1rto.info/b/8ut:38YAp
35.223.205.116308 Permanent Redirect 164 B IP 35.223.205.116:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f23c4815ecaef1588f16ac735c0e15d6
026bf8cdd5076014b6fc822878e0086eb44da556
43a81fb3d47b34e7d42d6b8444f592ed9251b8e57db8f67d32419aa40b1480d0
Analyzer Verdict Alert fortinet Phishing
GET /b/8ut:38YAp HTTP/1.1
Host: 1rto.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 308 Permanent Redirect
Date: Wed, 30 Nov 2022 00:20:48 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://1rto.info/b/8ut:38YAp
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4673
Expires: Wed, 30 Nov 2022 01:38:41 GMT
Date: Wed, 30 Nov 2022 00:20:48 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 55 B IP 93.184.220.29:0
File type HTML document, ASCII text
Hash 9f073354411bbaf7a319b1519f10b4b7
571498f38548829bf186f49f5be9d5fa6e689a68
4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6295
Cache-Control: public, max-age=1209600
Content-Type: text/html
Date: Wed, 30 Nov 2022 00:20:48 GMT
Etag: "63866b9a-37"
Last-Modified: Tue, 29 Nov 2022 20:29:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 55
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12574
Expires: Wed, 30 Nov 2022 03:50:22 GMT
Date: Wed, 30 Nov 2022 00:20:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 00:17:56 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 172
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: uSyykEAJQGM4ZtQaReoZsApxFWu4K9AE21BpV0O1nCuAhWUx6/f0kPAChMxoXwQxw6ZBUuvgjAc=
x-amz-request-id: FQCVRHS12F2CAD8T
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 23:45:39 GMT
age: 2110
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 00:20:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2751d6de848197fe4dee729c6856bdf3
a87465dee9961c27d2da5005e32918484cb13ba2
0987ae93ff2a8e5efc26ff2d881a047607c10de47ba42b8149033cd7c445d49e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0987AE93FF2A8E5EFC26FF2D881A047607C10DE47BA42B8149033CD7C445D49E"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21596
Expires: Wed, 30 Nov 2022 06:20:45 GMT
Date: Wed, 30 Nov 2022 00:20:49 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 00:11:13 GMT
cache-control: public,max-age=3600
age: 576
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
1rto.info/b/8ut:38YAp
35.223.205.116302 Found 0 B IP 35.223.205.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /b/8ut:38YAp HTTP/1.1
Host: 1rto.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Wed, 30 Nov 2022 00:20:49 GMT
content-type: text/html;charset=utf-8
content-length: 0
location: https://hittrc.com/?c=18961&first=Tobi&last=Kerns&email=kernstobitobinr@gmail.com&phone=17653500478&zip=47933&l=&sc=
pragma: No-cache
cache-control: no-cache
expires: Wed, 31 Dec 1969 19:00:00 EST
x-powered-by: Servlet 2.4; JBoss-4.0.5.GA (build: CVSTag=Branch_4_0 date=200610162339)/Tomcat-5.5
set-cookie: lime_stickounet=1669767650.415.14193.14142|df0a8dab38a876270b89e74b0d8ae3d7; Expires=Fri, 02-Dec-22 00:20:49 GMT; Max-Age=172800; Path=/; Secure; HttpOnly
JSESSIONID=E6215B6A4A298D88F9FA4F0390563644; Path=/
LimeCellular_MOBILE=17653500478; Expires=Thu, 30-Nov-2023 00:20:49 GMT
x-ua-compatible: IE=6
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4091
Cache-Control: public, max-age=1209600
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:49 GMT
Etag: "63866bad-37"
Last-Modified: Tue, 29 Nov 2022 20:29:33 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 55 B IP 93.184.220.29:0
File type HTML document, ASCII text
Hash 9f073354411bbaf7a319b1519f10b4b7
571498f38548829bf186f49f5be9d5fa6e689a68
4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=1209600
Content-Type: text/html
Date: Wed, 30 Nov 2022 00:20:49 GMT
Etag: "638650c5-37"
Last-Modified: Tue, 29 Nov 2022 18:34:45 GMT
Server: nginx
Content-Length: 55
push.services.mozilla.com/
35.163.49.154101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.163.49.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: H0CzPGw7/C5QdQFV2w1CrA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eb7UFsjNG3UGkX2W9s8vpb1l2ug=
ocsp.digicert.com/
93.184.220.29200 OK 55 B IP 93.184.220.29:0
File type HTML document, ASCII text
Hash 9f073354411bbaf7a319b1519f10b4b7
571498f38548829bf186f49f5be9d5fa6e689a68
4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: public, max-age=1209600
Content-Type: text/html
Date: Wed, 30 Nov 2022 00:20:50 GMT
Etag: "638650c5-37"
Last-Modified: Tue, 29 Nov 2022 18:34:45 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 55
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash ca45bab651db6df9727d5eecd47db96c
f9ca676ccfe142c4e1be7f788a6831724a07469c
a0f7fa229605dff9eb1bddf5ff81340645a64c93cf486cc63ac306bf692d15db
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148185
Date: Wed, 30 Nov 2022 00:20:50 GMT
