1rto.info/b/9jD:3CDcM
308 Permanent Redirect 164 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f23c4815ecaef1588f16ac735c0e15d6
026bf8cdd5076014b6fc822878e0086eb44da556
43a81fb3d47b34e7d42d6b8444f592ed9251b8e57db8f67d32419aa40b1480d0
Analyzer Verdict Alert fortinet Phishing
GET /b/9jD:3CDcM HTTP/1.1
Host: 1rto.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 308 Permanent Redirect
Date: Wed, 04 Jan 2023 19:05:44 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://1rto.info/b/9jD:3CDcM
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16803ffa29e10ee999c43eb4e4acfe92
a5ede865a388fa440f20994b43c417d403e9a493
08de8f6abb622e84d2cb6e88dee8fc7c408147ac43da9c24d4cde510ed36b53a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08DE8F6ABB622E84D2CB6E88DEE8FC7C408147AC43DA9C24D4CDE510ED36B53A"
Last-Modified: Mon, 02 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2717
Expires: Wed, 04 Jan 2023 19:51:02 GMT
Date: Wed, 04 Jan 2023 19:05:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ce8af3d72e7e9af609039abee59c8b87
8e1b16591fbc632df35f15e23da55ee86af31bc3
52edddbda4a3a3b778f61a491b21e6ea439e9d8024189e636b1f37b2dd7226fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52EDDDBDA4A3A3B778F61A491B21E6EA439E9D8024189E636B1F37B2DD7226FC"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11194
Expires: Wed, 04 Jan 2023 22:12:19 GMT
Date: Wed, 04 Jan 2023 19:05:45 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 04 Jan 2023 18:36:23 GMT
content-type: application/json
age: 1762
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash da484f5e9c6805745e063b236fb81473
ae454bf4a7ae0e96935afc81ee0f89c049097b15
068d0da23acbe7f6b600c4e7dbe9c81d3ad78c8afd122255bbf3550e8a290686
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "068D0DA23ACBE7F6B600C4E7DBE9C81D3AD78C8AFD122255BBF3550E8A290686"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16166
Expires: Wed, 04 Jan 2023 23:35:11 GMT
Date: Wed, 04 Jan 2023 19:05:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Fyy1ysBaVIcQ4wp01/G2L3Yrj7WsHOLoFjPMcrE4/3aMC5XCEmHKcZDEnI2O75DBpxUhtfVZ0CU=
x-amz-request-id: MNTD8P6BVK9F84H3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 04 Jan 2023 19:01:25 GMT
age: 260
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:45 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2b7f33e3e47f2bde604e60ef7aa4e2b1
724ebc97440d374febd64b44db8c3ae8b04ea73a
7c208e5d5dbf2f55d27e994be25a2ce912f143faaf23fa1e87926ba061d0ba98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7C208E5D5DBF2F55D27E994BE25A2CE912F143FAAF23FA1E87926BA061D0BA98"
Last-Modified: Wed, 04 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 05 Jan 2023 01:05:45 GMT
Date: Wed, 04 Jan 2023 19:05:45 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 04 Jan 2023 18:08:11 GMT
age: 3454
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
1rto.info/b/9jD:3CDcM
302 Found 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /b/9jD:3CDcM HTTP/1.1
Host: 1rto.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Wed, 04 Jan 2023 19:05:45 GMT
content-type: text/html;charset=utf-8
content-length: 0
location: https://hittrc.com/?c=18893&first=Mister&last=Clean&email=e64a2ca723@emailkom.live&phone=13134048290&zip=03233&l=&sc=
pragma: No-cache
cache-control: no-cache
expires: Wed, 31 Dec 1969 19:00:00 EST
x-powered-by: Servlet 2.4; JBoss-4.0.5.GA (build: CVSTag=Branch_4_0 date=200610162339)/Tomcat-5.5
set-cookie: lime_stickounet=1672859146.673.20995.447094|df0a8dab38a876270b89e74b0d8ae3d7; Expires=Fri, 06-Jan-23 19:05:45 GMT; Max-Age=172800; Path=/; Secure; HttpOnly
JSESSIONID=FC9BA5D7F79DFAC171D0A8984674784A; Path=/
LimeCellular_MOBILE=13134048290; Expires=Thu, 04-Jan-2024 19:05:45 GMT
x-ua-compatible: IE=6
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fe74c226e54f2f382d278b594df930ae
4e4ebc661443f56b74d7c924ddae50bcb107f0af
511f11fe968867447f6d7e5862d8003e3a5fc18bdb62496ea09d140e9a11f53b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1314
Cache-Control: max-age=138180
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:45 GMT
Etag: "63b541ab-1d7"
Expires: Fri, 06 Jan 2023 09:28:45 GMT
Last-Modified: Wed, 04 Jan 2023 09:06:51 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash ff2365955204eb033f014a636ac20b85
a82d3a69ba0879ae22f43338824be44daa4bb12a
1a4eab1bcb5f70b294c4a9aa78a39a4c3d633411163eb72120304fa28d625f5a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=97617
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:46 GMT
Etag: "63b4a85b-117"
Expires: Thu, 05 Jan 2023 22:12:43 GMT
Last-Modified: Tue, 03 Jan 2023 22:12:43 GMT
Server: nginx
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DBLCcILLkdvT25CDosQguw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZGgZ2+rNkwsC5ZSbzLQi2c6pvDY=
ocsp.digicert.com/
200 OK 279 B IP
Hash ff2365955204eb033f014a636ac20b85
a82d3a69ba0879ae22f43338824be44daa4bb12a
1a4eab1bcb5f70b294c4a9aa78a39a4c3d633411163eb72120304fa28d625f5a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=97616
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:47 GMT
Etag: "63b4a85b-117"
Expires: Thu, 05 Jan 2023 22:12:43 GMT
Last-Modified: Tue, 03 Jan 2023 22:12:43 GMT
Server: nginx
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3325
Expires: Wed, 04 Jan 2023 20:01:12 GMT
Date: Wed, 04 Jan 2023 19:05:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3325
Expires: Wed, 04 Jan 2023 20:01:12 GMT
Date: Wed, 04 Jan 2023 19:05:47 GMT
Connection: keep-alive
hittrc.com/?c=18893&first=Mister&last=Clean&email=e64a2ca723@emailkom.live&phone=13134048290&zip=03233&l=&sc=
302 Found 8.5 kB URL HTTP/2 hittrc.com/?c=18893&first=Mister&last=Clean&email=e64a2ca723@emailkom.live&phone=13134048290&zip=03233&l=&sc=
IP
Hash e2fe70f531d998662596c0e8b9c84b24
4ac5e865193a7076c08787145454012c157cc1a9
7d409fdec417d85ce874b02c90fc1d8855fcd0d2499dfbd246500618bce6e1be
GET /?c=18893&first=Mister&last=Clean&email=e64a2ca723@emailkom.live&phone=13134048290&zip=03233&l=&sc= HTTP/1.1
Host: hittrc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Wed, 04 Jan 2023 19:05:46 GMT
content-type: text/html; charset=utf-8
location: http://monumentfresh.com/aeefbf478026187d6c702d738f289cf6b/?sid1=smsinterest&sid2=310925107&sid3=&sid4=&first=Mister&last=Clean&email=e64a2ca723@emailkom.live&phone=13134048290&zip=03233
cache-control: private
set-cookie: ASP.NET_SessionId=s5c2wedirekdoetsbov4a1i1; path=/; HttpOnly; SameSite=Lax
trkr=320018584; expires=Wed, 11-Jan-2023 19:05:46 GMT; path=/; secure
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3HyXAGA517RyV2LlcWiOvQ0bIrV%2Bf%2FVPGml7nr78fQ2IMGu1iNPC%2FhhCEoPV6OCaWc%2BDdBcpuGMTJrSmP6gDxk36PDUkKezbeEs6EswwBvPT245MDQo53j88XnNb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78463f5f6d370b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b11930d-f72d-464d-8f7d-bbd0bb247c74.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b11930d-f72d-464d-8f7d-bbd0bb247c74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 235b1a6e2b61b3068bf7a8e7a2607634
0df6f090574996e472064765c6f27b6b8e012414
6e6061581018dc0ec494631e7861cf2e44f82ac94d1b0056679555ff6dae5f8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b11930d-f72d-464d-8f7d-bbd0bb247c74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13546
x-amzn-requestid: 6758cca7-bc06-43dd-8545-3e05aa760218
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3p7GYjIAMFw7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49fd8-038317190f3df26f13c9d961;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:36:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Pmw35oCAPfvYxFowD4CDyUUrQI_V69MOGrpK55fUcvU2aoA1G19P3g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:49:21 GMT
age: 76586
etag: "0df6f090574996e472064765c6f27b6b8e012414"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7367913c-a0ac-494d-9929-dad9f308a082.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7367913c-a0ac-494d-9929-dad9f308a082.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 366b35900303af09c9dd28131a105a66
34b2acc4195a5e36f0acbd10669219c7ef14a5fa
5b7c3e9920d5058a2342a3e85e3046de75c3f8ff88bc55099f5cfc3ad5041b69
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7367913c-a0ac-494d-9929-dad9f308a082.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7126
x-amzn-requestid: 7107757b-782a-4f3b-8e41-a175a747141e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d_bnOHWCIAMFoLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afa62e-43925f7f072903de3cae6ab6;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 03:02:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q4S2zHji1gQXLSfdpmlOUTv24DrwSjtAkBqdUsFrAyMWhPSZKPVS8w==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 03:35:25 GMT
age: 55822
etag: "34b2acc4195a5e36f0acbd10669219c7ef14a5fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26b683df-9643-4ff8-b098-1efad9d79718.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26b683df-9643-4ff8-b098-1efad9d79718.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ada6b864a52071ec64fe1089642da007
d221d11157dc0fe23c5751ac7696975445c4e884
ddada04725b434f0b1aa0b9a3f2732e82ec7d04714c1569de192664edf2d273f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26b683df-9643-4ff8-b098-1efad9d79718.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10779
x-amzn-requestid: 78509014-ef20-4b14-93af-7f340c493104
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dyR4fE80oAMFR8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63aa6369-5fddb69c6a8bb95d3a441584;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 03:15:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hJ1M7LkKdEgql8_7dwuS_sbK1DOkPXzK1J2VXrWPiDUEmB-COGQ4ug==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 18:27:13 GMT
age: 2314
etag: "d221d11157dc0fe23c5751ac7696975445c4e884"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 359f30e64bec00d0a01acd69a08b684d
ac965c8642c4d1e47713965060fa2fc8f19088b1
fff1b001462468cc953092a2312650c03f307e95c40e2c6bb7356e2a8b9b0283
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11877
x-amzn-requestid: 884b9243-6a8a-4434-9b2a-e5eff84d4e99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL33bFnDoAMFpoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b4a02f-3f7043ae29d21e010ddc1ff9;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:37:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AmpRiMJDlhYtRCxTT0l7VEPHwk7eK_rnGceIYRUobRqi8hIM2LMrCQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 22:00:54 GMT
age: 75893
etag: "ac965c8642c4d1e47713965060fa2fc8f19088b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af78916e285d0f6c5c5a5ff33894e108
96df0d8c10c666811cfeb98187ca93e65480c2ff
7bcb20dc641e46d033dee76b3d92b701b31aecfbf88241a5a95dfdc1c5e95885
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5018
x-amzn-requestid: 7a68cfb1-dedd-4f08-8d99-4678c1087422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3HtFHkoAMFwYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49efd-7880e5f93c99cc794f9a03bb;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:32:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MvV5dXthUr0Qo499_5eG6Z_yW0gmflen3kRBrse7ngQjUgOVA0OMvg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:48:41 GMT
age: 76626
etag: "96df0d8c10c666811cfeb98187ca93e65480c2ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
monumentfresh.com/aeefbf478026187d6c702d738f289cf6b/?sid1=smsinterest&sid2=310925107&sid3=&sid4=&first=Mister&last=Clean&email=e64a2ca723@emailkom.live&phone=13134048290&zip=03233
200 OK 6.7 kB URL HTTP/1.1 monumentfresh.com/aeefbf478026187d6c702d738f289cf6b/?sid1=smsinterest&sid2=310925107&sid3=&sid4=&first=Mister&last=Clean&email=e64a2ca723@emailkom.live&phone=13134048290&zip=03233
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (352)
Hash 83c8f4049beff213c9ebd515f24d347a
ec3d0caef07f4a9007a69e6f47ddd5bafe46f6bd
7497e1c068e5414166a040726e44307c0be6354458f1a171f29c19b9af1f14c7
GET /aeefbf478026187d6c702d738f289cf6b/?sid1=smsinterest&sid2=310925107&sid3=&sid4=&first=Mister&last=Clean&email=e64a2ca723@emailkom.live&phone=13134048290&zip=03233 HTTP/1.1
Host: monumentfresh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Wed, 04 Jan 2023 19:05:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
Set-Cookie: clkcheck28444=0ac1698a73897d53d69504522f449477_204003; expires=Fri, 03-Feb-2023 19:05:47 GMT; Max-Age=2592000; path=/; SameSite=Lax
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f239920b11acb26d109b7a1b8cf58e46
f7bab98d3c21794c3e3d08d88c4331ef48420c13
c580620be129f2651f775f95daaeae659d6e62cdf2b8eb2277e6c794c7e53673
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MB79N3N
200 OK 40 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MB79N3N
IP
File type ASCII text, with very long lines (2031)
Hash 774f4caee46f8c49296fb4d650847ecd
8c0fd3b032eccd0f928b19952877f28d3e7e32d7
88e517c1a00f3c72d1b89d641b41c5ab09ebdb79a5d772a30623fa61ba4a142d
GET /gtm.js?id=GTM-MB79N3N HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://monumentfresh.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 04 Jan 2023 19:05:47 GMT
expires: Wed, 04 Jan 2023 19:05:47 GMT
cache-control: private, max-age=900
last-modified: Wed, 04 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 40427
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f239920b11acb26d109b7a1b8cf58e46
f7bab98d3c21794c3e3d08d88c4331ef48420c13
c580620be129f2651f775f95daaeae659d6e62cdf2b8eb2277e6c794c7e53673
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
monumentfresh.com/fp.php
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp.php HTTP/1.1
Host: monumentfresh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 920
Origin: http://monumentfresh.com
Connection: keep-alive
Referer: http://monumentfresh.com/aeefbf478026187d6c702d738f289cf6b/?sid1=smsinterest&sid2=310925107&sid3=&sid4=&first=Mister&last=Clean&email=e64a2ca723@emailkom.live&phone=13134048290&zip=03233
Cookie: clkcheck28444=0ac1698a73897d53d69504522f449477_204003
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Wed, 04 Jan 2023 19:05:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
static.traversedlp.com/v1/retargeting.js
200 OK 3.4 kB URL HTTP/1.1 static.traversedlp.com/v1/retargeting.js
IP
File type ASCII text, with very long lines (11560), with no line terminators
Hash eb6ee76399080fb47e2e2520440b21f7
28d3739cb01a376ef303aa17b4f605be327e5d78
15fcc49d1c8c93b13fc87b3d536e2d1252e296c643ae03addcaf4c4807fb06aa
GET /v1/retargeting.js HTTP/1.1
Host: static.traversedlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://monumentfresh.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 01 Jun 2022 20:20:14 GMT
x-amz-version-id: KLbodh6xIMdiUWAxenjc1ByBclqfTj74
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 04 Jan 2023 19:03:16 GMT
ETag: W/"c31ba40743566f87f00f822e3cefb390"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -_MSnm1b4dv1MGLd1VjOnBt7nTRpZw6xgPKO6wQbalGwg4fNWnNDJA==
Age: 259
signals.aimtell.com/matches?token=f5d7c95ea0af0ed4512d414529c2dffa
200 OK 43 B URL HTTP/2 signals.aimtell.com/matches?token=f5d7c95ea0af0ed4512d414529c2dffa
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /matches?token=f5d7c95ea0af0ed4512d414529c2dffa HTTP/1.1
Host: signals.aimtell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://monumentfresh.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:48 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Accept-Encoding
server: cloudflare
cf-ray: 78463f6b2a46b4f9-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 32ac6835ce3f11c22eb906613afb2092
f8d3fc7a821970e88ed43f8e2089d0292d8cc12a
3270e8f62b73a81e0da160121b714c1180019e1da2516d04a52fed03915cfaa4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=109618
Date: Wed, 04 Jan 2023 19:05:48 GMT
Etag: "63b4d28d-1d7"
Expires: Fri, 06 Jan 2023 01:32:46 GMT
Last-Modified: Wed, 04 Jan 2023 01:12:45 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Qlz_cIPHzetMS89xc_MhbzKG_8_5GrfYv6pUfXahDJPtjc1KQQIj2A==
Age: 1201
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ae3113779905630891c3c1943df0be55
9fddf8ef667c32a34745e54f944b96ae6fd5ecb0
8f64b959966897dacec9b301d65f15cb2c2b1b7546fe33e5436e9df9d8f87df7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169409
Date: Wed, 04 Jan 2023 19:05:48 GMT
Etag: "63b5b4fb-1d7"
Expires: Fri, 06 Jan 2023 18:09:17 GMT
Last-Modified: Wed, 04 Jan 2023 17:18:51 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TphAQdhHfY5tkwso8EgtZ2O9TEwpU9pTHDz3bsEaw3FuGWAm_-tClg==
Age: 3026
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 3ee75b786c937abe826537dbbffadda7
34b7afe31f35ff22a38c96a54207097740428cb2
eaf8bb0d356041655c523452767dbbd76c6849a9d704a16f12060427063384a3
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 04 Jan 2023 19:05:48 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 03 Jan 2023 22:42:44 GMT
Expires: Wed, 04 Jan 2023 22:42:44 GMT
ETag: "34b7afe31f35ff22a38c96a54207097740428cb2"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.ncvtracks.com/LR9KH/CL62GX/?sub1=204003&sub2=0ac1698a73897d53d69504522f449477&sub3=smsinterest&sub4=28444&firstname=&lastname=&email=e64a2ca723@emailkom.live&phone1=13134048290
302 Found 370 B URL HTTP/2 www.ncvtracks.com/LR9KH/CL62GX/?sub1=204003&sub2=0ac1698a73897d53d69504522f449477&sub3=smsinterest&sub4=28444&firstname=&lastname=&email=e64a2ca723@emailkom.live&phone1=13134048290
IP
File type HTML document, ASCII text, with very long lines (368)
Hash 89766a69d8e7146237f4174ce26ed882
c58e358279518ac3893831786cd3d7e9d70f9922
4956cc69710189867c17ca8e2db1b8009e737d06a4e750c6be58aaac6fd3ecf3
