplifi.partners.tremorhub.com/sync?UISF=D44F506A57D944DB8D055C77FC927B85
200 OK 0 B URL HTTP/2 simplifi.partners.tremorhub.com/sync?UISF=D44F506A57D944DB8D055C77FC927B85
IP
GET /sync?UISF=D44F506A57D944DB8D055C77FC927B85 HTTP/1.1
Host: simplifi.partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:55 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
www.usbfund.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 0 B URL HTTP/2 www.usbfund.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Oct 2021 18:27:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
js.hs-scripts.com/5627136.js
200 OK 0 B URL HTTP/2 js.hs-scripts.com/5627136.js
IP
GET /5627136.js HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:52 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://www.usbfund.com
access-control-max-age: 3600
cache-control: public, max-age=60
cf-bgj: minify
cf-polished: origSize=964
last-modified: Mon, 05 Dec 2022 06:37:56 GMT
vary: origin, Accept-Encoding
x-hubspot-correlation-id: 57b3b894-3726-485e-91bf-edecc75a338a
x-trace: 2B42263B9A36A184CA2B38206395960B99249EC33D000000000000000000
cf-cache-status: HIT
age: 11
expires: Mon, 05 Dec 2022 07:07:52 GMT
server: cloudflare
cf-ray: 774af10ddc7bb4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
omnisrc.com/inshop/launcher-v2.js
200 OK 0 B URL HTTP/2 omnisrc.com/inshop/launcher-v2.js
IP
GET /inshop/launcher-v2.js HTTP/1.1
Host: omnisrc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:52 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 07:45:26 GMT
etag: W/"63885b96-d5b0"
expires: Mon, 05 Dec 2022 07:22:44 GMT
cache-control: max-age=3600
x-envoy-upstream-service-time: 1
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 796
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 774af110fa5c1c02-OSL
content-encoding: br
X-Firefox-Spdy: h2
diffuser-cdn.app-us1.com/diffuser/diffuser.js
200 OK 0 B URL HTTP/2 diffuser-cdn.app-us1.com/diffuser/diffuser.js
IP
GET /diffuser/diffuser.js HTTP/1.1
Host: diffuser-cdn.app-us1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:52 GMT
content-type: application/javascript
last-modified: Thu, 21 Oct 2021 17:42:06 GMT
etag: W/"4d482a43613d3966f353ec9d97452e0c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 059f85e5e664bc876c915622803d9e28.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C2
x-amz-cf-id: LYgb7O-05A19YisedsHdW7Gqa3Bw46pjlPKvIkZSVBpaULKohYEzzQ==
cf-cache-status: HIT
age: 79
server: cloudflare
cf-ray: 774af1110904b518-OSL
X-Firefox-Spdy: h2
prism.app-us1.com/?a=224499963&u=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&t=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e
200 OK 0 B URL HTTP/2 prism.app-us1.com/?a=224499963&u=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&t=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e
IP
GET /?a=224499963&u=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business&t=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e HTTP/1.1
Host: prism.app-us1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Cookie: prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: application/javascript
cache-control: no-cache, private
set-cookie: prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; expires=Wed, 04-Jan-2023 07:06:53 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none
x-envoy-upstream-service-time: 79
x-powered-by: PHP/7.4.32
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 774af1121a15b518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
js.hs-analytics.net/analytics/1670223900000/5627136.js