Etag: "638641bb-1d7"
Expires: Thu, 01 Dec 2022 17:30:35 GMT
Last-Modified: Tue, 29 Nov 2022 17:30:35 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: G2AmcLCGz5vbjitvmfhbE8uDLlZ2VxGnxXgOwtJGJ53HTVcHr20MWg==
www.brmclick.com/aff_c?offer_id=422&aff_id=8&aff_sub=SMS&aff_sub2=309096486&first=Tobi&last=Kerns&email=kernstobitobinr@gmail.com&phone=17653500478&zip=47933
63.34.19.61302 Found 478 B URL HTTP/1.1 www.brmclick.com/aff_c?offer_id=422&aff_id=8&aff_sub=SMS&aff_sub2=309096486&first=Tobi&last=Kerns&email=kernstobitobinr@gmail.com&phone=17653500478&zip=47933
IP 63.34.19.61:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (344)
Hash caf2cb45f2d15d9cea2a7ba2a4ed5110
7bfb1aeb863514185ff6e473f4042831fd1149bf
8941490ea326be1d18f95d554917f4cc62820bbb8d8de7c085aab380313c06cc
GET /aff_c?offer_id=422&aff_id=8&aff_sub=SMS&aff_sub2=309096486&first=Tobi&last=Kerns&email=kernstobitobinr@gmail.com&phone=17653500478&zip=47933 HTTP/1.1
Host: www.brmclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 30 Nov 2022 00:20:51 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 478
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://signup.resources4relief.com/lp#/sh/5e61963f69696552bca63ac5?sr=8&s1=10239e7dc9cd4ac8ca277af8347e59&s2=SMS&s3=&jp=3&fn=Tobi&ln=Kerns&em=kernstobitobinr@gmail.com&z=47933&utm_source=r4m_8_5e61963f69696552bca63ac5&utm_medium=cpa&utm_campaign=422
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_422=ENC03e05ba1de315a22bb5004e667295f0949c11f5243e97f0bf0da0fd8772b3f08955f8814b1e2cc3a62222c399df7ebbb9db066d3f27e7857fb46e9065c0538d5c75d78aa7a81e12a243fc0a4b922dcc5b8c6919af006f8354c5a0ea33e3130b6379d8a13780049af3831be57099eb7a21d8d4079048ba38d815bcf7b31b929e0e02366d987; expires=Thu, 01 Dec 2022 00:20:51 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Fri, 24 Oct 2025 11:00:51 GMT; path=/; SameSite=None; Secure
Tracking_id: 10239e7dc9cd4ac8ca277af8347e59
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: e4aacca426a6924ab2cea449cad5b65d
Access-Control-Allow-Headers: Tune-SDK-Version
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9567
Expires: Wed, 30 Nov 2022 03:00:18 GMT
Date: Wed, 30 Nov 2022 00:20:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9567
Expires: Wed, 30 Nov 2022 03:00:18 GMT
Date: Wed, 30 Nov 2022 00:20:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9567
Expires: Wed, 30 Nov 2022 03:00:18 GMT
Date: Wed, 30 Nov 2022 00:20:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bbe350ea797a0fec5a19a450fc5de4b4
2f3a39a528d3b759060203931de33c12303592e1
4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:00:54 GMT
age: 8397
etag: "2f3a39a528d3b759060203931de33c12303592e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8af12b89-c1a0-4a2a-aa29-cd6dea02f435.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8af12b89-c1a0-4a2a-aa29-cd6dea02f435.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd563ab005d968185c8d000e38b88c2
268e6202466941e612ff503835de9091ef4d5b38
272c867dcc37d97f8682e8f3aa11a567a401b4d4d78e890b0eb94a3c77ea5000
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8af12b89-c1a0-4a2a-aa29-cd6dea02f435.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8288
x-amzn-requestid: 8b48ce45-1c30-4ea3-8cef-bf3b2e7f106f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEgFcUIAMFkSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1c-20e896a62338c6dc45c1ca2a;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:08 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _lR7GBAOjVmu9IrBxMWa1Y6K_1wp56AqQaxI7xZlpwsF7XWz8RpbzQ==
via: 1.1 1570d93226c1bbca2ebaad510cff3e0c.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:43:56 GMT
age: 9415
etag: "268e6202466941e612ff503835de9091ef4d5b38"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7a6f598-362e-4a6c-ba04-330df636e33b.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7a6f598-362e-4a6c-ba04-330df636e33b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f3c7e8351884491aeab9323c004bc3f3
127ac68bac21c88ffc6e09cc6666e93de4746a1f
e6fa04c502105c43c85c00d39481d2598c6d8fd56540e10107b6668c51597ae4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7a6f598-362e-4a6c-ba04-330df636e33b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8498
x-amzn-requestid: f6b92060-88d4-49bd-b60e-94d99feca4e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYiBaGPOIAMFu1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867d3c-331dacfb087d23881924eef9;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:44:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Zv5zu1q8h4GFU6agEcDzSVFYuvF74qu7UBnovs3vH5jpu17cmyxjQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:57:37 GMT
age: 8594
etag: "127ac68bac21c88ffc6e09cc6666e93de4746a1f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ym_L3s5E6MLy6BxqNkVxok6L6hA4c-ilSsEqt42j2IbiXYPb4c6-VQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:51 GMT