GET /LR9KH/CL62GX/?sub1=204003&sub2=0ac1698a73897d53d69504522f449477&sub3=smsinterest&sub4=28444&firstname=&lastname=&email=e64a2ca723@emailkom.live&phone1=13134048290 HTTP/1.1
Host: www.ncvtracks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://monumentfresh.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 04 Jan 2023 19:05:48 GMT
content-type: text/html; charset=utf-8
content-length: 370
location: https://www.ncvtracks.com/LR9KH/CQBNNQ/?__rpt=0&__po=214&__ptid=a379ac1413be43368d1f053a48149f5b&__rpa=0&__rc=1&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&sub3=smsinterest&sub4=28444&sub5=&source_id=&__pcd=9&firstname=&email=e64a2ca723%40emailkom.live&phone1=13134048290&lastname=
set-cookie: uniqueClick_CL62GX=53c76efe-1878-498a-91ca-5a911c4ad2f1:1672859148; Path=/; Expires=Fri, 03 Feb 2023 19:05:48 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 8af7d7fd-3869-4cd6-9585-de617f1ef119
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 3ee75b786c937abe826537dbbffadda7
34b7afe31f35ff22a38c96a54207097740428cb2
eaf8bb0d356041655c523452767dbbd76c6849a9d704a16f12060427063384a3
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 04 Jan 2023 19:05:48 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 03 Jan 2023 22:42:44 GMT
Expires: Wed, 04 Jan 2023 22:42:44 GMT
ETag: "34b7afe31f35ff22a38c96a54207097740428cb2"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.ncvtracks.com/LR9KH/CQBNNQ/?__rpt=0&__po=214&__ptid=a379ac1413be43368d1f053a48149f5b&__rpa=0&__rc=1&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&sub3=smsinterest&sub4=28444&sub5=&source_id=&__pcd=9&firstname=&email=e64a2ca723%40emailkom.live&phone1=13134048290&lastname=
302 Found 304 B URL HTTP/2 www.ncvtracks.com/LR9KH/CQBNNQ/?__rpt=0&__po=214&__ptid=a379ac1413be43368d1f053a48149f5b&__rpa=0&__rc=1&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&sub3=smsinterest&sub4=28444&sub5=&source_id=&__pcd=9&firstname=&email=e64a2ca723%40emailkom.live&phone1=13134048290&lastname=
IP
File type HTML document, ASCII text, with very long lines (302)
Hash f320f659d986f4bec270b5e52ed22c42
88be0160c80dcb3876d76729678982086229a3a6
836bb8ce6842954a6c7cd73d3fd3dfb0e11419a649e36d2efafebb98fcc2487c
GET /LR9KH/CQBNNQ/?__rpt=0&__po=214&__ptid=a379ac1413be43368d1f053a48149f5b&__rpa=0&__rc=1&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&sub3=smsinterest&sub4=28444&sub5=&source_id=&__pcd=9&firstname=&email=e64a2ca723%40emailkom.live&phone1=13134048290&lastname= HTTP/1.1
Host: www.ncvtracks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://monumentfresh.com/
Connection: keep-alive
Cookie: uniqueClick_CL62GX=53c76efe-1878-498a-91ca-5a911c4ad2f1:1672859148
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 04 Jan 2023 19:05:48 GMT
content-type: text/html; charset=utf-8
content-length: 304
location: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
set-cookie: uniqueClick_CQBNNQ=131ee6f0-7bc6-4e88-8273-de61b77b5424:1672859148; Path=/; Expires=Fri, 03 Feb 2023 19:05:48 GMT; Secure; SameSite=None
transaction_id=3626283ce8c94fafa9032b89b8266726; Path=/; Expires=Tue, 04 Apr 2023 19:05:48 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: ed5f2b4c-279c-46c8-85a1-bcebf93b0f8d
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 32019bef31ced36fc07c01d4f7bbf9ec
01e0432ca47d88ae0c90692d14dad25b274c0440
0c492be20f3cf784db85388c6eeb19ac2e0accbfb5574e0fe028a72945661dbc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0C492BE20F3CF784DB85388C6EEB19AC2E0ACCBFB5574E0FE028A72945661DBC"
Last-Modified: Wed, 04 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21556
Expires: Thu, 05 Jan 2023 01:05:05 GMT
Date: Wed, 04 Jan 2023 19:05:49 GMT
Connection: keep-alive
rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
200 OK 9.0 kB URL HTTP/1.1 rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (765), with CRLF, LF line terminators
Hash 2296e4f154a09f90233cd13bbfb04caa
48927c973dd1cd0d4875f8365ee0b6de8946d5f8
35d131cba12d98b1e9d7f9025bf3b4d6f583fd5051121077782bde152e6a80ab
GET /view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://monumentfresh.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
cache-control: no-cache, private
date: Wed, 04 Jan 2023 19:05:49 GMT
set-cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; expires=Wed, 04-Jan-2023 21:05:49 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D; expires=Wed, 04-Jan-2023 21:05:49 GMT; Max-Age=7200; path=/; httponly; samesite=lax
referrer-policy: no-referrer-when-downgrade
content-encoding: gzip
ocsp.digicert.com/
200 OK 278 B IP
Hash bf28e1983002a1f5a15facdfcfef0cfe
8efd7dd6c78efbf5b49d29ee36f792482dab726e
3959089ae31e1cf9cbf346b5650a18af9d90d38e40c684bc7640b53c5a1a4977
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2183
Cache-Control: max-age=116377
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Etag: "63b4e920-116"
Expires: Fri, 06 Jan 2023 03:25:27 GMT
Last-Modified: Wed, 04 Jan 2023 02:49:04 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
200 OK 6.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
IP
File type ASCII text, with very long lines (20831)
Hash 368c425fc94c424e1688caadefbed981
13d24c22c199ef6668d758434819f44307a65094
ed9c7a83e1c1300a93ecd08807a736ebe7b87ab8262a40bc7e3859d00a46a102
GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: application/javascript; charset=utf-8
content-length: 6646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-520c"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2943545
expires: Mon, 25 Dec 2023 19:05:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ICqcmzw%2Fz3N9r%2Bm2dLjKPb%2BEwqD2ywmNbljLs2%2B9PjxQuJUFkAyuoYiEZRrmce3vgLOI9Re642eB4lbOtU1op91ZFpin8z7VWi7BUnk8N4703Nru9PsLDKwvVqxmJHWEUlEcf72c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78463f77ab15fabc-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css
200 OK 4.2 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css
IP
File type ASCII text, with very long lines (65348)
Hash eefc9abe5bc10d658a2393a70d052566
dd49deafcd3ebe1306cda0b843f2da265f8a90e1
6011c33e447455e96e1d4926b0e15ca399eb993163a8e5ee0c523947396d66c3
GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: text/css; charset=utf-8
content-length: 4216
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f5628a2-11846"
last-modified: Mon, 07 Sep 2020 12:33:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1086200
expires: Mon, 25 Dec 2023 19:05:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D%2FZo%2F7nX8so%2B4jbpvE1x6zEWqbVpxcykkSgDeiKaYvRLkSuZLbJLMiSxYVA0tIi3ZAlkGoR25RoRViTFy9C1i4LGFw4iPimUSMTIf0bW%2FCQOzvBqrqbrO1q5xNZ5ra%2BXNoYqgwQ0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78463f77cb2bfabc-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f239920b11acb26d109b7a1b8cf58e46
f7bab98d3c21794c3e3d08d88c4331ef48420c13
c580620be129f2651f775f95daaeae659d6e62cdf2b8eb2277e6c794c7e53673
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash bf28e1983002a1f5a15facdfcfef0cfe
8efd7dd6c78efbf5b49d29ee36f792482dab726e
3959089ae31e1cf9cbf346b5650a18af9d90d38e40c684bc7640b53c5a1a4977
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2183
Cache-Control: max-age=116377
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Etag: "63b4e920-116"
Expires: Fri, 06 Jan 2023 03:25:27 GMT
Last-Modified: Wed, 04 Jan 2023 02:49:04 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 561e959ce9eff04b09da6f3def82f549
7866f989cdfb160709f4c93b767fd01e5553d75b
9076b4ae1a34ab02b362ffa44ecbf6d579f82042cfd7e7138977477ea5bd3e61
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2de4d7e51964d03dfa8f0c6e3979bee2
e513e915c70c92b05bb5d2d3db32cc1542301634
a0f8c063c6d999641753296981e10d9cafb341efe8a8578160a85260fd5fa08e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.revcontent.com/master/delivery.js
200 OK 50 kB URL HTTP/2 assets.revcontent.com/master/delivery.js
IP
File type Unicode text, UTF-8 text, with very long lines (65057)
Hash 0ae78da57675c3f4506e11779931c8fa
a2e18b2726c6a41fc8a9048e99a350196d151270
5a473b063f749b03647c0ed54fc387d282a2d6bc2c7436994cd333809bfe47d6
GET /master/delivery.js HTTP/1.1
Host: assets.revcontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:50 GMT
content-encoding: gzip
content-length: 50415
content-type: application/x-javascript
last-modified: Tue, 03 Jan 2023 15:17:26 GMT
accept-ranges: bytes
x-amz-id-2: Z6BJDX/OWoCnemmFYOwvlVeRBaql6ciC+9xEfjyTFzwOf8hrXBOOFOF0dyUnjBuiIX2hl4R9Ja4=
x-amz-request-id: ZP1DY7V8J282DZYM
etag: "7bcd2f53a1eb351d3b408478ca474974"
cache-control: public,max-age=600
server: AmazonS3
x-sp-metadata: HS256.CJ64150GEoYBCiQ1Mzk4NmNhYi04YTk0LTRkMjYtYTY5NS04YTdjZjY5NzcyMDkQwLnuqZCq+wIaBgiOnNedBiIMOTEuOTAuNDIuMTU0KM9cMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaLAgBEiRhZTE0MGI2Yy0xYTFlLTRhNzItOWEyOS02Nzc5MmYyMzgyMzIY74kDIhgIAhIUY2RzMjI2LnNrMS5od2Nkbi5uZXQ=.l3x+2LoqB2WTsIMipjoRKsOTW69lxbeF1zAXotkN+jc=
x-hw: 1672859150.cds023.sk1.hn,1672859150.cds226.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-41K3WBWRF3
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-41K3WBWRF3
IP
File type ASCII text, with very long lines (20080)
Hash 91b2fd9591cc573000bbeda0f783fe37
2712de41d4ea9c3adf8d5e712a5299620ee0f568
172163b0f030d2f2e83ff7845d3ad8f50d066593863f8bacabbf46d718483dfb
GET /gtag/js?id=G-41K3WBWRF3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 04 Jan 2023 19:05:50 GMT
expires: Wed, 04 Jan 2023 19:05:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77273
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2de4d7e51964d03dfa8f0c6e3979bee2
e513e915c70c92b05bb5d2d3db32cc1542301634
a0f8c063c6d999641753296981e10d9cafb341efe8a8578160a85260fd5fa08e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rentalassistance.net/js/main.js?id=f70e8d7ba83b4cd58b93
200 OK 37 kB URL HTTP/1.1 rentalassistance.net/js/main.js?id=f70e8d7ba83b4cd58b93
IP
File type Unicode text, UTF-8 text, with very long lines (65278)
Hash d738a9e42e0aaa21ba7a0efcb51772fe
fc8b5e88df875fa0e4f644a9f629a045d99ba06b
b495ac5f499f2e0555e6778a13e12662cd7eac5c9749e86384ade5bbea643ba9
GET /js/main.js?id=f70e8d7ba83b4cd58b93 HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"63b3cfdc-1628b"
access-control-allow-origin: *
content-encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 561e959ce9eff04b09da6f3def82f549
7866f989cdfb160709f4c93b767fd01e5553d75b
9076b4ae1a34ab02b362ffa44ecbf6d579f82042cfd7e7138977477ea5bd3e61
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rentalassistance.net/defaults/css/defaults.css
200 OK 246 B URL HTTP/1.1 rentalassistance.net/defaults/css/defaults.css
IP
Hash 6e194d125a01a41bc38feb4edc3f6426
5e4ea259db680d1755c099da096d626d522000fa
d4ff84bd121c8218eaf66d9185d268d554a8caecc8eb13bbbf2e8b5fc973b530
GET /defaults/css/defaults.css HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: text/css
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"63b3cfdc-21c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
content-encoding: gzip
rentalassistance.net/templates/rentalassistance.net/css/styles.css
200 OK 8.6 kB URL HTTP/1.1 rentalassistance.net/templates/rentalassistance.net/css/styles.css
IP
File type assembler source, Unicode text, UTF-8 text
Hash f4391835d2e0f419c232bf08524bb9a9
eb6d345ebe7d35bd305840e1c6cee75230e4c6af
21a0c54d9f9aeae37fd602d9bf0622ab20153478de2f175c1f6cbf6ee4d6bc00
GET /templates/rentalassistance.net/css/styles.css HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: text/css
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"63b3cfdc-8046"
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
content-encoding: gzip
rentalassistance.net/templates/rentalassistance.net/js/idlepop.js
200 OK 1.8 kB URL HTTP/1.1 rentalassistance.net/templates/rentalassistance.net/js/idlepop.js
IP
Hash 5a8619b67f625f4f880aaf3e134fe3af
43a94b4907471562c24b8aeafa39ec8c82ff6abc
61015ef7bc2a39e010e6981edd45e5efd1ea9cdf8ec9e3e489249e05325a8325
GET /templates/rentalassistance.net/js/idlepop.js HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"63b3cfdc-17b6"
access-control-allow-origin: *
content-encoding: gzip
rentalassistance.net/defaults/css/tipped.css
200 OK 3.4 kB URL HTTP/1.1 rentalassistance.net/defaults/css/tipped.css
IP
Hash a7741a9a6aae3ee21e2b5102ea6afb6a
3d98b2f037ffd346fa29affc5b3d0f8f3bf8bf9c
2ec756c3b0224d4a62f6fa4cbae97e14f1e387b75eafac69b8548c5c157ada40
GET /defaults/css/tipped.css HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: text/css
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"63b3cfdc-32d0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
content-encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 25 kB URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 620baf8151c54d4b4e9edf70ca70af27
fb311ba49fe878f7e6c1698501d2c609c37e3fc2
d6e2f6f143d541d4b8588b3523677d5cc94c90627fc61a24973bf8ac18ae8a79
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=119668
Date: Wed, 04 Jan 2023 19:05:50 GMT
Etag: "63b4f304-1d7"
Expires: Fri, 06 Jan 2023 04:20:18 GMT
Last-Modified: Wed, 04 Jan 2023 03:31:16 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VGbF-071sLiHBOpB6Dr9fq6bjozCy2znJDsRS94myY0mDR4n5kgwXg==
Age: 2942
rentalassistance.net/defaults/js/tipped.js
200 OK 24 kB URL HTTP/1.1 rentalassistance.net/defaults/js/tipped.js
IP
File type ASCII text, with very long lines (32122)
Hash 24de2c12812d6041e470d0db6179f964
77a4a8cd1bc2fc08466eb1360ef95e091b7c3a29
67fcfdd54154150364426447079cdaaaac79b044dde51d33add6bd4337d81ffc
GET /defaults/js/tipped.js HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"63b3cfdc-12680"
access-control-allow-origin: *
content-encoding: gzip
host1.easypolls.net/ext/scripts/emPoll.js?p=5d66c61fe4b067f237f9e485
200 OK 4.8 kB URL HTTP/2 host1.easypolls.net/ext/scripts/emPoll.js?p=5d66c61fe4b067f237f9e485
IP
File type HTML document, ASCII text, with very long lines (4750), with no line terminators
Hash 61ef3fde42ab270669d4ba44a455105e
fec7f72b57f5aaa2649b6ab710571af37258d156
90efb9879ba1ebfaf5db63ec1104af7ea46d8d075789e8755e45e4c49a4d1a99
GET /ext/scripts/emPoll.js?p=5d66c61fe4b067f237f9e485 HTTP/1.1
Host: host1.easypolls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: application/javascript
content-length: 4750
set-cookie: AWSALBTG=wY9xXEyojr6subImQ7k2hi7MlJ+Ru0jrHyTMncd7CsD6/6b7qg+VA87r6e5o9Q6GqvahpH4msROTNqZyS7EzOzCoubEirXGwfP7IC0VgXrPmzzYERJQRCLWHDqoABsTMBJ8ht9S23cHZIzb+Q6g7Jmd05NPIsoz1OtW0Lz0NIwN/; Expires=Wed, 11 Jan 2023 19:05:50 GMT; Path=/
AWSALBTGCORS=wY9xXEyojr6subImQ7k2hi7MlJ+Ru0jrHyTMncd7CsD6/6b7qg+VA87r6e5o9Q6GqvahpH4msROTNqZyS7EzOzCoubEirXGwfP7IC0VgXrPmzzYERJQRCLWHDqoABsTMBJ8ht9S23cHZIzb+Q6g7Jmd05NPIsoz1OtW0Lz0NIwN/; Expires=Wed, 11 Jan 2023 19:05:50 GMT; Path=/; SameSite=None; Secure
AWSALB=qw+I1gapkWtK4hcTRiDa/2vUQok5fk1iv9mDIOsFRE6JKGPrE1TYFZbSdp6mUy45fLiT8mZXHijBEkKaObiLtVTG2B4+ZwpQBi083qeg6g/fI798mrIWFT7P8+AO; Expires=Wed, 11 Jan 2023 19:05:50 GMT; Path=/
AWSALBCORS=qw+I1gapkWtK4hcTRiDa/2vUQok5fk1iv9mDIOsFRE6JKGPrE1TYFZbSdp6mUy45fLiT8mZXHijBEkKaObiLtVTG2B4+ZwpQBi083qeg6g/fI798mrIWFT7P8+AO; Expires=Wed, 11 Jan 2023 19:05:50 GMT; Path=/; SameSite=None; Secure
server: nginx
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
last-modified: Wednesday, 04-Jan-2023 19:05:50 UTC
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
rentalassistance.net/templates/rentalassistance.net/images/svg/site-logo.svg
200 OK 14 kB URL HTTP/1.1 rentalassistance.net/templates/rentalassistance.net/images/svg/site-logo.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash aa6189f9cb83090bc0f8c688503b7ea4
d13290c9751a6d3e09a7dba9932c62120c52d9f0
6cb81ff017c33214596ee7b4f93bf1428e34b81db4161a237c4b88cca5268e2c
GET /templates/rentalassistance.net/images/svg/site-logo.svg HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: image/svg+xml
content-length: 13716
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
etag: "63b3cfdc-3594"
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
accept-ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cbad870248cb8172be5849309582b77f
3e12044d8bf5e6df81ac6260b186ecce175dba86
dc5b6747fdf685bd97307ee6584a5d8109258199ca81a8ddf2e6f1471b6f0cda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cbad870248cb8172be5849309582b77f
3e12044d8bf5e6df81ac6260b186ecce175dba86
dc5b6747fdf685bd97307ee6584a5d8109258199ca81a8ddf2e6f1471b6f0cda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cbad870248cb8172be5849309582b77f
3e12044d8bf5e6df81ac6260b186ecce175dba86
dc5b6747fdf685bd97307ee6584a5d8109258199ca81a8ddf2e6f1471b6f0cda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash afff3de4ee3f589f5d86c50230c3ce57
f5f1045d9dde3b2320d5c84ac78712e5056e3493
2a63df0d630bb706e9f55dc9be1127125cb9b706c103f9bc4079bc1f5fed5086
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2A63DF0D630BB706E9F55DC9BE1127125CB9B706C103F9BC4079BC1F5FED5086"
Last-Modified: Wed, 04 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3139
Expires: Wed, 04 Jan 2023 19:58:09 GMT
Date: Wed, 04 Jan 2023 19:05:50 GMT
Connection: keep-alive
maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
200 OK 42 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (57791)
Hash 2aed980c37e0fd5b6f0eb87f8a8c538e
79174301375460912846beda388084ff4a9cf539
b9775d4101b7a1ef35b7633bd78c955947799a53ea32f2ad583fde1e3891e618
GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 601, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 2021-04-23 06:42:10
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 4ec3ea58d4da343f371e5c42d7ad704a
cdn-cache: HIT
cf-cache-status: HIT
age: 20968739