200 OK 0 B URL HTTP/2 js.hs-analytics.net/analytics/1670223900000/5627136.js
IP
GET /analytics/1670223900000/5627136.js HTTP/1.1
Host: js.hs-analytics.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:53 GMT
content-type: text/javascript
x-amz-id-2: qttXn6BujYoG4BcYzvYucTqYfRONI+BHZogFqVr9WzbRP134qoaunaawpuxDIwgQZU7BTxDtf2s=
x-amz-request-id: THRBEAW17JASPXZ3
last-modified: Thu, 01 Dec 2022 14:17:27 GMT
etag: W/"bd43dd938f6c21d85ba0c275e588340d"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: null
access-control-allow-credentials: false
vary: origin, Accept-Encoding
expires: Mon, 05 Dec 2022 07:11:43 GMT
cf-cache-status: HIT
age: 10
server: cloudflare
cf-ray: 774af1166d1eb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.simpli.fi/p?cid=323546&cb=sifi_att_42656._hp
200 OK 0 B URL HTTP/2 i.simpli.fi/p?cid=323546&cb=sifi_att_42656._hp
IP
GET /p?cid=323546&cb=sifi_att_42656._hp HTTP/1.1
Host: i.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 07:06:54 GMT
content-type: application/javascript; charset=UTF-8
set-cookie: suid=6AB446B78D084C409C452F2452E11460; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:54 GMT; SameSite=none; Secure;
suid_legacy=6AB446B78D084C409C452F2452E11460; Path=/; domain=simpli.fi; Expires=Wed, 06-Dec-23 07:06:54 GMT; Secure;
uid_syncd=true; path=/; expires=Mon, 12 Dec 2022 07:06:54 GMT; domain=.simpli.fi; secure
uid_syncd_secure=true; path=/; expires=Mon, 12 Dec 2022 07:06:54 GMT; domain=.simpli.fi; samesite=none; secure
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache, no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT, Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
www.usbfund.com/wp-content/themes/usb/style.css
200 OK 0 B URL HTTP/2 www.usbfund.com/wp-content/themes/usb/style.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/themes/usb/style.css HTTP/1.1
Host: www.usbfund.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=credit-score-for-small-business
Cookie: _gcl_au=1.1.2131057947.1670222273; __ss=1670222273331; __ss_referrer=https%3A//www.usbfund.com/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business; wc_visitor=100980-823768f4-c117-5dff-ba88-753758914dd9; wc_client=bayengage+..+campaign-email+..+credit-score-for-small-business+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dcredit-score-for-small-business+..+100980-823768f4-c117-5dff-ba88-753758914dd9+..+; _ga_YYEX7W0G95=GS1.1.1670222273.1.0.1670222280.0.0.0; _ga=GA1.2.2058110097.1670222274; __ss_tk=202212%7C638d91c436b3bf7e526850af; omnisendAnonymousID=QaWVM55Ms09K4H-20221205063754; omnisendSessionID=RPC7St1n5MJPXm-20221205063754; prism_224499963=2cef3ab6-c0be-4bcd-a64f-506fd8a1341e; _gid=GA1.2.1832995656.1670222275; nQ_cookieId=50919bba-b8a5-ee57-6f62-311fb12faf18; nQ_userVisitId=ce5dae60-44b9-3f9b-e61a-2b45d9e42379; _mkto_trk=id:511-LVJ-854&token:_mch-usbfund.com-1670222275328-57144; __mauuid=44b814d3-98d1-4a2a-ae8a-18595f27f5ca; ln_or=d; __hstc=152200550.9a54385fe1b96d4beed4b97fc12373ff.1670222276042.1670222276042.1670222276042.1; hubspotutk=9a54385fe1b96d4beed4b97fc12373ff; __hssc=152200550.1.1670222276042; SL_C_23361dd035530_KEY=532e326dd2a3ae45d5a84ad0772bb857a7a355ce; SL_C_23361dd035530_SID=8yeMmMQylYAXL5CaVe6vh; SL_C_23361dd035530_VID=fgPnKVcsIBqwKFlPay0yP
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 13 Apr 2022 22:11:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: text/css
date: Mon, 05 Dec 2022 07:06:52 GMT
server: Apache
X-Firefox-Spdy: h2
34.127.83.42
185.94.180.125
3.248.85.122
104.16.101.12
23.53.51.106
18.184.145.64
93.184.220.29
23.36.76.226