age: 8880
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05196ec43964cf559caa0c0279148d62
6170d6776615503e3e29f86783febc3e3e78ca66
47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9051
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEMNIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IMaVlQblNnh9mFKwb2LG7hw7h_f1_nVYqO4aEUqY01a2HofnnQqcFQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:49:31 GMT
age: 9080
etag: "6170d6776615503e3e29f86783febc3e3e78ca66"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9b96b63164d7dc37268951510afb359f
5991d60e238558f9fe4e1759fe18dde628cb7be4
cd7a88b3173bae9ad466d41b9ae9a2ed9e18157660697f1f1b070043194c3db4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4706
x-amzn-requestid: ce0b287a-7242-402b-8261-c519a1310309
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhHxETjoAMFcTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bcb-7a69d6d14ad0fd707ede2882;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odDoJgXLfaw-QRX8PfW3PW2yav7R41pQoyVbEVaDARSYLJPToLsTTA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 8886
etag: "5991d60e238558f9fe4e1759fe18dde628cb7be4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 996b942473e81e025cb872e3f7d8be38
7a0942af4d3d89893be65f9c52516c29000b4625
35a12bce6d2d282a7613295bd2f5b37496e5aa1846c68d0384a709154ffb70b2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=153648
Date: Wed, 30 Nov 2022 00:20:51 GMT
Etag: "638648d6-1d7"
Expires: Thu, 01 Dec 2022 19:01:39 GMT
Last-Modified: Tue, 29 Nov 2022 18:00:54 GMT
Server: ECS (dcb/7F15)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cSSz3NVV8-xZy0S60h4_edxV0x4WaRf9YmpMDijw73Bfx4BeLdIdOA==
Age: 3645
signup.resources4relief.com/css/runtime/runtime.css
35.170.124.222200 OK 2.5 kB URL HTTP/2 signup.resources4relief.com/css/runtime/runtime.css
IP 35.170.124.222:0
Hash 34fd63cd9418112c50be8fc03939459f
9b3cf80d267262756d8414164736fe4fec019ccb
5a579844a670f79aef529a5d5435a655ce6feac92f64e3e4a8f2d18de5dd7a4d
GET /css/runtime/runtime.css HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: text/css; charset=UTF-8
content-length: 2515
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"9d3-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 55 B IP 93.184.220.29:0
File type HTML document, ASCII text
Hash 9f073354411bbaf7a319b1519f10b4b7
571498f38548829bf186f49f5be9d5fa6e689a68
4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3364
Cache-Control: public, max-age=1209600
Content-Type: text/html
Date: Wed, 30 Nov 2022 00:20:51 GMT
Etag: "638651c0-37"
Last-Modified: Tue, 29 Nov 2022 18:38:56 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 55
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 02ca4292c31c0c0caa2ed7401af8d5bd
16ced3b6956cea150f608c9848bfa2f31e0a3e18
e90eff9a37ae4b3dff3bf24081ff3f110c45619703129b1b3f3f8bd3e0df9da0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5647
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:51 GMT
Last-Modified: Tue, 29 Nov 2022 22:46:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 55 B IP 93.184.220.29:0
File type HTML document, ASCII text
Hash 9f073354411bbaf7a319b1519f10b4b7
571498f38548829bf186f49f5be9d5fa6e689a68
4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3364
Cache-Control: public, max-age=1209600
Content-Type: text/html
Date: Wed, 30 Nov 2022 00:20:51 GMT
Etag: "638651c0-37"
Last-Modified: Tue, 29 Nov 2022 18:38:56 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 55
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
signup.resources4relief.com/js/appRuntime.js
35.170.124.222200 OK 14 kB URL HTTP/2 signup.resources4relief.com/js/appRuntime.js
IP 35.170.124.222:0
Hash e896997b02a0c1066aa4c053d2525b64
cbb8dd410210c102483bf34094b219b5dbb7f899
566c1d031368400d15a76533f794d62d9d0c6e33eef0cee124c42bccc2edb004
GET /js/appRuntime.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 14134
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"3736-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/loader2.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/loader2.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/directives/runtime/loader2.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/directives/runtime/loader2.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p2LrXYznOwhHZh9VXaRypQqyazZ4NTdGxgstzuydf21r4Z-siGRuVQ==
X-Firefox-Spdy: h2
signup.resources4relief.com/js/appConstants.js
35.170.124.222200 OK 4.9 kB URL HTTP/2 signup.resources4relief.com/js/appConstants.js
IP 35.170.124.222:0
File type ASCII text, with very long lines (577)
Hash f0884d8453f247a438c84b27b20b74e1
2a56f20e199ad17f3a297ca3312327928a3f16a4
8a09c00d0c59351f910abb3b6c327fce9b0ad841865277c24573295c7a73f224