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78463f77c9831c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rentalassistance.net/image/r?src=defaults/images/categories/12.jpg&w=825&h=100&zc=1
200 OK 15 kB URL HTTP/1.1 rentalassistance.net/image/r?src=defaults/images/categories/12.jpg&w=825&h=100&zc=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 825x100, components 3\012- data
Hash 26f0b5211c39ca11d3f67e8d60b47255
5932b091b1bb3367aea9613f67f4a4e96bbfe6f0
a2359cb69cb6f51f855fb2e43cdfab74827f1fdf7d5727a9bbe2c005080e73cb
GET /image/r?src=defaults/images/categories/12.jpg&w=825&h=100&zc=1 HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
content-type: image/jpeg
transfer-encoding: chunked
vary: Accept-Encoding
cache-control: no-cache, private
date: Wed, 04 Jan 2023 19:05:50 GMT
referrer-policy: no-referrer-when-downgrade
content-encoding: gzip
rentalassistance.net/templates/rentalassistance.net/images/svg/icon-search.svg
200 OK 1.3 kB URL HTTP/1.1 rentalassistance.net/templates/rentalassistance.net/images/svg/icon-search.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7c28cddd99dfdefc95229c9ac9bdafa8
253df86afd333e582063bb7bbc60a79d6d0b58ee
aad02338567c96ff7f2924eec32cee049f2d1e6ef2366086f3bb264b5fb606a1
GET /templates/rentalassistance.net/images/svg/icon-search.svg HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/templates/rentalassistance.net/css/styles.css
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: image/svg+xml
content-length: 1285
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
etag: "63b3cfdc-505"
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
accept-ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cbad870248cb8172be5849309582b77f
3e12044d8bf5e6df81ac6260b186ecce175dba86
dc5b6747fdf685bd97307ee6584a5d8109258199ca81a8ddf2e6f1471b6f0cda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rentalassistance.net/image/r?src=defaults/images/categories/11.jpg&w=825&h=100&zc=1
200 OK 31 kB URL HTTP/1.1 rentalassistance.net/image/r?src=defaults/images/categories/11.jpg&w=825&h=100&zc=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 825x100, components 3\012- data
Hash 785ee59a8c3222f6d3462dc4cb633d32
658c47e6d0957ccbc5825df76e86366aae382653
b1dd4f0d94e872b5cd0d1044a9cf6600db9284823142700591b8080f0309b185
GET /image/r?src=defaults/images/categories/11.jpg&w=825&h=100&zc=1 HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
content-type: image/jpeg
transfer-encoding: chunked
vary: Accept-Encoding
cache-control: no-cache, private
date: Wed, 04 Jan 2023 19:05:50 GMT
referrer-policy: no-referrer-when-downgrade
content-encoding: gzip
rentalassistance.net/image/r?src=defaults/images/categories/2.jpg&w=825&h=100&zc=1
200 OK 25 kB URL HTTP/1.1 rentalassistance.net/image/r?src=defaults/images/categories/2.jpg&w=825&h=100&zc=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 825x100, components 3\012- data
Hash 97c76f2451c521dedc70755db4e98467
d453d0ada626b09dbfe26d9e6dc30aa083f3c48a
105e05309830124d80fc9424b81295db2a9a115a049fcb6b8191ca2adbf7bc0f
GET /image/r?src=defaults/images/categories/2.jpg&w=825&h=100&zc=1 HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
content-type: image/jpeg
transfer-encoding: chunked
vary: Accept-Encoding
cache-control: no-cache, private
date: Wed, 04 Jan 2023 19:05:50 GMT
referrer-policy: no-referrer-when-downgrade
content-encoding: gzip
rentalassistance.net/image/r?src=defaults/images/categories/8.jpg&w=825&h=100&zc=1
200 OK 68 kB URL HTTP/1.1 rentalassistance.net/image/r?src=defaults/images/categories/8.jpg&w=825&h=100&zc=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 825x100, components 3\012- data
Hash 336a3b9f8ba0c8200af11bbd0facf980
15aabae98a0a439ee4482ced0c8fb808c815ae6b
c4af48711224f096292546b1655623fdfa23c8d8a51fad1f7fdfbf3fc0d08956
GET /image/r?src=defaults/images/categories/8.jpg&w=825&h=100&zc=1 HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
content-type: image/jpeg
transfer-encoding: chunked
vary: Accept-Encoding
cache-control: no-cache, private
date: Wed, 04 Jan 2023 19:05:50 GMT
referrer-policy: no-referrer-when-downgrade
content-encoding: gzip
rentalassistance.net/templates/rentalassistance.net/images/banner_bg1.jpg
200 OK 126 kB URL HTTP/1.1 rentalassistance.net/templates/rentalassistance.net/images/banner_bg1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, PhotometricIntepretation=RGB, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=Adobe Photoshop CC 2019 (Macintosh), datetime=2021:01:28 05:17:52], progressive, precision 8, 1200x790, components 3\012- data
Size 126 kB (125482 bytes)
Hash 741e6fab943413df4e4e74a18fa9b283
ed0103e0d147201c699761470aae1ba6a782ee39
17941cbb1df7c1fb9ee7d0df2b8631b13a44f998c39fc8509c234a714b552d56
GET /templates/rentalassistance.net/images/banner_bg1.jpg HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/templates/rentalassistance.net/css/styles.css
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: image/jpeg
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"63b3cfdc-20dc9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
content-encoding: gzip
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash afff3de4ee3f589f5d86c50230c3ce57
f5f1045d9dde3b2320d5c84ac78712e5056e3493
2a63df0d630bb706e9f55dc9be1127125cb9b706c103f9bc4079bc1f5fed5086
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2A63DF0D630BB706E9F55DC9BE1127125CB9B706C103F9BC4079BC1F5FED5086"
Last-Modified: Wed, 04 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3138
Expires: Wed, 04 Jan 2023 19:58:09 GMT
Date: Wed, 04 Jan 2023 19:05:51 GMT
Connection: keep-alive
rentalassistance.net/service-worker.js
200 OK 172 B URL HTTP/1.1 rentalassistance.net/service-worker.js
IP
File type ASCII text, with CRLF line terminators
Hash 7637b2276033a9cddde4f9cfa10517ca
1baa12352bead83bb57bd472f78731b64b02100f
45df30e13b9c7e024e629d145d94be910bada48b99a6ebe8d8f6121856e6995c
GET /service-worker.js HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D; _ga_41K3WBWRF3=GS1.1.1672859141.1.0.1672859141.0.0.0; _ga=GA1.1.1466106032.1672859141
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
cache-control: no-cache, private
date: Wed, 04 Jan 2023 19:05:51 GMT
referrer-policy: no-referrer-when-downgrade
content-encoding: gzip
use.fontawesome.com/releases/v5.7.0/css/all.css
200 OK 13 kB URL HTTP/2 use.fontawesome.com/releases/v5.7.0/css/all.css
IP
File type ASCII text, with very long lines (54456)
Hash 48a0a739c59b532ec9e5f03c05880039
f5b551c3be083661eb8497bbd94ff4c61dd3f004
4663813792562050e40d033fab8ff6cabd4d54ff2462829f78310235ab5647e0
GET /releases/v5.7.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:50 GMT
content-type: text/css
x-amz-id-2: p5uyCrWLSn5DxmKI1n2b8urOgO11TYFbz8wZO+1fB5CVwTJ4OAEV/+OFTm2ANwZRsZxe+Knalj4=
x-amz-request-id: F71RDJHV9PM1VPVG
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:15 GMT
etag: W/"251d28bd755f5269a4531df8a81d5664"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 17261
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NjSR31JIa94l6py2TOFJ5%2BC4teSb4bnXj9f1yASQFNvqeTF7teQjfbIcifr0NByDDE3yIfgImvAfHQmb4821sknJP1Ezgt6aMKc1iKYHXH6N%2BrcgIyBbZduwbg0zLKyRVBquXvqb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78463f783e42887f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 04 Jan 2023 17:34:02 GMT
expires: Wed, 04 Jan 2023 19:34:02 GMT
cache-control: public, max-age=7200
age: 5509
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rentalassistance.net/templates/rentalassistance.net/images/site-icon.png
200 OK 7.0 kB URL HTTP/1.1 rentalassistance.net/templates/rentalassistance.net/images/site-icon.png
IP
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 157992f048e22ce7e9a98573ab5abe60
9e3daa735b8082494a83aa257baa69283d4ad6dc
1c903d91534beced72d8a0be4ba742464ee72e5a2cd663cde956ac321f74ee0a
GET /templates/rentalassistance.net/images/site-icon.png HTTP/1.1
Host: rentalassistance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/view_article.php?id=3502&sub1=204003&sub2=0ac1698a73897d53d69504522f449477&affiliate_id=14&transaction_id=3626283ce8c94fafa9032b89b8266726&ft=1&firstname=&lastname=&phone1=13134048290&email=e64a2ca723%40emailkom.live
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IngxS3Y4Q20vNnkzTmJQY1MwRnlwVWc9PSIsInZhbHVlIjoieFAwRGlsSVR3aDl0anZXa2RRa1ZUOWlsMGs2aXlXaXNiMEhCdXlYUUQzVjVvT0dlR3FsSVdaekdIeFNwWHd4YjEzMHdidUxwb3ZwYWhNNkgvMzRNczQzRW0vRFdMclFtMUczU3ByZVpBUUFJVGpLQ3VlZHNWSlptN3lORzRoblIiLCJtYWMiOiIyNGE4YTJhZmY0ZGJjZDkzZjZlODJjYWJkOWVhNDFmY2ZjOWRiODc5OTFkZmZkYThmZTVmZTljOWU3NmE5YzkwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVGSG5MK2NXMzg0ZjA2cEpkYnIySXc9PSIsInZhbHVlIjoiK3RvcjgxZXNYK0phSzdBSDVnVG1ZVHU1YW0xWVNQT1JVYzlTb0kzQ3pwSkpyZTUwZCtudjdNV3l0a3k1YmpxU3pwd0dBYTJHWE5GWkY4YTNkWG9iSFZTaU1aWkw1WUNLVjc2N2x6MzB4Tlg5SkxidFJNK2VRYUZIdTZzR0dvQ3IiLCJtYWMiOiI0ODM0YjllM2QyNjRhYTg2YmE4MzM0MmQ2MWNlOGIzM2JkYWM2OTIxYmYyNTFjYTczZjY2OWQ0NzA5Mjg4ODRiIiwidGFnIjoiIn0%3D; _ga_41K3WBWRF3=GS1.1.1672859141.1.0.1672859141.0.0.0; _ga=GA1.1.1466106032.1672859141
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:51 GMT
content-type: image/png
last-modified: Tue, 03 Jan 2023 06:49:00 GMT
transfer-encoding: chunked
vary: Accept-Encoding
etag: W/"63b3cfdc-1fa7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
access-control-allow-origin: *
content-encoding: gzip
region1.google-analytics.com/g/collect?v=2&tid=G-41K3WBWRF3>m=2oebu0&_p=1987070292&cid=1466106032.1672859141&ul=en-us&sr=1280x1024&_s=1&sid=1672859141&sct=1&seg=0&dl=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&dr=http%3A%2F%2Fmonumentfresh.com%2F&dt=RentalAssistance.net&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-41K3WBWRF3>m=2oebu0&_p=1987070292&cid=1466106032.1672859141&ul=en-us&sr=1280x1024&_s=1&sid=1672859141&sct=1&seg=0&dl=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&dr=http%3A%2F%2Fmonumentfresh.com%2F&dt=RentalAssistance.net&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-41K3WBWRF3>m=2oebu0&_p=1987070292&cid=1466106032.1672859141&ul=en-us&sr=1280x1024&_s=1&sid=1672859141&sct=1&seg=0&dl=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&dr=http%3A%2F%2Fmonumentfresh.com%2F&dt=RentalAssistance.net&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://rentalassistance.net
date: Wed, 04 Jan 2023 19:05:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e5997d0ef73e3de5638ae94370cc4f86
8f8915adbf8c2fba56d5c6eb4684c87f7d168bb0
7862f64d36d62b40c9a52fc9d501aa94bf2efc8afc2101b681ee189dc319891d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=147932
Date: Wed, 04 Jan 2023 19:05:51 GMT
Etag: "63b564ba-1d7"
Expires: Fri, 06 Jan 2023 12:11:23 GMT
Last-Modified: Wed, 04 Jan 2023 11:36:26 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: WLJfUivf5VOn75QOlzRSH6cI-Q68knRiybvwSndsoRHUMc24cWHiJw==
Age: 2097
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e5997d0ef73e3de5638ae94370cc4f86
8f8915adbf8c2fba56d5c6eb4684c87f7d168bb0
7862f64d36d62b40c9a52fc9d501aa94bf2efc8afc2101b681ee189dc319891d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=149732
Date: Wed, 04 Jan 2023 19:05:51 GMT
Etag: "63b564ba-1d7"
Expires: Fri, 06 Jan 2023 12:41:23 GMT
Last-Modified: Wed, 04 Jan 2023 11:36:26 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5cyC52cOy9_whLnFF_qCy6hdEi6_dFUN8tZoNCS9CDh4NyLwIAWMAA==
Age: 3897
benefitsdepot-net.disqus.com/embed.js
200 OK 26 kB URL HTTP/1.1 benefitsdepot-net.disqus.com/embed.js
IP
File type ASCII text, with very long lines (32006)
Hash d66d12c476f196c216accda3b905ac6a
7a02cd51854fbf3f2dbda5049992c104f8f745f1
abf42a876cd4809192cc400afbf3de9ca3d06fe3109d8cdb58f09abcc8390269
GET /embed.js HTTP/1.1
Host: benefitsdepot-net.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 25634
Server: openresty
Content-Type: application/javascript; charset=utf-8
X-Service: router
Content-Encoding: gzip
Date: Wed, 04 Jan 2023 19:05:51 GMT
Age: 0
Vary: Accept-Encoding
Cache-Control: private, max-age=60
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
trends.revcontent.com/api/demand/?w=271443
200 OK 52 B URL HTTP/1.1 trends.revcontent.com/api/demand/?w=271443
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f4a5288d29a5acc780b485c0631d904d
9fe1fd9219f6dd986fe1c1269fe429842efaa576
8b4b43fd2629a9ae29c5220a852bbc8ff169c571cdf77798633efec65c934df7
GET /api/demand/?w=271443 HTTP/1.1
Host: trends.revcontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 04 Jan 2023 19:05:51 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 52
Connection: keep-alive
X-RC-Region: eu-west-1c
access-control-allow-credentials: true
access-control-allow-origin: https://rentalassistance.net
Strict-Transport-Security: max-age=931536000; includeSubDomains
host1.easypolls.net/ext/scripts/poll.js
200 OK 154 kB URL HTTP/2 host1.easypolls.net/ext/scripts/poll.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 154 kB (153564 bytes)
Hash 50d971817d9965f3067e4ed6d79b48c9
ed5d17450490a74d3990e4001b1a3b1d575ff216
5e68b9ba1318581a41eebe35348f3c70ad30c61d5d1bf1b59d6c8376c1bb78c8
GET /ext/scripts/poll.js HTTP/1.1
Host: host1.easypolls.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Cookie: AWSALBTGCORS=wY9xXEyojr6subImQ7k2hi7MlJ+Ru0jrHyTMncd7CsD6/6b7qg+VA87r6e5o9Q6GqvahpH4msROTNqZyS7EzOzCoubEirXGwfP7IC0VgXrPmzzYERJQRCLWHDqoABsTMBJ8ht9S23cHZIzb+Q6g7Jmd05NPIsoz1OtW0Lz0NIwN/; AWSALBCORS=qw+I1gapkWtK4hcTRiDa/2vUQok5fk1iv9mDIOsFRE6JKGPrE1TYFZbSdp6mUy45fLiT8mZXHijBEkKaObiLtVTG2B4+ZwpQBi083qeg6g/fI798mrIWFT7P8+AO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:51 GMT
content-type: application/javascript
content-length: 153564
set-cookie: AWSALBTG=5vY0X0SoN8GMJNr9d7hUC3RYt0vb2QcNIsNrYRYI4ZacIEo8R/zrSCAxuddRzYTBFz4L2wtgCHz61NHr5vkCo0GIkjq2qLNcSJr9s0cL7v82M4sHzwBhg0MqLFYXgU7VI4BOXMn19F8alFIZtniGABcXQ8mG+GDM/hqdkgMiAE5G; Expires=Wed, 11 Jan 2023 19:05:51 GMT; Path=/
AWSALBTGCORS=5vY0X0SoN8GMJNr9d7hUC3RYt0vb2QcNIsNrYRYI4ZacIEo8R/zrSCAxuddRzYTBFz4L2wtgCHz61NHr5vkCo0GIkjq2qLNcSJr9s0cL7v82M4sHzwBhg0MqLFYXgU7VI4BOXMn19F8alFIZtniGABcXQ8mG+GDM/hqdkgMiAE5G; Expires=Wed, 11 Jan 2023 19:05:51 GMT; Path=/; SameSite=None; Secure
AWSALB=6cGzkldOfPUfZJPX+GKG6v1NXdjr91MK+r35j8DMjQZuGVg1Vfz0kpWJLuOiGKeu/MWr3lThlwGcWPxh3IC98mdFZwdabl1y7kEBq71RMFGDh0+14jKjUGc61Ys1; Expires=Wed, 11 Jan 2023 19:05:51 GMT; Path=/
AWSALBCORS=6cGzkldOfPUfZJPX+GKG6v1NXdjr91MK+r35j8DMjQZuGVg1Vfz0kpWJLuOiGKeu/MWr3lThlwGcWPxh3IC98mdFZwdabl1y7kEBq71RMFGDh0+14jKjUGc61Ys1; Expires=Wed, 11 Jan 2023 19:05:51 GMT; Path=/; SameSite=None; Secure
server: nginx
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
last-modified: Wednesday, 04-Jan-2023 19:05:51 UTC
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 33cfe5319673511ba92cee086218cb9c
af73693b18411ce91e1a076ba707441c2e22709c
f6b8d40ecc3346be7ae845b71637ce2d7b3123aea03fe97275e629c524b50fde
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6B8D40ECC3346BE7AE845B71637CE2D7B3123AEA03FE97275E629C524B50FDE"
Last-Modified: Wed, 04 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19992
Expires: Thu, 05 Jan 2023 00:39:04 GMT
Date: Wed, 04 Jan 2023 19:05:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3911de16efbf23f58863340a13a94911
4c58b685a800aed8385b5acef91b7d2350c4db20
1ea86d6ee58fe0e4ddfb0b112647ae96db7046f7594d48e53561226c7533c2a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1EA86D6EE58FE0E4DDFB0B112647AE96DB7046F7594D48E53561226C7533C2A2"
Last-Modified: Wed, 04 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11664
Expires: Wed, 04 Jan 2023 22:20:16 GMT
Date: Wed, 04 Jan 2023 19:05:52 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash b742571b075764b56b159628cd9d1bb5
53fe956e2872c6ca0a9e9ab1f60e02441da018cf
7cfd38ed20378fe78791c969900c3aaaec631ac5f1d43d0890992dabcea8a74e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6450
Cache-Control: max-age=113082
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b4cb98-118"
Expires: Fri, 06 Jan 2023 02:30:34 GMT
Last-Modified: Wed, 04 Jan 2023 00:43:04 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
disqus.com/embed/comments/?base=default&f=benefitsdepot-net&t_u=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&t_d=RentalAssistance.net&t_t=RentalAssistance.net&s_o=default
200 OK 2.9 kB URL HTTP/1.1 disqus.com/embed/comments/?base=default&f=benefitsdepot-net&t_u=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&t_d=RentalAssistance.net&t_t=RentalAssistance.net&s_o=default
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2856)
Hash 31d1cf53e4b388c6d553133002e98785
ae536db9a59015b78fbc6b4b78f52da47dcc7b26
80ce7c236b93ca4c57094b0bfc86342a1731f390032d24dcdf668d8705826ce1
GET /embed/comments/?base=default&f=benefitsdepot-net&t_u=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&t_d=RentalAssistance.net&t_t=RentalAssistance.net&s_o=default HTTP/1.1
Host: disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 2904
Server: nginx
Content-Type: text/html; charset=utf-8
Content-Security-Policy: script-src https://*.twitter.com:* https://www.gstatic.com/recaptcha/ https://a.disquscdn.com https://c.disquscdn.com c.disquscdn.com https://*.services.disqus.com:* https://cdn.boomtrain.com/p13n/ https://com-disqus.netmng.com:* 'unsafe-inline' https://referrer.disqus.com/juggler/ https://connect.facebook.net/en_US/sdk.js https://cdn.syndication.twimg.com/tweets.json https://apis.google.com https://www.google.com/recaptcha/ https://cf.ignitionone.com:* https://disqus.com
Last-Modified: Wed, 04 Jan 2023 19:05:51 GMT
ETag: W/"lounge:view:9520512923.438961e57d6cfe82fd4073b3c6995697.2"
Link: <https://c.disquscdn.com>;rel=preconnect,<https://c.disquscdn.com>;rel=dns-prefetch