GET /js/appConstants.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 4894
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 21 Nov 2022 15:17:39 GMT
etag: W/"131e-1849ac42e38"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/js/controllers/runtime/contactController.js
35.170.124.222200 OK 4.1 kB URL HTTP/2 signup.resources4relief.com/js/controllers/runtime/contactController.js
IP 35.170.124.222:0
Hash 1ec28f6d6e5ec29e41b9893cc56b8fba
d8e51eff22f16cefc1b619ef0fe70f001d83fa9b
a2685fa495206a67d1e924ec96004187724805e96370f23e144160c436cd38a1
GET /js/controllers/runtime/contactController.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 4064
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"fe0-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/js/controllers/runtime/runtimeController.js
35.170.124.222200 OK 84 kB URL HTTP/2 signup.resources4relief.com/js/controllers/runtime/runtimeController.js
IP 35.170.124.222:0
File type Unicode text, UTF-8 text, with very long lines (304)
Hash 594f8cb127cc66fef930859ceb03375c
0f5c299742165e30963c4e1b09cc4082ae65be66
bae081fda1c5f3f075462799eda96274b5032319f2463966f79162dea7673aa2
GET /js/controllers/runtime/runtimeController.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 84355
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 21 Nov 2022 15:17:39 GMT
etag: W/"14983-1849ac42e38"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/js/controllers/runtime/unsubscribeController.js
35.170.124.222200 OK 3.6 kB URL HTTP/2 signup.resources4relief.com/js/controllers/runtime/unsubscribeController.js
IP 35.170.124.222:0
Hash 58b4d1b107cf864e47d7769f5ab776af
528a13b8ae0bb20f4594c797c983160e6748feff
de6281b82e04a06c83582fbb21842e7c18af1b6cc0e7e16e87636b9983a7a23d
GET /js/controllers/runtime/unsubscribeController.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 3600
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"e10-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/js/controllers/runtime/deController.js
35.170.124.222200 OK 22 kB URL HTTP/2 signup.resources4relief.com/js/controllers/runtime/deController.js
IP 35.170.124.222:0
File type ASCII text, with very long lines (332)
Hash eeb5d53d662d0be4f8997adc82394112
4395b6be3ded0b5f519eca3d17c4436f670b5a93
7598231bc7e73901ae193e47fc88d5a721586d36acb0a21df390bdd78d84ed0a
GET /js/controllers/runtime/deController.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 22299
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"571b-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/js/services/runtime/userService.js
35.170.124.222200 OK 11 kB URL HTTP/2 signup.resources4relief.com/js/services/runtime/userService.js
IP 35.170.124.222:0
Hash 1bc641d9c56a42d75a58cb1565cdb65c
90509c7ae541b1eb068ab9b3c44c6a360dbd9b59
2b8a8eaba6897aaa74315608d5448582335bd101db9929b25b6b1cb795591654
GET /js/services/runtime/userService.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 10658
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 21 Nov 2022 15:17:39 GMT
etag: W/"29a2-1849ac42e38"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/js/services/runtime/leadPostService.js
35.170.124.222200 OK 1.1 kB URL HTTP/2 signup.resources4relief.com/js/services/runtime/leadPostService.js
IP 35.170.124.222:0
Hash e8b75f8112c79c8eb2e2d36d2e5e889f
1e37dde3f70ea69a47f98ccd4e80d1855d6f80cb
43d7008edf6120bacd2fb65d273c61152129faa23d6ed61cea0926eb94804c9f
GET /js/services/runtime/leadPostService.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1108
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"454-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/js/directives/runtime/jumpPageDirective.js
35.170.124.222200 OK 1.5 kB URL HTTP/2 signup.resources4relief.com/js/directives/runtime/jumpPageDirective.js
IP 35.170.124.222:0
Hash e0949fb4168cd330e1b205b80cd5e868
f63915705b3df343d7a4434e9da3246f9619dbc0
fc68d92933b18a53c20813a1adaf5b2ef4a502928b99e0d8d312b64d6990ab4a
GET /js/directives/runtime/jumpPageDirective.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1496
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"5d8-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/js/directives/runtime/optInMessagesRuntime.js
35.170.124.222200 OK 140 B URL HTTP/2 signup.resources4relief.com/js/directives/runtime/optInMessagesRuntime.js
IP 35.170.124.222:0
Hash f6e884a7d2cd6ba9e9f3cd1f50077009
fbb9a7ef463d993ae808e697a8268ebde0754733
fb82487674d334252a4391eb564745dd7db2d512c6460cf564f039061bd90462
GET /js/directives/runtime/optInMessagesRuntime.js HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 140
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"8c-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/locationService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/locationService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/locationService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/locationService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oYFXpmOj9k3CZKsjTqhUBSHulXeV7O1I3q9UCOu5WHulp48ulYREbA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/externalTemplates/startTemplateService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/externalTemplates/startTemplateService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/externalTemplates/startTemplateService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/externalTemplates/startTemplateService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5Kz5fqCzWT27s5ZrAYlJr5BYy91mrbofMNuDJb90-oCwhBSJQ9vijA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/externalTemplates/templateService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/externalTemplates/templateService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/externalTemplates/templateService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/externalTemplates/templateService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hz2AdU02dnF3L1gUJGQ3cpH0cBZjRMZ7nN0aHoSxCzxWveU_BWRPsA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/libraries/moment.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/libraries/moment.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/libraries/moment.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/libraries/moment.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4l9rI3-PfhZzm7Nfr_hD0KvV3aKzYlOpcpAYfOwokzYo_1YzvuNuEw==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/registration/continueButtonDirective.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/registration/continueButtonDirective.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/directives/runtime/registration/continueButtonDirective.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/directives/runtime/registration/continueButtonDirective.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u2JTa6xzv-2-AYC5SaPElGYDY-lgdrQZUjcDGdlO_i0Ei8c8kKjR1A==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/timeCalculationService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/timeCalculationService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/timeCalculationService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/timeCalculationService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tKuA--5OTqWWrVdXHbDlaR53AATGH9L41WJ2RyqIVTwDXRY18_P6wg==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/pushKorService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/pushKorService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/pushKorService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/pushKorService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _laSVo2v3uQF2oPc9M2gUPUSDq4Tzfwytocg7OPw5A8F_g4VCQxqJQ==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/libraries/ui-bootstrap-tpls-2.5.0.min.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/libraries/ui-bootstrap-tpls-2.5.0.min.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/libraries/ui-bootstrap-tpls-2.5.0.min.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/libraries/ui-bootstrap-tpls-2.5.0.min.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UMlHiSXdMGiHo0c35BbmDLGm2AdgXmSYnrSy_9v9UieRTTr_Ygemsg==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/vendor/css/portfolio-item.css
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/vendor/css/portfolio-item.css
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /vendor/css/portfolio-item.css HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/vendor/css/portfolio-item.css
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WPEL303zuWWBxtqzygOJNhDcOFYulQQhoF29hUqpwZhxpwNhnmFYMw==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/controllers/runtime/privacyController.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/controllers/runtime/privacyController.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/controllers/runtime/privacyController.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/controllers/runtime/privacyController.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7MvsIFqW6282pJBkDCIgDt2Gt9dgbktkqONRoJv5EDVmbNJbANn55Q==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/vendor/js/bootstrap.bundle.min.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/vendor/js/bootstrap.bundle.min.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /vendor/js/bootstrap.bundle.min.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/vendor/js/bootstrap.bundle.min.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SbSDzbzFlehhp2MYpkAutNNc7Mb7oRgtrRcg5sj5zF7y-fOEXuD_9Q==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/loader.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/loader.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/directives/runtime/loader.