Cache-Control: stale-if-error=3600, s-stalewhilerevalidate=3600, stale-while-revalidate=30, no-cache, must-revalidate, public, s-maxage=5
p3p: CP="DSP IDC CUR ADM DELi STP NAV COM UNI INT PHY DEM"
Referrer-Policy: no-referrer-when-downgrade
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Date: Wed, 04 Jan 2023 19:05:52 GMT
Age: 0
Vary: Accept-Encoding
Cross-Origin-Resource-Policy: cross-origin
Strict-Transport-Security: max-age=300; includeSubdomains
id5-sync.com/g/v2/445.json
200 215 B URL HTTP/1.1 id5-sync.com/g/v2/445.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1d96b860882af6321dec175f0dddca9e
1ef019372b8540846f1f85152484abb91a8a38bb
5eea3e418027b47664f44d52dcda555a47c8adc740ca00f92a79522f2d3caa6c
POST /g/v2/445.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 414
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Wed, 04 Jan 2023 19:05:51 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
prebid.a-mo.net/cchain/0?cb=https%3A%2F%2Fusync.proper.io%2Fv1%2Fusersync%3Fbidder%3Dadaptmx%26proper_uid%3Daee9d039-edf4-4d97-b46b-51d77d3f58b7%26uid%3D&&callback=window.proper_e69bc40f_f5dd37d3_2
302 Found 3.0 kB URL HTTP/2 prebid.a-mo.net/cchain/0?cb=https%3A%2F%2Fusync.proper.io%2Fv1%2Fusersync%3Fbidder%3Dadaptmx%26proper_uid%3Daee9d039-edf4-4d97-b46b-51d77d3f58b7%26uid%3D&&callback=window.proper_e69bc40f_f5dd37d3_2
IP
Hash 787db35cdd96e9fdf1b82e4adb479d93
4b0643fe9e47203a69696a47fd7b60d0c12bd77b
ea0558ad6203a3e5f3dbb4132feb5ec1598c4485a05e16494de4f2882c1b397c
GET /cchain/0?cb=https%3A%2F%2Fusync.proper.io%2Fv1%2Fusersync%3Fbidder%3Dadaptmx%26proper_uid%3Daee9d039-edf4-4d97-b46b-51d77d3f58b7%26uid%3D&&callback=window.proper_e69bc40f_f5dd37d3_2 HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 0
date: Wed, 04 Jan 2023 19:05:51 GMT
location: https://usync.proper.io/v1/usersync?bidder=adaptmx&proper_uid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&uid=0865e55b-1a9f-449a-85a3-83d19c1e23c4&gdpr=&gdpr_consent=&us_privacy=
server: envoy
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
abcheck.proper.io/px.gif?ch=2&rn=2.167061321539399
200 OK 842 B URL HTTP/2 abcheck.proper.io/px.gif?ch=2&rn=2.167061321539399
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 04b36c8411ae7bf7a8c369fa94b30e56
a9d2c7f6c7c53ec972b72bc2bcec2a3817946824
48d611c460406f0653185a1447f5bf797eec3afa7c080b74205f4a8ea2729f3c
GET /px.gif?ch=2&rn=2.167061321539399 HTTP/1.1
Host: abcheck.proper.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Cookie: __cf_bm=TMauPK13CU9XVPCqecDhmYYCCbSYscS0r8.HDCjyIpo-1672859151-0-AZQFM54W7WW45NA+8O/xP0Mcv+F9Lcjlz9XzVzaz2scGwqO9hnC8OOxmn5eYeYj+eIROcwtk7/l20a2THl0wBFl3eKrHbnqvEKa/0KdEyXVl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: image/gif
content-length: 842
x-amz-id-2: 1HvO8Q0B8thk9xOA830BSJR/lN0Ij/LEjlqDypDqwaR0+UM3lUcfutekY9aeEp+fuB3Zpd2DtbE=
x-amz-request-id: 156PY8NM0ZXCW2WJ
last-modified: Thu, 06 Jan 2022 18:51:44 GMT
etag: "04b36c8411ae7bf7a8c369fa94b30e56"
cf-cache-status: MISS
expires: Wed, 04 Jan 2023 23:05:52 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78463f822cd40afa-OSL
X-Firefox-Spdy: h2
abcheck.proper.io/px.gif?ch=1&rn=2.167061321539399
200 OK 842 B URL HTTP/2 abcheck.proper.io/px.gif?ch=1&rn=2.167061321539399
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 04b36c8411ae7bf7a8c369fa94b30e56
a9d2c7f6c7c53ec972b72bc2bcec2a3817946824
48d611c460406f0653185a1447f5bf797eec3afa7c080b74205f4a8ea2729f3c
GET /px.gif?ch=1&rn=2.167061321539399 HTTP/1.1
Host: abcheck.proper.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Cookie: __cf_bm=TMauPK13CU9XVPCqecDhmYYCCbSYscS0r8.HDCjyIpo-1672859151-0-AZQFM54W7WW45NA+8O/xP0Mcv+F9Lcjlz9XzVzaz2scGwqO9hnC8OOxmn5eYeYj+eIROcwtk7/l20a2THl0wBFl3eKrHbnqvEKa/0KdEyXVl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: image/gif
content-length: 842
x-amz-id-2: TXCI/VajeaMsPpxmiRF1QtYWhVKyzeSndQPZDPpbAc5q1QX2uxnqDgRNFSkHduLvRIPwp0p/ej8=
x-amz-request-id: 156X9J67FA9WN3SS
last-modified: Thu, 06 Jan 2022 18:51:44 GMT
etag: "04b36c8411ae7bf7a8c369fa94b30e56"
cf-cache-status: MISS
expires: Wed, 04 Jan 2023 23:05:52 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78463f822cd10afa-OSL
X-Firefox-Spdy: h2
a.teads.tv/hb/bid-request
200 OK 42 B URL HTTP/2 a.teads.tv/hb/bid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f646cd677a5283a600e1ca73c499877
979e9d54fa7ac635da0fb855a8ba40a0f74fe76e
d6e5f108622c778ca6bc5d246637b9a73585a670d46e15493b89f2915806174a
POST /hb/bid-request HTTP/1.1
Host: a.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 841
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://rentalassistance.net
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64
content-encoding: gzip
expires: Wed, 04 Jan 2023 19:05:52 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 04 Jan 2023 19:05:52 GMT
content-length: 42
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 92357d63d172ddac3b4341e536885dba
bb5770adf7572e5f5fa345953c0607369e5c052a
9848eace86165d41d0c96e4317cc208d0b88d381de97caa0aee74398014408a6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 582
Cache-Control: max-age=147540
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b5691e-13a"
Expires: Fri, 06 Jan 2023 12:04:52 GMT
Last-Modified: Wed, 04 Jan 2023 11:55:10 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 314
status.geotrust.com/
200 OK 471 B IP
Hash 53b3a133b4690e68b6fa1e1d26a87947
63dc143f931d20402984e9d022db7afb23863f43
9ebe0f18724c57504af17e63de3867239ad9f61f242f73950489c80d97a2a325
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4547
Cache-Control: max-age=162281
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b59336-1d7"
Expires: Fri, 06 Jan 2023 16:10:33 GMT
Last-Modified: Wed, 04 Jan 2023 14:54:46 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.22.0&cb=9687567464&im=1
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.22.0&cb=9687567464&im=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.22.0&cb=9687567464&im=1 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1281
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 04 Jan 2023 19:05:52 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://rentalassistance.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
IP
Hash 6a9747aca04b4ff106e14a6c11e7e87d
7c0d4d2b8b5c3b18cb527f4281a6719d7273b86f
6fc842f3657c449394751390542d81858b32d7e5c82715b02ce38fc0ddd4d27e
POST /s/gts1d4/28HXVhFQgEk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash e35cb7fd642a6f1e790256155c639abc
2d3f41215c93524ab723602ad062bcc2b1478798
f4579f2891295bdc4147b915ce2dc9d8247f6f939c486776319b722c8b993af2
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 03 Jan 2023 23:52:11 GMT
Expires: Wed, 04 Jan 2023 23:52:11 GMT
ETag: "2d3f41215c93524ab723602ad062bcc2b1478798"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
propermedia-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&jr=http%3A%2F%2Fmonumentfresh.com%2F&ch=UTF-8&res=1280x1024x24&ifr=true&tws=1280x939&aus=300x250%7C300x250%2C300x600%7C728x90%2C970x250%7C728x90&auid=551155226%2C551155227%2C551155228%2C551155229&aumfs=100%2C100%2C100%2C100&dddid=e4e53909-18b3-4d7b-86aa-01b42c4e09eb%2Cb2067ef9-e73a-4080-b755-7be4a2aebe6c%2C299e0385-ce14-4124-b7ca-7cb8fbe36bb2%2C32cd0fe7-0571-4015-9256-71cd5b1d3c54&divIds=openx-d5272e2a-0bc9-49bc-90af-f0e25d3695e7%2Copenx-a360aa70-c6e0-45ab-b720-8581f0c71c59%2Copenx-100cb1ed-b4df-4dce-a278-593da08de321%2Copenx-bfa872b2-6e7e-4400-b34e-d39b7946940e&be=1&bc=hb_pb_3.0.1&nocache=1672859142270&schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1&x_gdpr_f=1&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7
200 OK 79 B URL HTTP/2 propermedia-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&jr=http%3A%2F%2Fmonumentfresh.com%2F&ch=UTF-8&res=1280x1024x24&ifr=true&tws=1280x939&aus=300x250%7C300x250%2C300x600%7C728x90%2C970x250%7C728x90&auid=551155226%2C551155227%2C551155228%2C551155229&aumfs=100%2C100%2C100%2C100&dddid=e4e53909-18b3-4d7b-86aa-01b42c4e09eb%2Cb2067ef9-e73a-4080-b755-7be4a2aebe6c%2C299e0385-ce14-4124-b7ca-7cb8fbe36bb2%2C32cd0fe7-0571-4015-9256-71cd5b1d3c54&divIds=openx-d5272e2a-0bc9-49bc-90af-f0e25d3695e7%2Copenx-a360aa70-c6e0-45ab-b720-8581f0c71c59%2Copenx-100cb1ed-b4df-4dce-a278-593da08de321%2Copenx-bfa872b2-6e7e-4400-b34e-d39b7946940e&be=1&bc=hb_pb_3.0.1&nocache=1672859142270&schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1&x_gdpr_f=1&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7
IP
File type JSON data\012- , ASCII text
Hash 67f5062c8fa5e580dee89c4da959fbe8
dc7e501baeee206325b0027aeac124e9c1c6c7d7
b320a5fec184fee22df3294b221b5cd30f53851a11c0df06d7515c4699a91c80
GET /w/1.0/arj?ju=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&jr=http%3A%2F%2Fmonumentfresh.com%2F&ch=UTF-8&res=1280x1024x24&ifr=true&tws=1280x939&aus=300x250%7C300x250%2C300x600%7C728x90%2C970x250%7C728x90&auid=551155226%2C551155227%2C551155228%2C551155229&aumfs=100%2C100%2C100%2C100&dddid=e4e53909-18b3-4d7b-86aa-01b42c4e09eb%2Cb2067ef9-e73a-4080-b755-7be4a2aebe6c%2C299e0385-ce14-4124-b7ca-7cb8fbe36bb2%2C32cd0fe7-0571-4015-9256-71cd5b1d3c54&divIds=openx-d5272e2a-0bc9-49bc-90af-f0e25d3695e7%2Copenx-a360aa70-c6e0-45ab-b720-8581f0c71c59%2Copenx-100cb1ed-b4df-4dce-a278-593da08de321%2Copenx-bfa872b2-6e7e-4400-b34e-d39b7946940e&be=1&bc=hb_pb_3.0.1&nocache=1672859142270&schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1&x_gdpr_f=1&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7 HTTP/1.1
Host: propermedia-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
propermedia-d.openx.net/v/1.0/avjp?ju=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&jr=http%3A%2F%2Fmonumentfresh.com%2F&ch=UTF-8&res=1280x1024x24&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=7741944b-29b4-479e-8576-2ca02950f4ab&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&nocache=1672859142304&auid=557565572&aumfs=1000&vwd=400&vht=300&vmimes=video%2Fmp4%2Capplication%2Fjavascript&openrtb=%5Bobject%20Object%5D&vos=101&schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1&x_gdpr_f=1&_pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7
200 OK 106 B URL HTTP/2 propermedia-d.openx.net/v/1.0/avjp?ju=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&jr=http%3A%2F%2Fmonumentfresh.com%2F&ch=UTF-8&res=1280x1024x24&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=7741944b-29b4-479e-8576-2ca02950f4ab&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&nocache=1672859142304&auid=557565572&aumfs=1000&vwd=400&vht=300&vmimes=video%2Fmp4%2Capplication%2Fjavascript&openrtb=%5Bobject%20Object%5D&vos=101&schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1&x_gdpr_f=1&_pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9860a6ee7110f11359ac0d654709e6d2
0070498287670571999a3fe78431495347ed9a2c
730fa1f3e8b3c4a223c4e69f4a27e690a4552f96ab97dba05b943dff44967658
GET /v/1.0/avjp?ju=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&jr=http%3A%2F%2Fmonumentfresh.com%2F&ch=UTF-8&res=1280x1024x24&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=7741944b-29b4-479e-8576-2ca02950f4ab&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&nocache=1672859142304&auid=557565572&aumfs=1000&vwd=400&vht=300&vmimes=video%2Fmp4%2Capplication%2Fjavascript&openrtb=%5Bobject%20Object%5D&vos=101&schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1&x_gdpr_f=1&_pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7 HTTP/1.1
Host: propermedia-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json
content-length: 106
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 5f3b995a2520c3a15ca2adf063737dd3
a0864e4e3dc886f702f0f2c0d406d0858b768f96
8e02b1722e62ef1296dc84188e21352941f747e5848e76f29ea3406533ae8dd9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 03 Jan 2023 19:45:27 GMT
Expires: Tue, 10 Jan 2023 19:45:26 GMT
Etag: "a0864e4e3dc886f702f0f2c0d406d0858b768f96"
Cache-Control: max-age=520173,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78463f843b2b0b61-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4f3ee704a5cd7a6e69c7fb5fbd7283a2
be50ef0da7999d632fc3d2218dfe612faa29dddc
8208ba6850f11d559d8616492481eafd0f05c39ebb4eb4379d2932ea27e49d43
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 13:42:55 GMT
Expires: Wed, 11 Jan 2023 13:42:54 GMT
Etag: "be50ef0da7999d632fc3d2218dfe612faa29dddc"
Cache-Control: max-age=584821,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78463f841ffab50c-OSL
api.rlcdn.com/api/identity/envelope?pid=72
401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=72
IP
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=72 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Wed, 04 Jan 2023 19:05:52 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 82ed6a560017a6334fa92feac38b348e
b097a7bdfa1cbb3f36f4882af6f2626707127bbe
cbddf7637b8ef46f2ff8af5205ca93c499df2661ef4877fcd23f9208b12bb8db
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 04 Jan 2023 19:05:52 GMT
Last-Modified: Wed, 04 Jan 2023 18:46:37 GMT
Server: ECS (bsa/EB18)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iBVE5u-jtK-c8OvQhB2cKPJPw6YqrxBhRQmcA118sasBkNpOyP-bZw==
Age: 1155
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 82ed6a560017a6334fa92feac38b348e
b097a7bdfa1cbb3f36f4882af6f2626707127bbe
cbddf7637b8ef46f2ff8af5205ca93c499df2661ef4877fcd23f9208b12bb8db
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123236
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b50800-1d7"
Expires: Fri, 06 Jan 2023 05:19:48 GMT
Last-Modified: Wed, 04 Jan 2023 05:00:48 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JssZ-NnRVmaPq-_p-2wDYN9UAHw527Db1W7eNR0I0BfwAhlEHrugJA==
Age: 1140
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 82ed6a560017a6334fa92feac38b348e
b097a7bdfa1cbb3f36f4882af6f2626707127bbe
cbddf7637b8ef46f2ff8af5205ca93c499df2661ef4877fcd23f9208b12bb8db
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123167
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b50800-1d7"
Expires: Fri, 06 Jan 2023 05:18:39 GMT
Last-Modified: Wed, 04 Jan 2023 05:00:48 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -Gc8RLS5WsbqiXhPHfmm8-rD2Q7c40cQuXuEhAia7Wla5oosFMGKbg==
Age: 1071
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 82ed6a560017a6334fa92feac38b348e
b097a7bdfa1cbb3f36f4882af6f2626707127bbe
cbddf7637b8ef46f2ff8af5205ca93c499df2661ef4877fcd23f9208b12bb8db
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123260
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b50800-1d7"
Expires: Fri, 06 Jan 2023 05:20:12 GMT
Last-Modified: Wed, 04 Jan 2023 05:00:48 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2RYZhBN2P3j-JTmxzci4uDMc6f-YM2Adq8uscYD-7jXDaMAZN5ATRw==
Age: 1164
ocsp.digicert.com/
200 OK 471 B IP
Hash f912ee4165d3a5120f9125d0c3d48513
39734d038a7990b35b5699d2a6754f3d9550c743
a35579c6f204715c3f05cd1e4e2e13f8f77e74fe88a1f0d175b722be5bbb7409
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6422
Cache-Control: max-age=114485
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b4d12f-1d7"
Expires: Fri, 06 Jan 2023 02:53:57 GMT
Last-Modified: Wed, 04 Jan 2023 01:06:55 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/ut/v3/prebid
200 OK 460 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with very long lines (460), with no line terminators
Hash 67287a38aec1024011c5e12d9f3d79a1
e7012ae3ff747b2c0c567f11cca22cc68231779e
a586e0220eb3938f414b35696c5697aace61c354a803eae70244cf286bade23c
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1925
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 460
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://rentalassistance.net
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 9469d6af-240e-4e8a-bb05-c88fbca441bb
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.sectigo.com/
200 OK 472 B IP
Hash ddaf22ee64c21b84ac23a414dcbbd95c
3ddd55e64ad3df0e60ed5f0d34aa3b46c23f4bf1
3c17a8689d6568bca44dbe5d22470b162e57c9a911f19fc85b677431b141f252
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 01:57:09 GMT
Expires: Wed, 11 Jan 2023 01:57:08 GMT
Etag: "3ddd55e64ad3df0e60ed5f0d34aa3b46c23f4bf1"
Cache-Control: max-age=542475,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78463f85a9feb50c-OSL
ap.lijit.com/rtb/bid?src=prebid_prebid_7.22.0
200 OK 111 B URL HTTP/1.1 ap.lijit.com/rtb/bid?src=prebid_prebid_7.22.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e636c80d535a242be2b312dbbf3233c7
0475d8125e4fd222e8e7832b9b6633b0c1387d2d
7d0ccedae6c5a231dfb680e9b946c82ecee14bbd8811ed323a522fda45d8567d
POST /rtb/bid?src=prebid_prebid_7.22.0 HTTP/1.1
Host: ap.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1228
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/json
Access-Control-Allow-Origin: https://rentalassistance.net
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
Content-Length: 111
X-Sovrn-Pod: ad_ap5ams1
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 84f70462d2e67789693bf467e7a498ca
3b40c79261279dde337712f45e726a566c30da25
5b6c8ed388311afcf4146f9e2a716c1b9b9a618b18034b90a39df1a1c20cecf4
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 04 Jan 2023 09:25:09 GMT
Expires: Thu, 05 Jan 2023 09:25:09 GMT
ETag: "3b40c79261279dde337712f45e726a566c30da25"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
btlr.sharethrough.com/WYu2BXv1/v1?placement_key=D141rnMrVQRnCJedyXQM2uPn&bidId=D141rnMrVQRnCJedyXQM2uPn&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/WYu2BXv1/v1?placement_key=D141rnMrVQRnCJedyXQM2uPn&bidId=D141rnMrVQRnCJedyXQM2uPn&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WYu2BXv1/v1?placement_key=D141rnMrVQRnCJedyXQM2uPn&bidId=D141rnMrVQRnCJedyXQM2uPn&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 04 Jan 2023 19:05:52 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
btlr.sharethrough.com/WYu2BXv1/v1?placement_key=7kdM3uMeWgVZIwgabYU7omN8&bidId=7kdM3uMeWgVZIwgabYU7omN8&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/WYu2BXv1/v1?placement_key=7kdM3uMeWgVZIwgabYU7omN8&bidId=7kdM3uMeWgVZIwgabYU7omN8&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WYu2BXv1/v1?placement_key=7kdM3uMeWgVZIwgabYU7omN8&bidId=7kdM3uMeWgVZIwgabYU7omN8&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 04 Jan 2023 19:05:52 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
btlr.sharethrough.com/WYu2BXv1/v1?placement_key=wUMn8pdGCGLst9TVneMmdyzA&bidId=wUMn8pdGCGLst9TVneMmdyzA&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/WYu2BXv1/v1?placement_key=wUMn8pdGCGLst9TVneMmdyzA&bidId=wUMn8pdGCGLst9TVneMmdyzA&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WYu2BXv1/v1?placement_key=wUMn8pdGCGLst9TVneMmdyzA&bidId=wUMn8pdGCGLst9TVneMmdyzA&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 04 Jan 2023 19:05:52 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9b4afbe1a253a50cf5671f87b4a1da68
326bd9ac038df27358cdb3151a75954a117de52d
b94ea0d32f7bffc4a694195a3f2737334ead6f3f1500c610ea0e89e1ef326aab
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117607
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b4dded-1d7"
Expires: Fri, 06 Jan 2023 03:45:59 GMT
Last-Modified: Wed, 04 Jan 2023 02:01:17 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -Efxmv32e65YQAbTGqUQUAXzQlSvejQOwSQZqApn3cLJ8YLNjMqGhQ==
Age: 6282
tag.1rx.io/rmp/249570/0/mvo?z=1r&hbv=7.22,2.1
204 No Content 0 B URL HTTP/2 tag.1rx.io/rmp/249570/0/mvo?z=1r&hbv=7.22,2.1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rmp/249570/0/mvo?z=1r&hbv=7.22,2.1 HTTP/1.1
Host: tag.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 999
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 04 Jan 2023 19:05:52 GMT
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4109b7cdb878d878c140f3afaf2b8b4b
210899750060b95f25131d900a0673558da8a926
794b9fc9132abe1a02f6aec3e5af901494039d71fb9c4fa3bb2a365aaf347840
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1944
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:52 GMT
Last-Modified: Wed, 04 Jan 2023 18:33:28 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 84f70462d2e67789693bf467e7a498ca
3b40c79261279dde337712f45e726a566c30da25
5b6c8ed388311afcf4146f9e2a716c1b9b9a618b18034b90a39df1a1c20cecf4
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 04 Jan 2023 09:25:09 GMT
Expires: Thu, 05 Jan 2023 09:25:09 GMT
ETag: "3b40c79261279dde337712f45e726a566c30da25"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
c.disquscdn.com/next/embed/lounge.load.82a72a26efe6cf449a682219560463fd.js
200 OK 495 B URL HTTP/2 c.disquscdn.com/next/embed/lounge.load.82a72a26efe6cf449a682219560463fd.js
IP
File type ASCII text, with very long lines (958), with no line terminators
Hash 995d93fd616b8f87049eae842800c655
1888b68a704e74fcc2b1ab942425789ab11d3221
9f9192f35ce9bb59b9529b233ace4d1bcb916ae2d8fb7d37616bb50b1b0c645f
GET /next/embed/lounge.load.82a72a26efe6cf449a682219560463fd.js HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://disqus.com
Connection: keep-alive
Referer: https://disqus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 495
date: Thu, 22 Dec 2022 23:34:24 GMT
server: nginx
last-modified: Thu, 22 Dec 2022 23:22:39 GMT
etag: "63a4e6bf-1ef"
content-encoding: gzip
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Fri, 22 Dec 2023 23:34:24 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q6olHaDsOJ31X85h-sndC5cErdp63Mgg_uMsxM8pq_y5TFQ8egiLRA==
age: 1107088
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://rentalassistance.net/
Origin: https://rentalassistance.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://rentalassistance.net
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 87713983e4ddab5908b394b13e738c33
0272fc0944a45436a634f1a173b03fc9c18f11c2
68f72350d1a07de9439755b506916961376a148350397bcd0bd2d170a354723d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152056
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b5789e-1d7"
Expires: Fri, 06 Jan 2023 13:20:08 GMT
Last-Modified: Wed, 04 Jan 2023 13:01:18 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lMiZOLbek6s1iI4MfyqPXIz5c5uds_ePcGmbeHF6CgimCw1-As7N6w==
Age: 1130
apex.go.sonobi.com/trinity.json?key_maker=%7B%229a2fd51f37aeb9dcaf96%22%3A%229a2fd51f37aeb9dcaf96%7C%7C1%22%7D&ref=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&s=abce8983-882e-48b4-971a-f5d14feb656b&pv=b5fb1020-fd5d-4d29-8183-92c7434b881d&vp=desktop&lib_name=prebid&lib_v=7.22.0&us=1&ius=1&userid=%7B%22pubcid%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%2C%22atype%22%3A1%7D%5D%7D%5D&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
200 OK 125 B URL HTTP/1.1 apex.go.sonobi.com/trinity.json?key_maker=%7B%229a2fd51f37aeb9dcaf96%22%3A%229a2fd51f37aeb9dcaf96%7C%7C1%22%7D&ref=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&s=abce8983-882e-48b4-971a-f5d14feb656b&pv=b5fb1020-fd5d-4d29-8183-92c7434b881d&vp=desktop&lib_name=prebid&lib_v=7.22.0&us=1&ius=1&userid=%7B%22pubcid%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%2C%22atype%22%3A1%7D%5D%7D%5D&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
IP
File type JSON data\012- , ASCII text
Hash c9a4a615c59ea96559a44c29eb5a645c
98cb683b1a9292cf170d593b228c723be2939a29
473ed12e0d1a129f6de917a48cfdf8a4e97bb169d39403b92d02221662739bfe
GET /trinity.json?key_maker=%7B%229a2fd51f37aeb9dcaf96%22%3A%229a2fd51f37aeb9dcaf96%7C%7C1%22%7D&ref=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&s=abce8983-882e-48b4-971a-f5d14feb656b&pv=b5fb1020-fd5d-4d29-8183-92c7434b881d&vp=desktop&lib_name=prebid&lib_v=7.22.0&us=1&ius=1&userid=%7B%22pubcid%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%2C%22atype%22%3A1%7D%5D%7D%5D&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D HTTP/1.1
Host: apex.go.sonobi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/json
Content-Length: 125
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, no-store, private
P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Tcn: Choice
Vary: negotiate,Accept-Encoding
X-Go-Server: go-iad-2-5-10
X-Xss-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://rentalassistance.net
Content-Encoding: gzip
Set-Cookie: __uis=5415e8c7-91c4-4539-a173-1e8cd968e928; expires=Fri, 03 Feb 2023 19:05:52 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
_usd_rentalassistance.net=b5fb1020-fd5d-4d29-8183-92c7434b881d; expires=Thu, 05 Jan 2023 19:05:52 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
HAPLB8A=s8510|Y7XOE; path=/; domain=.go.sonobi.com; SameSite=None; secure
Server: sonobi-go
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c2c9f9ff69355350d718a05d521ec48c
671cdf3e74b8e501be38c129cedbc7e0130bfa6f
c0b1a1f1192d49d025b6e1b17a19c2dae306bff864c14d27b87f16e3f1c0b613
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171222
Date: Wed, 04 Jan 2023 19:05:52 GMT
Etag: "63b5b4f9-1d7"
Expires: Fri, 06 Jan 2023 18:39:34 GMT
Last-Modified: Wed, 04 Jan 2023 17:18:49 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IRjCliOHjBo2IDQzl4j1qYw6sO6Orppu4Q5uefZ2-nud7rizDBbtcg==
Age: 4845
btlr.sharethrough.com/WYu2BXv1/v1?placement_key=EYahFxq6IyYoxVeqhWRsSeg0&bidId=EYahFxq6IyYoxVeqhWRsSeg0&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
204 No Content 0 B URL HTTP/2 btlr.sharethrough.com/WYu2BXv1/v1?placement_key=EYahFxq6IyYoxVeqhWRsSeg0&bidId=EYahFxq6IyYoxVeqhWRsSeg0&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WYu2BXv1/v1?placement_key=EYahFxq6IyYoxVeqhWRsSeg0&bidId=EYahFxq6IyYoxVeqhWRsSeg0&bidfloor=0.1&instant_play_capable=true&hbSource=prebid&hbVersion=3.0.0&strVersion=3.2.0&shduid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D HTTP/1.1
Host: btlr.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 04 Jan 2023 19:05:52 GMT
vary: Origin
cache-control: private, no-cache, no-store, must-revalidate
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 53b3a133b4690e68b6fa1e1d26a87947
63dc143f931d20402984e9d022db7afb23863f43
9ebe0f18724c57504af17e63de3867239ad9f61f242f73950489c80d97a2a325
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5742
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:52 GMT
Last-Modified: Wed, 04 Jan 2023 17:30:10 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 472 B IP
Hash ddaf22ee64c21b84ac23a414dcbbd95c
3ddd55e64ad3df0e60ed5f0d34aa3b46c23f4bf1
3c17a8689d6568bca44dbe5d22470b162e57c9a911f19fc85b677431b141f252
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 01:57:09 GMT
Expires: Wed, 11 Jan 2023 01:57:08 GMT
Etag: "3ddd55e64ad3df0e60ed5f0d34aa3b46c23f4bf1"
Cache-Control: max-age=542475,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78463f877efa0b61-OSL
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://rentalassistance.net/
Origin: https://rentalassistance.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://rentalassistance.net
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://rentalassistance.net/
Origin: https://rentalassistance.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://rentalassistance.net
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://rentalassistance.net/
Origin: https://rentalassistance.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://rentalassistance.net
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83a4d40c66173dcd9f3591446cdd4536
8fa5ea759f32896b7f0a8e0dd4e815ec843aef97
4af5835733ef836bd7cda1121f90facc01971e54224a4c71abd71a0d49ec5483
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 03 Jan 2023 00:29:33 GMT
Expires: Tue, 10 Jan 2023 00:29:32 GMT
Etag: "8fa5ea759f32896b7f0a8e0dd4e815ec843aef97"
Cache-Control: max-age=450819,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78463f88be86b50c-OSL
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c8f6b1a14edf0f88458cd23033a37058
744dc291100a2d3356f88b782b271375be70a2ca
8f696182c4064a3df6a82ed3793bb29d0406a2ecf62605cc754a61968268aa99
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1289
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://rentalassistance.net
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
apex.go.sonobi.com/trinity.json?key_maker=%7B%221fe6e4c0d38ae6e42906%22%3A%221fe6e4c0d38ae6e42906%7C728x90%7C0.1%22%2C%22d9980647a33b8f9e7691%22%3A%22d9980647a33b8f9e7691%7C728x90%7C0.1%22%2C%2274aa1e867c1c7e1b186c%22%3A%2274aa1e867c1c7e1b186c%7C300x250%7C0.1%22%2C%22fa1e70dd29bb70af7576%22%3A%22fa1e70dd29bb70af7576%7C300x250%7C0.1%22%2C%2237ddc353a1ca6541c845%22%3A%2237ddc353a1ca6541c845%7C300x600%7C0.1%22%2C%22bb0af564f05c21b7aa0b%22%3A%22bb0af564f05c21b7aa0b%7C970x250%7C0.1%22%7D&ref=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&s=eea97500-943e-4766-a392-68ed28a25fe0&pv=4fbe46d2-713c-46e8-834d-facc98b2a63a&vp=desktop&lib_name=prebid&lib_v=7.22.0&us=1&ius=1&userid=%7B%22pubcid%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%2C%22atype%22%3A1%7D%5D%7D%5D&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
200 OK 183 B URL HTTP/1.1 apex.go.sonobi.com/trinity.json?key_maker=%7B%221fe6e4c0d38ae6e42906%22%3A%221fe6e4c0d38ae6e42906%7C728x90%7C0.1%22%2C%22d9980647a33b8f9e7691%22%3A%22d9980647a33b8f9e7691%7C728x90%7C0.1%22%2C%2274aa1e867c1c7e1b186c%22%3A%2274aa1e867c1c7e1b186c%7C300x250%7C0.1%22%2C%22fa1e70dd29bb70af7576%22%3A%22fa1e70dd29bb70af7576%7C300x250%7C0.1%22%2C%2237ddc353a1ca6541c845%22%3A%2237ddc353a1ca6541c845%7C300x600%7C0.1%22%2C%22bb0af564f05c21b7aa0b%22%3A%22bb0af564f05c21b7aa0b%7C970x250%7C0.1%22%7D&ref=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&s=eea97500-943e-4766-a392-68ed28a25fe0&pv=4fbe46d2-713c-46e8-834d-facc98b2a63a&vp=desktop&lib_name=prebid&lib_v=7.22.0&us=1&ius=1&userid=%7B%22pubcid%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%2C%22atype%22%3A1%7D%5D%7D%5D&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D
IP
File type JSON data\012- , ASCII text
Hash 2aac51b06e49c8c72257845a9b241c42
d07039ef215858fa98a2990653fc4300826425c2
ef4684fe54a6b07bcc9dfaca9227e665f6c9b53e06d5e24c70c602501957dda0
GET /trinity.json?key_maker=%7B%221fe6e4c0d38ae6e42906%22%3A%221fe6e4c0d38ae6e42906%7C728x90%7C0.1%22%2C%22d9980647a33b8f9e7691%22%3A%22d9980647a33b8f9e7691%7C728x90%7C0.1%22%2C%2274aa1e867c1c7e1b186c%22%3A%2274aa1e867c1c7e1b186c%7C300x250%7C0.1%22%2C%22fa1e70dd29bb70af7576%22%3A%22fa1e70dd29bb70af7576%7C300x250%7C0.1%22%2C%2237ddc353a1ca6541c845%22%3A%2237ddc353a1ca6541c845%7C300x600%7C0.1%22%2C%22bb0af564f05c21b7aa0b%22%3A%22bb0af564f05c21b7aa0b%7C970x250%7C0.1%22%7D&ref=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&s=eea97500-943e-4766-a392-68ed28a25fe0&pv=4fbe46d2-713c-46e8-834d-facc98b2a63a&vp=desktop&lib_name=prebid&lib_v=7.22.0&us=1&ius=1&userid=%7B%22pubcid%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%7D&eids=%5B%7B%22source%22%3A%22pubcid.org%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22aee9d039-edf4-4d97-b46b-51d77d3f58b7%22%2C%22atype%22%3A1%7D%5D%7D%5D&schain=%7B%22ver%22%3A%221.0%22%2C%22nodes%22%3A%5B%7B%22hp%22%3A1%2C%22asi%22%3A%22proper.io%22%2C%22sid%22%3A%2209995bdb-787b-11eb-8272-06ef03bc0096%22%7D%5D%2C%22complete%22%3A1%7D HTTP/1.1
Host: apex.go.sonobi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/json
Content-Length: 183
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, no-store, private
P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Tcn: Choice
Vary: negotiate,Accept-Encoding
X-Go-Server: go-iad-2-5-25
X-Xss-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://rentalassistance.net
Content-Encoding: gzip
Set-Cookie: __uis=5415e8c7-91c4-4539-a173-1e8cd968e928; expires=Fri, 03 Feb 2023 19:05:52 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
_usd_rentalassistance.net=4fbe46d2-713c-46e8-834d-facc98b2a63a; expires=Thu, 05 Jan 2023 19:05:52 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
HAPLB8A=s8525|Y7XOE; path=/; domain=.go.sonobi.com; SameSite=None; secure
Server: sonobi-go
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c8f6b1a14edf0f88458cd23033a37058
744dc291100a2d3356f88b782b271375be70a2ca
8f696182c4064a3df6a82ed3793bb29d0406a2ecf62605cc754a61968268aa99
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1307
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://rentalassistance.net
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/28HXVhFQgEk
IP
Hash 6a9747aca04b4ff106e14a6c11e7e87d
7c0d4d2b8b5c3b18cb527f4281a6719d7273b86f
6fc842f3657c449394751390542d81858b32d7e5c82715b02ce38fc0ddd4d27e
POST /s/gts1d4/28HXVhFQgEk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c8f6b1a14edf0f88458cd23033a37058
744dc291100a2d3356f88b782b271375be70a2ca
8f696182c4064a3df6a82ed3793bb29d0406a2ecf62605cc754a61968268aa99
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1290
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://rentalassistance.net
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4f3ee704a5cd7a6e69c7fb5fbd7283a2
be50ef0da7999d632fc3d2218dfe612faa29dddc
8208ba6850f11d559d8616492481eafd0f05c39ebb4eb4379d2932ea27e49d43
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 13:42:55 GMT
Expires: Wed, 11 Jan 2023 13:42:54 GMT
Etag: "be50ef0da7999d632fc3d2218dfe612faa29dddc"
Cache-Control: max-age=584821,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78463f8938da0b61-OSL
c2shb.pubgw.yahoo.com/bidRequest
200 OK 66 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c8f6b1a14edf0f88458cd23033a37058
744dc291100a2d3356f88b782b271375be70a2ca
8f696182c4064a3df6a82ed3793bb29d0406a2ecf62605cc754a61968268aa99
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1308
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json;charset=utf-8
content-length: 66
server: ATS/9.1.10.25
access-control-allow-origin: https://rentalassistance.net
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
age: 0
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/common.bundle.78f08d08ee97a04dc049cbcf3a5ec827.js
200 OK 95 kB URL HTTP/2 c.disquscdn.com/next/embed/common.bundle.78f08d08ee97a04dc049cbcf3a5ec827.js
IP
File type ASCII text, with very long lines (32023)
Hash a4a81dd6f804400073d934078a03c4f7
2746aeef92e4a7419935bf5613b94266f7149d51
be8240cb54d0c29f572bcd51dc8584c34067cbd813f5504bfe9524d190e274a5
GET /next/embed/common.bundle.78f08d08ee97a04dc049cbcf3a5ec827.js HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://disqus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 94881
date: Tue, 20 Dec 2022 22:44:28 GMT
server: nginx
last-modified: Tue, 20 Dec 2022 22:36:25 GMT
etag: "63a238e9-172a1"
content-encoding: gzip
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Wed, 20 Dec 2023 22:44:28 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ojvc3eJ5lNqTdU3PIw2DVGvX3X7MmeJy4EYWqSzA8tdP7D9M-6wIBg==
age: 1282884
X-Firefox-Spdy: h2
reachms.bfmio.com/bid.json?exchange_id=eb1985cf-693d-419b-ee26-3d1a81c96314
204 No Content 0 B URL HTTP/2 reachms.bfmio.com/bid.json?exchange_id=eb1985cf-693d-419b-ee26-3d1a81c96314
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bid.json?exchange_id=eb1985cf-693d-419b-ee26-3d1a81c96314 HTTP/1.1
Host: reachms.bfmio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 830
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 04 Jan 2023 19:05:52 GMT
access-control-allow-origin: https://rentalassistance.net
vary: Origin
access-control-allow-credentials: true
access-control-expose-headers: location
X-Firefox-Spdy: h2
tlx.3lift.com/header/auction?lib=prebid&v=7.22.0&referrer=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&tmax=550
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.22.0&referrer=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&tmax=550
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.22.0&referrer=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&tmax=550 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 546
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width,sec-ch-ua-platform,sec-ch-viewport-height,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua,sec-ch-ua-bitness,sec-ch-prefers-color-scheme,sec-ch-width,sec-ch-ect,user-agent,sec-ch-downlink,sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
tag.1rx.io/rmp/234380/0/mvo?z=1r&hbv=7.22,2.1
204 No Content 0 B URL HTTP/2 tag.1rx.io/rmp/234380/0/mvo?z=1r&hbv=7.22,2.1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rmp/234380/0/mvo?z=1r&hbv=7.22,2.1 HTTP/1.1
Host: tag.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1653
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 04 Jan 2023 19:05:52 GMT
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/styles/lounge.1bdd56d22493b91804cbc7f49fe6c365.css
200 OK 31 kB URL HTTP/2 c.disquscdn.com/next/embed/styles/lounge.1bdd56d22493b91804cbc7f49fe6c365.css
IP
File type ASCII text, with very long lines (65469)
Hash a7d74a18e8796bec42b71b8633feae68
77f7d86432c6f8c7d4ced74500d0e19c148c2197
9b0a8ce0b1349b4d5c40ac672b4d8bc3b4f90c3bfa607183e5453f973bfa7ee5
GET /next/embed/styles/lounge.1bdd56d22493b91804cbc7f49fe6c365.css HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://disqus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 30867
date: Thu, 22 Dec 2022 23:34:23 GMT
server: nginx
last-modified: Thu, 22 Dec 2022 23:22:39 GMT
etag: "63a4e6bf-7893"
content-encoding: gzip
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Fri, 22 Dec 2023 23:34:23 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VpQv7FrfuAxuZrWNdgxgB0jA3qYcOp6l6s1EAbFh42NGsLUyssUpZg==
age: 1107090
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/lounge.bundle.abd95c70c0bf2833afad839d2ac60096.js
200 OK 129 kB URL HTTP/2 c.disquscdn.com/next/embed/lounge.bundle.abd95c70c0bf2833afad839d2ac60096.js
IP
File type ASCII text, with very long lines (32018)
Size 129 kB (129104 bytes)
Hash 16d1616489838823d808b1635cfbb654
d805b6350b5770cd7856ed335f9efb7137f11828
fea1e200ccc86296f57db7c4f96807d008e4a4f52931fde2b8776a0cb7acba48
GET /next/embed/lounge.bundle.abd95c70c0bf2833afad839d2ac60096.js HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://disqus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 129104
date: Thu, 22 Dec 2022 23:34:23 GMT
server: nginx
last-modified: Thu, 22 Dec 2022 23:22:39 GMT
etag: "63a4e6bf-1f850"
content-encoding: gzip
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Fri, 22 Dec 2023 23:34:23 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FUEvezkQKi2Z5HvMZmNWwMhszIqTikDvQEzzqdymiKbHwhLIuF77PQ==
age: 1107090
X-Firefox-Spdy: h2
disqus.com/next/config.js
200 OK 17 kB URL HTTP/1.1 disqus.com/next/config.js
IP
File type ASCII text, with very long lines (16919), with no line terminators
Hash 89d6b18eee3b10caa2e8e9ecf5d0646a
5a709b4ac8d4b315cf2e5ac1e788e534a77621e7
046e7815be644e42bfefc7897cac9f306edb2861dfb27d8a155ab8b244792784
GET /next/config.js HTTP/1.1
Host: disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://disqus.com/embed/comments/?base=default&f=benefitsdepot-net&t_u=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&t_d=RentalAssistance.net&t_t=RentalAssistance.net&s_o=default
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 16919
Server: nginx
Content-Type: application/javascript; charset=UTF-8
p3p: CP="DSP IDC CUR ADM DELi STP NAV COM UNI INT PHY DEM"
Cache-Control: public, stale-while-revalidate=300, s-stalewhilerevalidate=3600, max-age=60
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Date: Wed, 04 Jan 2023 19:05:53 GMT
Age: 48
Cross-Origin-Resource-Policy: cross-origin
Strict-Transport-Security: max-age=300; includeSubdomains
ocsp.sectigo.com/
200 OK 471 B IP
Hash 83a4d40c66173dcd9f3591446cdd4536
8fa5ea759f32896b7f0a8e0dd4e815ec843aef97
4af5835733ef836bd7cda1121f90facc01971e54224a4c71abd71a0d49ec5483
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 03 Jan 2023 00:29:33 GMT
Expires: Tue, 10 Jan 2023 00:29:32 GMT
Etag: "8fa5ea759f32896b7f0a8e0dd4e815ec843aef97"
Cache-Control: max-age=450819,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78463f895f42b50c-OSL
event.trk-keingent.com/register/event_log/zngxj99zdo
200 OK 0 B URL HTTP/2 event.trk-keingent.com/register/event_log/zngxj99zdo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/zngxj99zdo HTTP/1.1
Host: event.trk-keingent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rentalassistance.net/
Origin: https://rentalassistance.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://rentalassistance.net
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z9d%2Fv0yANQQXTyu%2FkWS%2BIdCUA5KOGPQs1dF9h70Rhk3aUgaA6uLrQF1KhiQdXoYiPAWCiHZ%2BFW4m%2BPGKN6RPGyNYqHxr38PO0ZgAcXaNrVi9d4%2FwteHgraZ4fUOroL6msFiqYi%2Fwr%2B%2Fr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78463f895a7576c6-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
event.trk-keingent.com/register/event_log/zngxj99zdo
200 OK 0 B URL HTTP/2 event.trk-keingent.com/register/event_log/zngxj99zdo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/zngxj99zdo HTTP/1.1
Host: event.trk-keingent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rentalassistance.net/
Origin: https://rentalassistance.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://rentalassistance.net
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CwLiVv5oo4U8ELjUAaaK8IjnWi1I%2BANhbbtzI%2BFmHMVOBJg0a%2FOKc1T5fzYrRbJMzq4gfVGhdaXLlO%2BCl%2FQWfhK3xbEhPTHNF2%2FGYO6F%2Ba2Yq5gUHCAetFhfkaQRV%2BIHpNz%2BNRUpty8c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78463f896a8f76c6-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
usync.proper.io/v1/usersync?bidder=adaptmx&proper_uid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&uid=0865e55b-1a9f-449a-85a3-83d19c1e23c4&gdpr=&gdpr_consent=&us_privacy=
200 OK 181 B URL HTTP/2 usync.proper.io/v1/usersync?bidder=adaptmx&proper_uid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&uid=0865e55b-1a9f-449a-85a3-83d19c1e23c4&gdpr=&gdpr_consent=&us_privacy=
IP
File type ASCII text, with no line terminators
Hash d4081d44302804f44e8f48c2cae20352
516ea06d67f63604fd5926e63b07ca54a0c0864a
411baca03b51fafdc6de33f9305eccf222ad527f95ebd5615b22571fae97a3e2
GET /v1/usersync?bidder=adaptmx&proper_uid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&uid=0865e55b-1a9f-449a-85a3-83d19c1e23c4&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1
Host: usync.proper.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rentalassistance.net/
Connection: keep-alive
Cookie: __cf_bm=TMauPK13CU9XVPCqecDhmYYCCbSYscS0r8.HDCjyIpo-1672859151-0-AZQFM54W7WW45NA+8O/xP0Mcv+F9Lcjlz9XzVzaz2scGwqO9hnC8OOxmn5eYeYj+eIROcwtk7/l20a2THl0wBFl3eKrHbnqvEKa/0KdEyXVl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-type: text/javascript
content-length: 181
server: nginx/1.18.0
access-control-allow-origin: *
set-cookie: adaptmx=0865e55b-1a9f-449a-85a3-83d19c1e23c4; Max-Age=31536000; Path=/; Domain=proper.io; SameSite=None; Secure
X-Firefox-Spdy: h2
disqus.com/api/3.0/forums/details?forum=benefitsdepot-net&attach=forumFeatures&api_key=E8Uh5l5fHZ6gD8U3KycjAIAk46f68Zw7C6eW8WSjZvCLXebZ7p0r1yrYDrLilk2F
200 OK 3.0 kB URL HTTP/1.1 disqus.com/api/3.0/forums/details?forum=benefitsdepot-net&attach=forumFeatures&api_key=E8Uh5l5fHZ6gD8U3KycjAIAk46f68Zw7C6eW8WSjZvCLXebZ7p0r1yrYDrLilk2F
IP
File type JSON data\012- , ASCII text, with very long lines (3039), with no line terminators
Hash acd1033e64063134afd7b5c7dd9ff667
677e339a9ea8eab32844fe8c34510a4ec5d9663d
0ce889d5889a521ae942e2c9df9dd1de2b6eb1c57d5eb7ed67f37bbae288e50e
GET /api/3.0/forums/details?forum=benefitsdepot-net&attach=forumFeatures&api_key=E8Uh5l5fHZ6gD8U3KycjAIAk46f68Zw7C6eW8WSjZvCLXebZ7p0r1yrYDrLilk2F HTTP/1.1
Host: disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://disqus.com/embed/comments/?base=default&f=benefitsdepot-net&t_u=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&t_d=RentalAssistance.net&t_t=RentalAssistance.net&s_o=default
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 3039
Server: nginx
Content-Type: application/json
X-Frame-Options: SAMEORIGIN
p3p: CP="DSP IDC CUR ADM DELi STP NAV COM UNI INT PHY DEM"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Date: Wed, 04 Jan 2023 19:05:53 GMT
Age: 0
Vary: Origin, Cookie
Cross-Origin-Resource-Policy: cross-origin
Strict-Transport-Security: max-age=300; includeSubdomains
c.disquscdn.com/next/embed/assets/img/svg-sprite.4da5413f5086c5755b46094b813dbfcd.svg
200 OK 13 kB URL HTTP/2 c.disquscdn.com/next/embed/assets/img/svg-sprite.4da5413f5086c5755b46094b813dbfcd.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (13079), with no line terminators
Hash 4da5413f5086c5755b46094b813dbfcd
87669f231ce245cdd9b7d80ebf8194e2ae62e7b1
3270642c89180c12db93775e2a774b6dadd9bd98cffc963075c85afd2c17b6e4
GET /next/embed/assets/img/svg-sprite.4da5413f5086c5755b46094b813dbfcd.svg HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c.disquscdn.com/next/embed/styles/lounge.1bdd56d22493b91804cbc7f49fe6c365.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml; charset=utf-8
content-length: 13079
date: Fri, 04 Nov 2022 03:33:20 GMT
server: nginx
last-modified: Wed, 02 Nov 2022 16:07:12 GMT
etag: "636295b0-3317"
x-served-by: static-web-2
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sat, 04 Nov 2023 03:33:20 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BEaH8MJAzXfOrLcJDMZXuX3puxnNPHbqTtBRsAIQCU3KYbUSvYnuRw==
age: 5326353
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/assets/img/vote.db918335ef853b5fb09a9c6bb933ac5b.svg
200 OK 279 B URL HTTP/2 c.disquscdn.com/next/embed/assets/img/vote.db918335ef853b5fb09a9c6bb933ac5b.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash db918335ef853b5fb09a9c6bb933ac5b
18f65ddc4dcfa6e45c927a7e7f7bcdad04b5cbb1
3ef55a2dfb1f5a96fc821ab726854564a8106c4e503b71b1744aea108d31b54e
GET /next/embed/assets/img/vote.db918335ef853b5fb09a9c6bb933ac5b.svg HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c.disquscdn.com/next/embed/styles/lounge.1bdd56d22493b91804cbc7f49fe6c365.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml; charset=utf-8
content-length: 279
date: Wed, 16 Nov 2022 00:51:23 GMT
server: nginx
last-modified: Tue, 15 Nov 2022 17:21:48 GMT
etag: "6373caac-117"
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Thu, 16 Nov 2023 00:51:23 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RaRJ7IFwRBeOwRecAGSaiF8O0ahnXSmnxc_gLQPA5EVtEFu-lgid9g==
age: 4299270
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/assets/img/email.727e30eb9b6c1e85cb010b9c8eb04c7e.svg
200 OK 840 B URL HTTP/2 c.disquscdn.com/next/embed/assets/img/email.727e30eb9b6c1e85cb010b9c8eb04c7e.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (736)
Hash 727e30eb9b6c1e85cb010b9c8eb04c7e
5b7ed3f88c4d25d1d9e15bbd15af68daf5c573b4
0589c5845288117448d7aa710af60618b151d78efd1a2653f89a0b57f7eb3de8
GET /next/embed/assets/img/email.727e30eb9b6c1e85cb010b9c8eb04c7e.svg HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c.disquscdn.com/next/embed/styles/lounge.1bdd56d22493b91804cbc7f49fe6c365.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml; charset=utf-8
content-length: 840
date: Mon, 14 Nov 2022 05:36:22 GMT
server: nginx
last-modified: Fri, 11 Nov 2022 07:03:00 GMT
etag: "636df3a4-348"
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Tue, 14 Nov 2023 05:36:22 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZITnldCJAiSrnpPLy4GNOHoyKn_JCY9Q6PzBP6yQGAwCQnyMo6-69Q==
age: 4454971
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/assets/img/privacy.8c96be6b50de1c3fab838c5f050e0be5.svg
200 OK 1.7 kB URL HTTP/2 c.disquscdn.com/next/embed/assets/img/privacy.8c96be6b50de1c3fab838c5f050e0be5.svg
IP
File type gzip compressed data, max compression\012- data
Hash ec158dc35b7e2c0696bcbcbe2062834f
26653d81524aaf65192795aeb99b63dbc2894c06
bf7625a62c2e26777f4943a75db5167f6076e3cd009f1bbdf230bb127391452d
GET /next/embed/assets/img/privacy.8c96be6b50de1c3fab838c5f050e0be5.svg HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c.disquscdn.com/next/embed/styles/lounge.1bdd56d22493b91804cbc7f49fe6c365.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml; charset=utf-8
content-length: 891
date: Sat, 12 Nov 2022 02:28:02 GMT
server: nginx
last-modified: Fri, 11 Nov 2022 07:03:00 GMT
etag: "636df3a4-37b"
x-served-by: static-web-2
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sun, 12 Nov 2023 02:28:02 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kY-9eK9CbY89ytx8_9ah3IqO7FmYalx2ZPJa8ImC1K7vi3-oKxyy1g==
age: 4639071
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/assets/img/warning.3bc0b4bff6c268a4ceaf404014b9be42.svg
200 OK 605 B URL HTTP/2 c.disquscdn.com/next/embed/assets/img/warning.3bc0b4bff6c268a4ceaf404014b9be42.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (503)
Hash 3bc0b4bff6c268a4ceaf404014b9be42
d8f61dc82cbbd889b66505bb3e9c7711b9bb8cb5
a657bedd3bc0c106f7cfa5fe6556a0b7e175870d33bd7da9ef67ffcffbafda69
GET /next/embed/assets/img/warning.3bc0b4bff6c268a4ceaf404014b9be42.svg HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c.disquscdn.com/next/embed/styles/lounge.1bdd56d22493b91804cbc7f49fe6c365.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml; charset=utf-8
content-length: 605
date: Tue, 01 Nov 2022 01:34:48 GMT
server: nginx
last-modified: Thu, 27 Oct 2022 21:17:31 GMT
etag: "635af56b-25d"
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Wed, 01 Nov 2023 01:34:48 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 967aduqPQq8r0Uz4agKNMFyWYwg5mf7OLYeVHTkUQxUvPQPSbhN9xg==
age: 5592665
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/assets/font/icons.4cc7a703d2fdfe684151ff8ac24d45f1.woff2
200 OK 7.9 kB URL HTTP/2 c.disquscdn.com/next/embed/assets/font/icons.4cc7a703d2fdfe684151ff8ac24d45f1.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7900, version 1.0\012- data
Hash 4cc7a703d2fdfe684151ff8ac24d45f1
046adee74e5ce76db11491906a21c09399391571
f2a341fc815d45c21da726d4c843c2c5d3e1f333465347c3c75d040d556df4e5
GET /next/embed/assets/font/icons.4cc7a703d2fdfe684151ff8ac24d45f1.woff2 HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://disqus.com
Connection: keep-alive
Referer: https://c.disquscdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 7900
date: Sat, 05 Nov 2022 01:01:02 GMT
server: nginx
last-modified: Wed, 02 Nov 2022 16:07:12 GMT
etag: "636295b0-1edc"
x-served-by: static-web-2
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sun, 05 Nov 2023 01:01:02 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wwT50DBe_iY_xy4_jK8MFuG5K9Uon6oUvt3cT3mJ9AW8BlVpvN0amA==
age: 5249091
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://disqus.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Dec 2022 13:33:13 GMT
expires: Sat, 30 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
age: 451960
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://disqus.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Dec 2022 19:33:54 GMT
expires: Thu, 28 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 603119
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://disqus.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 03 Jan 2023 07:01:24 GMT
expires: Wed, 03 Jan 2024 07:01:24 GMT
cache-control: public, max-age=31536000
age: 129869
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://disqus.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Dec 2022 19:33:56 GMT
expires: Thu, 28 Dec 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 603117
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17032, version 1.0\012- data
Hash 05a47f9e469d408c629f931cd33ff8b2
823f21f7b1d456db889c3afea393f0d2b9581c38
6be97ca17228a69c406231d89c003194c3dfba7401eaa9fe9e9ed0ef1c18dc38
GET /s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://disqus.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17032
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Dec 2022 08:12:28 GMT
expires: Fri, 29 Dec 2023 08:12:28 GMT
cache-control: public, max-age=31536000
age: 557605
last-modified: Wed, 11 May 2022 19:24:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/alfie_v4.63f1ab6d6b9d5807dc0c94ef3fe0b851.js
200 OK 27 kB URL HTTP/2 c.disquscdn.com/next/embed/alfie_v4.63f1ab6d6b9d5807dc0c94ef3fe0b851.js
IP
File type ASCII text, with very long lines (32024)
Hash 0c2785ae737e4a3a6baf270c42954aaa
ba03fa7243d6e4f184c3f2f05f733f5f40b96cc3
75310b8dcb511e824684c40202fb6edb67136e7b747e2d42c71a628bce42c2f2
GET /next/embed/alfie_v4.63f1ab6d6b9d5807dc0c94ef3fe0b851.js HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 26578
date: Fri, 28 Oct 2022 16:37:58 GMT
server: nginx
last-modified: Thu, 27 Oct 2022 21:17:31 GMT
etag: "635af56b-67d2"
content-encoding: gzip
x-served-by: static-web-2
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sat, 28 Oct 2023 16:37:58 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sJgI__9lhBEqb_sBdQVkkvI5BJ4INzcp1lRNewavN1JMtRxNqDukWA==
age: 5884075
X-Firefox-Spdy: h2
c.disquscdn.com/next/embed/styles/realtime.b23ff3c36dd0169627f8e54ca1621eca.css
200 OK 244 B URL HTTP/2 c.disquscdn.com/next/embed/styles/realtime.b23ff3c36dd0169627f8e54ca1621eca.css
IP
File type ASCII text, with very long lines (337), with no line terminators
Hash f74fc76abba12fe71950760c586845c2
0e2456bb947e89d92afdde9a0f1f7043e0e0e12a
f6a934d83fa1c7116ec650c15cdd07d227fa43423024920345ac5ebf0b10532a
GET /next/embed/styles/realtime.b23ff3c36dd0169627f8e54ca1621eca.css HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 244
date: Fri, 28 Oct 2022 14:13:46 GMT
server: nginx
last-modified: Thu, 27 Oct 2022 21:17:31 GMT
etag: "635af56b-f4"
content-encoding: gzip
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sat, 28 Oct 2023 14:13:46 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mMR1kzOc-XsC9ou-8YAxWauKDV_QcOYDJtzQi3YKoflKiL4mZFUcgA==
age: 5892727
X-Firefox-Spdy: h2
event.trk-keingent.com/register/event_log/zngxj99zdo
200 OK 0 B URL HTTP/2 event.trk-keingent.com/register/event_log/zngxj99zdo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/zngxj99zdo HTTP/1.1
Host: event.trk-keingent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Origin: https://rentalassistance.net
Content-Length: 185
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://rentalassistance.net
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oLps2JVsQTbIVbAaiTkRbAcWp%2BKx8gobVGhG36aEIztLYOGxIL9Rk8KAG71Gnnc41oeV2yOc57x4AGWBZayW0GPQEDcPndgcYJ3Md8gvZfEv18UKW%2Frg8Fbznt20LTUF02EEMeb3X5dg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78463f8b8da676c6-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
event.trk-keingent.com/register/event_log/zngxj99zdo
200 OK 0 B URL HTTP/2 event.trk-keingent.com/register/event_log/zngxj99zdo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/zngxj99zdo HTTP/1.1
Host: event.trk-keingent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Origin: https://rentalassistance.net
Content-Length: 146
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://rentalassistance.net
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gepGxNsk2OYPUjYg6mcrWILrcOvjKVXckebFI%2B6OX4iva1ZdApJb3fFtMGhdZ1c3NdLMW8yNuCA2fBLFLEJQZ53zeBLMxLuxEOoyporrWDfOmRHJMyFdJSHdSVCVCB6R%2BvG7xb%2B3Tmsr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78463f8badc776c6-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
id5-sync.com/g/v2/1285.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/1285.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1ac2769f12ef5cc709c8aa136681468b
3ca0471c63615264a99cd705e2a1d1d274e5f50b
2accbdeae6b107c6a52ff4f2b913f6d5bb283a4ce2a05f3d1b4e42a6c4f027e7
POST /g/v2/1285.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 608
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Wed, 04 Jan 2023 19:05:53 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87e5f0fa537cb74d184be96698614eaa
5c40d955b71e7d8f8c98be07b4de8cb3d9796ba9
dbbcfc24f75dd651ad15efaa06dceff0bf8af21d624d7bf414d2a924def36356
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
referrer.disqus.com/juggler/event.gif?abe=0&embed_hidden=0&load_time=369&event=init_embed&thread=9520512923&forum=benefitsdepot-net&forum_id=5869869&imp=2k83kvq2v3imtt&thread_slug=rentalassistancenet_4776302&user_type=anon&referrer=https%3A%2F%2Frentalassistance.net%2F&theme=next&dnt=0&tracking_enabled=0&experiment=network_default_hidden&variant=fallthrough&service=dynamic&promoted_enabled=false&max_enabled=false
200 OK 43 B URL HTTP/1.1 referrer.disqus.com/juggler/event.gif?abe=0&embed_hidden=0&load_time=369&event=init_embed&thread=9520512923&forum=benefitsdepot-net&forum_id=5869869&imp=2k83kvq2v3imtt&thread_slug=rentalassistancenet_4776302&user_type=anon&referrer=https%3A%2F%2Frentalassistance.net%2F&theme=next&dnt=0&tracking_enabled=0&experiment=network_default_hidden&variant=fallthrough&service=dynamic&promoted_enabled=false&max_enabled=false
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /juggler/event.gif?abe=0&embed_hidden=0&load_time=369&event=init_embed&thread=9520512923&forum=benefitsdepot-net&forum_id=5869869&imp=2k83kvq2v3imtt&thread_slug=rentalassistancenet_4776302&user_type=anon&referrer=https%3A%2F%2Frentalassistance.net%2F&theme=next&dnt=0&tracking_enabled=0&experiment=network_default_hidden&variant=fallthrough&service=dynamic&promoted_enabled=false&max_enabled=false HTTP/1.1
Host: referrer.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://disqus.com/embed/comments/?base=default&f=benefitsdepot-net&t_u=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&t_d=RentalAssistance.net&t_t=RentalAssistance.net&s_o=default
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 43
Server: nginx
Content-Type: image/gif
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Date: Wed, 04 Jan 2023 19:05:53 GMT
Cross-Origin-Resource-Policy: cross-origin
ocsp.digicert.com/
200 OK 471 B IP
Hash 7af69281218303135a620552d6cb15c9
c9f1c2a4d2f74c90d6036338aaeaefd1ed05283d
dd9aeafd54d20481209b1c1de7e322a2f3ebf96eb3bf7e1f42fdf26124da0502
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3664
Cache-Control: max-age=86532
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:53 GMT
Etag: "63b46ec5-1d7"
Expires: Thu, 05 Jan 2023 19:08:05 GMT
Last-Modified: Tue, 03 Jan 2023 18:07:01 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 312 B IP
Hash 7274192cb93af161af4b2329089f72ae
e9140482ac11d4a7532105fccec983fc6f82384a
8ade2b6f2eb2f14e151442671af69434465c09fed5aa4d56731ec9d11ada7fb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6155
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:53 GMT
Last-Modified: Wed, 04 Jan 2023 17:23:18 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 312
benefitsdepot-net.disqus.com/recommendations.js
200 OK 21 kB URL HTTP/1.1 benefitsdepot-net.disqus.com/recommendations.js
IP
File type ASCII text, with very long lines (32056)
Hash 8728d4cec35ad270bc18b487b40f21ad
f7f53b40e5860a211242cccf372610e2c9a67466
9cff9f23962a1ea6c65cbb7be46b8f2576e72d5d85ed3dcf2431dd75384cc72b
GET /recommendations.js HTTP/1.1
Host: benefitsdepot-net.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 21346
Server: openresty
Content-Type: application/javascript; charset=utf-8
Cache-Control: stale-while-revalidate=60, public, stale-if-error=86400, max-age=60
X-Service: router
Content-Encoding: gzip
Date: Wed, 04 Jan 2023 19:05:53 GMT
Age: 0
Vary: Accept-Encoding, Accept, Accept-Encoding, X-Forwarded-Proto, X-Disqus-Shortname, X-Disqus-Device, X-Disqus-Experiment, X-Disqus-Is-Private, X-Disqus-Development-Base
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
trends.revcontent.com/api/delivery/?is_blocked=undefined&w=271443&width=1280&rev_allow_cookies=undefined&site_url=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&icr_url=&referer=http%3A%2F%2Fmonumentfresh.com%2F&va=0&user_uuid=undefined&time=1672859142054&up=pc&bn=firefox&bv=105&widget_width=760&style_id=0&an=false
200 OK 12 kB URL HTTP/1.1 trends.revcontent.com/api/delivery/?is_blocked=undefined&w=271443&width=1280&rev_allow_cookies=undefined&site_url=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&icr_url=&referer=http%3A%2F%2Fmonumentfresh.com%2F&va=0&user_uuid=undefined&time=1672859142054&up=pc&bn=firefox&bv=105&widget_width=760&style_id=0&an=false
IP
File type JSON data\012- , ASCII text, with very long lines (31122), with no line terminators
Hash 58c4d17dd7164e8d88f366cdbf0c3d12
3779c15b18a6d8832ef2d28f7dad5c22cd5b666a
5793b1bc6d4de8c587c619616e4e1ab9b8efcade353ba9a839ec970f2f62acae
GET /api/delivery/?is_blocked=undefined&w=271443&width=1280&rev_allow_cookies=undefined&site_url=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&icr_url=&referer=http%3A%2F%2Fmonumentfresh.com%2F&va=0&user_uuid=undefined&time=1672859142054&up=pc&bn=firefox&bv=105&widget_width=760&style_id=0&an=false HTTP/1.1
Host: trends.revcontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 04 Jan 2023 19:05:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 12290
Connection: keep-alive
X-RC-Region: eu-west-1c
access-control-allow-credentials: true
access-control-allow-origin: https://rentalassistance.net
vary: Accept-Encoding
content-encoding: gzip
Strict-Transport-Security: max-age=931536000; includeSubDomains
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (39504)
Hash cb8698a153582f110bd0c444183ec49e
c359a9d493dfb0202a7d67012df15eea902a98e0
5f89ae7d134a11e69fb30b342260249b84cd9a429510c52430945f447079bf06
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27581
date: Wed, 04 Jan 2023 19:05:53 GMT
expires: Wed, 04 Jan 2023 19:05:53 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1442 / 782 of 1000 / last-modified: 1672858128"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ce.lijit.com/merge?pid=263069&3pid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&location=https%3A%2F%2Fusync.proper.io%2Fv1%2Fusersync%3Fbidder%3Dsovrn_outstream%26proper_uid%3Daee9d039-edf4-4d97-b46b-51d77d3f58b7%26uid%3D%5BSOVRNID%5D&&callback=window.proper_faccd6a2_fe6790be_4
204 No Content 0 B URL HTTP/1.1 ce.lijit.com/merge?pid=263069&3pid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&location=https%3A%2F%2Fusync.proper.io%2Fv1%2Fusersync%3Fbidder%3Dsovrn_outstream%26proper_uid%3Daee9d039-edf4-4d97-b46b-51d77d3f58b7%26uid%3D%5BSOVRNID%5D&&callback=window.proper_faccd6a2_fe6790be_4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge?pid=263069&3pid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&location=https%3A%2F%2Fusync.proper.io%2Fv1%2Fusersync%3Fbidder%3Dsovrn_outstream%26proper_uid%3Daee9d039-edf4-4d97-b46b-51d77d3f58b7%26uid%3D%5BSOVRNID%5D&&callback=window.proper_faccd6a2_fe6790be_4 HTTP/1.1
Host: ce.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Wed, 04 Jan 2023 19:05:53 GMT
X-MERGE: GDPR Optout true
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
Expires: Fri, 20 Mar 2009 00:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap1ams1
ocsp.pki.goog/s/gts1d4/fXs_L39cqkM
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/fXs_L39cqkM
IP
Hash 328fb9ef5d685d4391e301a427694647
426497b494bade977a14afb89f4646a90b9001d3
e4250cdb5a91fa7f32ee26b910828702771381faf382f8ed40504b64a345facb
POST /s/gts1d4/fXs_L39cqkM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:53 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
realtime.services.disqus.com/ws/2/thread/9520512923?
101 Switching Protocols 0 B URL HTTP/1.1 realtime.services.disqus.com/ws/2/thread/9520512923?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws/2/thread/9520512923? HTTP/1.1
Host: realtime.services.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://disqus.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JXXvyLzbtj9rxG/2AamlEA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Wed, 04 Jan 2023 19:05:53 GMT
Content-Length: 0
Connection: upgrade
Sec-WebSocket-Extensions: permessage-deflate
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://disqus.com
Sec-WebSocket-Accept: B2bIshsj744A9iQr1LsicKmVqrY=
Upgrade: websocket
X-Served-By: realtime-5
X-Cache: MISS
X-Cache-Hits: 0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash bda7e83a395992d2925777a615f18389
14e0ada395fea258771d2c66a4dfe1d651a4eaf9
8dc2b6d8c5cd7f9fb94dca355fa910d1913020c7b3a90f2f7cf5b769d0e9476c
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 08 Jan 2023 17:40:54 GMT
ETag: "14e0ada395fea258771d2c66a4dfe1d651a4eaf9"
Last-Modified: Wed, 04 Jan 2023 17:40:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1959
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78463f8f6e0fb512-OSL
yeet.revcontent.com/yeet/events/api-errors
200 OK 0 B URL HTTP/1.1 yeet.revcontent.com/yeet/events/api-errors
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /yeet/events/api-errors HTTP/1.1
Host: yeet.revcontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rentalassistance.net/
Origin: https://rentalassistance.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 04 Jan 2023 19:05:53 GMT
Content-Length: 0
Connection: keep-alive
X-RC-Region: eu-west-1c
access-control-allow-headers: Content-Type
access-control-allow-methods: POST
access-control-allow-origin: *
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 70086feb129841fe7d240c9e4267fdb2
2d046b83f0cd0ad0aacb042ec58120cad53f0430
d9010385f52ab93e5b04c481748745bac06ddeb7e2cd4d939962cc0ce09268e8
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 04 Jan 2023 19:05:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 03 Jan 2023 22:40:23 GMT
Expires: Wed, 04 Jan 2023 22:40:23 GMT
ETag: "2d046b83f0cd0ad0aacb042ec58120cad53f0430"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87e5f0fa537cb74d184be96698614eaa
5c40d955b71e7d8f8c98be07b4de8cb3d9796ba9
dbbcfc24f75dd651ad15efaa06dceff0bf8af21d624d7bf414d2a924def36356
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 19:05:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.amazon-adsystem.com/aax2/apstag.js
200 OK 47 kB URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
Hash 7736463702a9818254f8bffc72f7957e
2afc8069b1c535631b25b593f5441b26daec60fd
b6653a43cd6ca00eedb480cfa1722d5a4fcbd2cdefea1ed3c88f035950b8a88c
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 18:13:53 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 04 Jan 2023 19:01:02 GMT
cache-control: public, max-age=3600
via: 1.1 baa5702f7bd64fcbae1e3bd950d9a244.cloudfront.net (CloudFront), 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
etag: W/"b2496fcafcf1daf6223aefe99a0cf048"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA6-C1, OSL50-P1
x-amz-cf-id: uJYchj7USOmzHLbwKFCaWrNi1QjYTrLHO7XmHkTkPEyzCQkctQBAPg==
age: 292
X-Firefox-Spdy: h2
yeet.revcontent.com/yeet/events/api-errors
200 OK 0 B URL HTTP/1.1 yeet.revcontent.com/yeet/events/api-errors
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /yeet/events/api-errors HTTP/1.1
Host: yeet.revcontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://rentalassistance.net/
Origin: https://rentalassistance.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 04 Jan 2023 19:05:53 GMT
Content-Length: 0
Connection: keep-alive
X-RC-Region: eu-west-1c
access-control-allow-headers: Content-Type
access-control-allow-methods: POST
access-control-allow-origin: *
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
200 OK 63 B URL HTTP/2 match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3b86f6f6330a46c651e4fc57ea41b497
5641c082175a99dedb619911742861cf51434739
78a720813f6b3f4d4517d5e36ba4bf237d04533a23858f0a8a40d0878f353516
GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-type: application/json; charset=utf-8
content-length: 63
cache-control: private
expires: Fri, 03 Feb 2023 19:05:53 GMT
vary: Origin
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept
x-aspnet-version: 4.0.30319
X-Firefox-Spdy: h2
yeet.revcontent.com/yeet/events/api-errors
204 No Content 0 B URL HTTP/1.1 yeet.revcontent.com/yeet/events/api-errors
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /yeet/events/api-errors HTTP/1.1
Host: yeet.revcontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://rentalassistance.net
Content-Length: 386
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Wed, 04 Jan 2023 19:05:53 GMT
Connection: keep-alive
X-RC-Region: eu-west-1c
access-control-allow-origin: *
vary: Origin
id.crwdcntrl.net/id
200 OK 43 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.29.211
access-control-allow-credentials: true
access-control-allow-origin: https://rentalassistance.net
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
200 OK 135 kB URL HTTP/2 c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
IP
File type ASCII text, with very long lines (58913)
Size 135 kB (134920 bytes)
Hash ca413535ebeb241adf66142736ea99d6
5651049465940f5fa743268c87aebe82b78688fb
4d2d46e034b4c69cfafacae57acbc575b566c1458a2d2365b4f0695c92a55bff
GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Fri, 23 Dec 2022 01:05:48 GMT
x-amz-version-id: 1R3b4YI9dI20q9Y7Gq1DHxVUnq3Fp2gn
server: AmazonS3
content-encoding: gzip
date: Wed, 04 Jan 2023 18:35:47 GMT
cache-control: public, max-age=86400
etag: W/"a4d296427fc806b21335359e398c025c"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I9TidaRs-zkSwOq8y-q3-6yVIUPnVeGcHzFWdZ6utTx63qRPy0U6rQ==
age: 1807
X-Firefox-Spdy: h2
yeet.revcontent.com/yeet/events/api-errors
204 No Content 0 B URL HTTP/1.1 yeet.revcontent.com/yeet/events/api-errors
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /yeet/events/api-errors HTTP/1.1
Host: yeet.revcontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://rentalassistance.net
Content-Length: 388
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Wed, 04 Jan 2023 19:05:53 GMT
Connection: keep-alive
X-RC-Region: eu-west-1c
access-control-allow-origin: *
vary: Origin
ocsp.sectigo.com/
200 OK 471 B IP
Hash e3a8552bf6dded0f35ab5ae1dded3184
267568dc07b7fa45103985b349cd112ac07584d0
c26d1aec3609d73f2a386508f517d23592c8ebf39ba7a77ac815e455e497d899
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 19:05:54 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 03 Jan 2023 13:56:50 GMT
Expires: Tue, 10 Jan 2023 13:56:49 GMT
Etag: "267568dc07b7fa45103985b349cd112ac07584d0"
Cache-Control: max-age=499255,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78463f8eee7a0b61-OSL
c.disquscdn.com/next/recommendations/styles/recommendations.10022a97346f1c6e3798931bbd8e4bb5.css
200 OK 3.0 kB URL HTTP/2 c.disquscdn.com/next/recommendations/styles/recommendations.10022a97346f1c6e3798931bbd8e4bb5.css
IP
File type ASCII text, with very long lines (14131), with no line terminators
Hash e469e3b929d327230768372d944c950f
a153a1db31549e58f4fb957c38f7e737075cec28
92ad1ac4b05d52f039295fc4b974be49f3ef60b8eb951bf0d2c9b87ae1898289
GET /next/recommendations/styles/recommendations.10022a97346f1c6e3798931bbd8e4bb5.css HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 2978
date: Wed, 02 Nov 2022 06:51:49 GMT
server: nginx
last-modified: Thu, 27 Oct 2022 21:17:31 GMT
etag: "635af56b-ba2"
content-encoding: gzip
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Thu, 02 Nov 2023 06:51:49 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _9GHyhTCQdxrltioM-MdjhW6KeR7IsKLdXJRyzPu1b23xkS-NZ1mvg==
age: 5487245
X-Firefox-Spdy: h2
c.disquscdn.com/next/recommendations/common.bundle.ee9c33b24a56672a5987fadb46fbba34.js
200 OK 89 kB URL HTTP/2 c.disquscdn.com/next/recommendations/common.bundle.ee9c33b24a56672a5987fadb46fbba34.js
IP
File type ASCII text, with very long lines (32023)
Hash ff1ac82265ea5b905f3bf3ec5b5c69d0
177b91ea3e9577a3e55bb05061e06fe25c4a0b5b
f37f7a146f9815317003eb2a0cbe3fe0a5e5c50ee7e35e5e87252a245bb383fa
GET /next/recommendations/common.bundle.ee9c33b24a56672a5987fadb46fbba34.js HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 88876
date: Tue, 20 Dec 2022 22:44:15 GMT
server: nginx
last-modified: Tue, 20 Dec 2022 22:36:25 GMT
etag: "63a238e9-15b2c"
content-encoding: gzip
x-served-by: static-web-2
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Wed, 20 Dec 2023 22:44:15 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kDebFsJ5MUceCO9LmmlM0rPsEJM2JJPkKS2K_ncj8hGGtqR2zDdacg==
age: 1282899
X-Firefox-Spdy: h2
c.disquscdn.com/next/recommendations/recommendations.bundle.540d77a9b22358647ed01c5c9f5cd435.js
200 OK 20 kB URL HTTP/2 c.disquscdn.com/next/recommendations/recommendations.bundle.540d77a9b22358647ed01c5c9f5cd435.js
IP
File type Unicode text, UTF-8 text, with very long lines (32078)
Hash c19200a14413f115cce0b96e6dd4e7a6
e667cb732f5c0f78b0d9464f7cb00c25f1ea8ace
1cb70e8bf5eef2f816832674fd36d3c2501c69928f935ce517b412d8c5eb6d4a
GET /next/recommendations/recommendations.bundle.540d77a9b22358647ed01c5c9f5cd435.js HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 20312
date: Tue, 06 Dec 2022 22:30:38 GMT
server: nginx
last-modified: Tue, 06 Dec 2022 22:10:19 GMT
etag: "638fbdcb-4f58"
content-encoding: gzip
x-served-by: static-web-2
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Wed, 06 Dec 2023 22:30:38 GMT
cache-control: max-age=31536000, public, immutable, no-transform
access-control-allow-origin: *
timing-allow-origin: *
surrogate-key: next
cross-origin-resource-policy: cross-origin
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: P1olhOElREv5X9GHpPFSgz5DDpHs9wpekWsJnUpENdeY8hLpBHa14g==
age: 2493316
X-Firefox-Spdy: h2
g2.gumgum.com/hbid/imp?pi=2<=1672859142281&t=fecj1xl5&fp=0.1&fpc=USD&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1%2C%2C%2C&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.22.0%22%7D&_t=Wed%20Jan%2004%202023%2019:05:42%20GMT+0000%20(Coordinated%20Universal%20Time)
200 OK 0 B URL HTTP/2 g2.gumgum.com/hbid/imp?pi=2<=1672859142281&t=fecj1xl5&fp=0.1&fpc=USD&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1%2C%2C%2C&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.22.0%22%7D&_t=Wed%20Jan%2004%202023%2019:05:42%20GMT+0000%20(Coordinated%20Universal%20Time)
IP
GET /hbid/imp?pi=2<=1672859142281&t=fecj1xl5&fp=0.1&fpc=USD&pubcid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1%2C%2C%2C&vw=1280&vh=939&sw=1280&sh=1024&pu=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&ce=true&dpr=1&jcsi=%7B%22t%22%3A0%2C%22rq%22%3A8%2C%22pbv%22%3A%227.22.0%22%7D&_t=Wed%20Jan%2004%202023%2019:05:42%20GMT+0000%20(Coordinated%20Universal%20Time) HTTP/1.1
Host: g2.gumgum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json;charset=UTF-8
server: nginx
cache-control: private, no-store, must-revalidate, max-age=0
expires: 0
pragma: no-cache
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
set-cookie: cs=true; Domain=.gumgum.com; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Path=/; Secure; SameSite=None
loc=N7qTz27lIInvAtVkW_A2n8IPDSVhUFp5ZtvvLnagCyWgO6qnhr3rsDgpAvQ4k_ILucM2xp01RC01kWvmi96IUASz3YPoPsdndUXuslWRIRkGoJVdhs0Ggw; Domain=.gumgum.com; Expires=Fri, 03-Feb-2023 19:05:52 GMT; Path=/; Secure; SameSite=None
vst=e_bd341978-8e2d-46cd-95be-424c0a5bba6e; Domain=.gumgum.com; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Path=/; Secure; SameSite=None
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-mEzuYq24VEJ-3.js
200 OK 0 B URL HTTP/2 rules.quantcount.com/rules-p-mEzuYq24VEJ-3.js
IP
GET /rules-p-mEzuYq24VEJ-3.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 04 Jan 2023 18:50:50 GMT
last-modified: Fri, 14 Oct 2022 00:52:56 GMT
etag: W/"bc35b7c476efec25f5c48ba8fb7b9906"
x-amz-server-side-encryption: AES256
cache-control: max-age=3600
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Xa2hwT0mkOXIPDGufQ3XRfaBXXy-w4n3uoQl8PHMRK-8_1SEbqWyhQ==
age: 905
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Frentalassistance.net%2F&domain=rentalassistance.net&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Frentalassistance.net%2F&domain=rentalassistance.net&cw=1&lsw=1
IP
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Frentalassistance.net%2F&domain=rentalassistance.net&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://rentalassistance.net/
Origin: https://rentalassistance.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://rentalassistance.net
server-processing-duration-in-ticks: 438422
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
global.proper.io/payloads/latest.js
200 OK 0 B URL HTTP/2 global.proper.io/payloads/latest.js
IP
GET /payloads/latest.js HTTP/1.1
Host: global.proper.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Cookie: __cf_bm=TMauPK13CU9XVPCqecDhmYYCCbSYscS0r8.HDCjyIpo-1672859151-0-AZQFM54W7WW45NA+8O/xP0Mcv+F9Lcjlz9XzVzaz2scGwqO9hnC8OOxmn5eYeYj+eIROcwtk7/l20a2THl0wBFl3eKrHbnqvEKa/0KdEyXVl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:51 GMT
content-type: application/javascript
cf-ray: 78463f821ccb0afa-OSL
access-control-allow-origin: *
age: 3717504
cache-control: public, max-age=300
etag: W/"637d024b-8a3ec"
expires: Wed, 04 Jan 2023 19:10:51 GMT
last-modified: Tue, 22 Nov 2022 17:09:31 GMT
vary: Accept-Encoding
cf-cache-status: HIT
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ssc.33across.com/api/v1/hb
200 OK 0 B URL HTTP/2 ssc.33across.com/api/v1/hb
IP
POST /api/v1/hb HTTP/1.1
Host: ssc.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 717
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Accept-Encoding, Origin
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://rentalassistance.net
date: Wed, 04 Jan 2023 19:05:52 GMT
x-powered-by: 33Across
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ssc.33across.com/api/v1/hb
200 OK 0 B URL HTTP/2 ssc.33across.com/api/v1/hb
IP
POST /api/v1/hb HTTP/1.1
Host: ssc.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 716
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Accept-Encoding, Origin
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://rentalassistance.net
date: Wed, 04 Jan 2023 19:05:52 GMT
x-powered-by: 33Across
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.130.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.130.js
IP
GET /js/ld/publishertag.prebid.130.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:53 GMT
content-type: text/javascript
last-modified: Sat, 17 Sep 2022 19:59:55 GMT
etag: W/"6326273b-16120"
expires: Thu, 05 Jan 2023 19:05:53 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Frentalassistance.net%2F&domain=rentalassistance.net&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Frentalassistance.net%2F&domain=rentalassistance.net&cw=1&lsw=1
IP
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Frentalassistance.net%2F&domain=rentalassistance.net&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://rentalassistance.net
server-processing-duration-in-ticks: 875286
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 0 B URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 03 Jan 2023 22:35:23 GMT
expires: Wed, 03 Jan 2024 22:35:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 73827
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssc.33across.com/api/v1/hb
200 OK 0 B URL HTTP/2 ssc.33across.com/api/v1/hb
IP
POST /api/v1/hb HTTP/1.1
Host: ssc.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 664
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Accept-Encoding, Origin
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://rentalassistance.net
date: Wed, 04 Jan 2023 19:05:52 GMT
x-powered-by: 33Across
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=8777&site_id=428040&zone_id=2448950&size_id=2%3B2%3B15%3B15&alt_size_ids=57%3B%3B%3B10&rp_floor=0.1&rp_secure=1&tk_flint=pbjs_lite_v3.2.0&x_source.tid=aeb29961-cc8e-4a12-9f4c-7894ab2705f6%3B0cbeb3ad-1b9f-41a5-8463-6b1837998177%3B12ca492d-c7c1-4a35-9caf-58eed92e4ca7%3B5fd25f68-2f5a-445e-bc9d-fbdaef85c406&p_screen_res=1268x939&tg_fl.eid=2448950-3%3B2448950-4%3B2448950-1%3B2448950-2&rf=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&x_source.pchain=proper.io%3A09995bdb-787b-11eb-8272-06ef03bc0096&ppuid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&eid_pubcid.org=aee9d039-edf4-4d97-b46b-51d77d3f58b7%5E1&rp_schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1&slots=4&rand=0.3867200221133339
200 OK 0 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=8777&site_id=428040&zone_id=2448950&size_id=2%3B2%3B15%3B15&alt_size_ids=57%3B%3B%3B10&rp_floor=0.1&rp_secure=1&tk_flint=pbjs_lite_v3.2.0&x_source.tid=aeb29961-cc8e-4a12-9f4c-7894ab2705f6%3B0cbeb3ad-1b9f-41a5-8463-6b1837998177%3B12ca492d-c7c1-4a35-9caf-58eed92e4ca7%3B5fd25f68-2f5a-445e-bc9d-fbdaef85c406&p_screen_res=1268x939&tg_fl.eid=2448950-3%3B2448950-4%3B2448950-1%3B2448950-2&rf=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&x_source.pchain=proper.io%3A09995bdb-787b-11eb-8272-06ef03bc0096&ppuid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&eid_pubcid.org=aee9d039-edf4-4d97-b46b-51d77d3f58b7%5E1&rp_schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1&slots=4&rand=0.3867200221133339
IP
GET /a/api/fastlane.json?account_id=8777&site_id=428040&zone_id=2448950&size_id=2%3B2%3B15%3B15&alt_size_ids=57%3B%3B%3B10&rp_floor=0.1&rp_secure=1&tk_flint=pbjs_lite_v3.2.0&x_source.tid=aeb29961-cc8e-4a12-9f4c-7894ab2705f6%3B0cbeb3ad-1b9f-41a5-8463-6b1837998177%3B12ca492d-c7c1-4a35-9caf-58eed92e4ca7%3B5fd25f68-2f5a-445e-bc9d-fbdaef85c406&p_screen_res=1268x939&tg_fl.eid=2448950-3%3B2448950-4%3B2448950-1%3B2448950-2&rf=https%3A%2F%2Frentalassistance.net%2Fview_article.php%3Fid%3D3502%26sub1%3D204003%26sub2%3D0ac1698a73897d53d69504522f449477%26affiliate_id%3D14%26transaction_id%3D3626283ce8c94fafa9032b89b8266726%26ft%3D1%26firstname%3D%26lastname%3D%26phone1%3D13134048290%26email%3De64a2ca723%2540emailkom.live&x_source.pchain=proper.io%3A09995bdb-787b-11eb-8272-06ef03bc0096&ppuid=aee9d039-edf4-4d97-b46b-51d77d3f58b7&eid_pubcid.org=aee9d039-edf4-4d97-b46b-51d77d3f58b7%5E1&rp_schain=1.0%2C1!proper.io%2C09995bdb-787b-11eb-8272-06ef03bc0096%2C1&slots=4&rand=0.3867200221133339 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://rentalassistance.net
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LCI15B6G-Y-LQT; Domain=.rubiconproject.com; Path=/; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qr7liSL85ITle9DtVM30fCgZvcVxxp7UIOpZSwGmCOThNZLRubiKFbmMxZnE/ATUkRN+011ZXQExwHEE8jtDwI50A+VO7RH1E0=; Domain=.rubiconproject.com; Path=/; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Max-Age=31536000; SameSite=None; Secure
khaos=LCI15B6G-Y-LQT; Domain=.rubiconproject.com; Path=/; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qr7liSL85ITle9DtVM30fCgZvcVxxp7UIOpZSwGmCOThNZLRubiKFbmMxZnE/ATUkRN+011ZXQExwHEE8jtDwI50A+VO7RH1E0=; Domain=.rubiconproject.com; Path=/; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Max-Age=31536000; SameSite=None; Secure
khaos=LCI15B6G-Y-LQT; Domain=.rubiconproject.com; Path=/; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qr7liSL85ITle9DtVM30fCgZvcVxxp7UIOpZSwGmCOThNZLRubiKFbmMxZnE/ATUkRN+011ZXQExwHEE8jtDwI50A+VO7RH1E0=; Domain=.rubiconproject.com; Path=/; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Max-Age=31536000; SameSite=None; Secure
khaos=LCI15B6G-Y-LQT; Domain=.rubiconproject.com; Path=/; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qr7liSL85ITle9DtVM30fCgZvcVxxp7UIOpZSwGmCOThNZLRubiKFbmMxZnE/ATUkRN+011ZXQExwHEE8jtDwI50A+VO7RH1E0=; Domain=.rubiconproject.com; Path=/; Expires=Thu, 04-Jan-2024 19:05:52 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
X-Firefox-Spdy: h2
eb.proper.io/s2s
200 OK 0 B IP
POST /s2s HTTP/1.1
Host: eb.proper.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2071
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Cookie: __cf_bm=TMauPK13CU9XVPCqecDhmYYCCbSYscS0r8.HDCjyIpo-1672859151-0-AZQFM54W7WW45NA+8O/xP0Mcv+F9Lcjlz9XzVzaz2scGwqO9hnC8OOxmn5eYeYj+eIROcwtk7/l20a2THl0wBFl3eKrHbnqvEKa/0KdEyXVl
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-type: application/json
access-control-allow-origin: https://rentalassistance.net
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
set-cookie: __cf_bm=TMauPK13CU9XVPCqecDhmYYCCbSYscS0r8.HDCjyIpo-1672859151-0-AZQFM54W7WW45NA%2B8O%2FxP0Mcv%2BF9Lcjlz9XzVzaz2scGwqO9hnC8OOxmn5eYeYj%2BeIROcwtk7%2Fl20a2THl0wBFl3eKrHbnqvEKa%2F0KdEyXVl; Max-Age=5184000; Path=/; Domain=.proper.io; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
server-timing: dur:307
vary: Accept-Encoding
server: cloudflare
cf-ray: 78463f8a0b7f0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:53 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "WQX8ubvDGl3DCUDHzxu0sA=="
expires: Wed, 11 Jan 2023 19:05:53 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
script.anura.io/request.js?instance=56309078&source=204003&campaign=28444&exid=0ac1698a73897d53d69504522f449477&383267250028
200 OK 0 B URL HTTP/2 script.anura.io/request.js?instance=56309078&source=204003&campaign=28444&exid=0ac1698a73897d53d69504522f449477&383267250028
IP
GET /request.js?instance=56309078&source=204003&campaign=28444&exid=0ac1698a73897d53d69504522f449477&383267250028 HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://monumentfresh.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:48 GMT
content-type: application/javascript; charset=utf-8
server: nginx
vary: Accept-Encoding
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
prebid.media.net/rtb/prebid?cid=8CUW4K2MG
200 OK 0 B URL HTTP/2 prebid.media.net/rtb/prebid?cid=8CUW4K2MG
IP
POST /rtb/prebid?cid=8CUW4K2MG HTTP/1.1
Host: prebid.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1168
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/json;charset=UTF-8
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model
expires: Wed, 04 Jan 2023 19:05:52 GMT
access-control-allow-origin: https://rentalassistance.net
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Quicksand:wght@300;500;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Quicksand:wght@300;500;700&display=swap
IP
GET /css2?family=Quicksand:wght@300;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 04 Jan 2023 19:05:50 GMT
date: Wed, 04 Jan 2023 19:05:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
global.proper.io/rentalassistance.min.js
200 OK 0 B URL HTTP/2 global.proper.io/rentalassistance.min.js
IP
GET /rentalassistance.min.js HTTP/1.1
Host: global.proper.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:51 GMT
content-type: application/javascript
cf-ray: 78463f7bffe10afa-OSL
access-control-allow-origin: *
cache-control: public, max-age=300
etag: W/"63449077-5744"
expires: Wed, 04 Jan 2023 19:10:51 GMT
last-modified: Mon, 10 Oct 2022 21:36:55 GMT
vary: Accept-Encoding
cf-cache-status: MISS
set-cookie: __cf_bm=TMauPK13CU9XVPCqecDhmYYCCbSYscS0r8.HDCjyIpo-1672859151-0-AZQFM54W7WW45NA+8O/xP0Mcv+F9Lcjlz9XzVzaz2scGwqO9hnC8OOxmn5eYeYj+eIROcwtk7/l20a2THl0wBFl3eKrHbnqvEKa/0KdEyXVl; path=/; expires=Wed, 04-Jan-23 19:35:51 GMT; domain=.proper.io; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ssc.33across.com/api/v1/hb
200 OK 0 B URL HTTP/2 ssc.33across.com/api/v1/hb
IP
POST /api/v1/hb HTTP/1.1
Host: ssc.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 665
Origin: https://rentalassistance.net
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
vary: Accept-Encoding, Origin
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://rentalassistance.net
date: Wed, 04 Jan 2023 19:05:52 GMT
x-powered-by: 33Across
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
script.anura.io/response.json
200 OK 0 B URL HTTP/2 script.anura.io/response.json
IP
POST /response.json HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 3602
Origin: http://monumentfresh.com
Connection: keep-alive
Referer: http://monumentfresh.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:49 GMT
content-type: application/json; charset=utf-8
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: POST
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
player.propervideo.io/new_rtp/main.js
200 OK 0 B URL HTTP/2 player.propervideo.io/new_rtp/main.js
IP
GET /new_rtp/main.js HTTP/1.1
Host: player.propervideo.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rentalassistance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 19:05:52 GMT
content-type: application/javascript
cache-control: public, max-age=300
cf-bgj: minify
cf-polished: origSize=191588
etag: W/"63af1641-2ec64"
expires: Wed, 04 Jan 2023 19:10:52 GMT
last-modified: Fri, 30 Dec 2022 16:48:01 GMT
cf-cache-status: HIT
age: 440239
vary: Accept-Encoding
server: cloudflare
cf-ray: 78463f84aafab4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
35.223.205.116
52.56.141.12
104.17.24.14
52.28.102.97
178.250.2.131
23.36.76.226
72.251.249.14
52.50.45.218