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/directives/runtime/loader.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O9EPFcUNxwpi5_nvOOxx0jygWIhRqyNZHs_H02sLPyJ0P0qXrGWEPg==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/vendor/js/popper.min.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/vendor/js/popper.min.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /vendor/js/popper.min.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/vendor/js/popper.min.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: geJf3rEC1MVPmMB9nTGulivM0ypYnuO83VqKV2ppb9NxHE6hWRNZJA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/redirectLoader.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/redirectLoader.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/directives/runtime/redirectLoader.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/directives/runtime/redirectLoader.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DeQGj79yV1eLM4ecoym_8_fdqMK_hqJ1f-cwGutzEtxqmjI8kYXFFQ==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/emailService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/emailService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/emailService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/emailService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Jrf2j_XyKGeOuQYesNFnWaUrA_p046Z6slr3072hMSGVfkO_WYkX9w==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/vendor/js/owl.carousel.min.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/vendor/js/owl.carousel.min.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /vendor/js/owl.carousel.min.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/vendor/js/owl.carousel.min.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: G0sxOiy4nGRjSvHPYrOExaeKXx81NNGCy89MqKFUYOn57AgpV_pM7g==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/libraries/angular-route.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/libraries/angular-route.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/libraries/angular-route.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/libraries/angular-route.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ofPHP9DytYuvr90YUoFcXwyjhqx0g_gKSnMFGxdPrQJ-SdNVJ-COMg==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/libraries/chancejs/chance.min.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/libraries/chancejs/chance.min.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/libraries/chancejs/chance.min.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/libraries/chancejs/chance.min.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uwFQEkZMl52xzFizWOw3_OhWb0_EHe2n8x1NzwaL25mvJSGiOZS_gQ==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/libraries/angular-sanitize.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/libraries/angular-sanitize.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/libraries/angular-sanitize.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/libraries/angular-sanitize.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XDgwjfnYRk8DAIXEHoKLuoY2_Im-3l7JKwr2_819Xm2S4VLPFsul5w==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/controllers/runtime/termsController.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/controllers/runtime/termsController.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/controllers/runtime/termsController.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/controllers/runtime/termsController.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H3vaMcjbaAgUwPM5LfKt9lT4E_5J3D1Arln0TVojRd3_quOSx53uKg==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/vendor/js/jquery.min.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/vendor/js/jquery.min.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /vendor/js/jquery.min.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/vendor/js/jquery.min.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T3oMQXi-x0Ae_EhyVkHLgyc0u9Th8qtnt-k7J9VnDHMWro9J6tRPyg==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/vendor/css/bootstrap.min.css
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/vendor/css/bootstrap.min.css
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /vendor/css/bootstrap.min.css HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/vendor/css/bootstrap.min.css
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZXflacIZPwNj5Y_pyD8Bw4cmZc9gZO40EHRwDyjE89IBbWJ41qXZbA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/oneSignalService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/oneSignalService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/oneSignalService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/oneSignalService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hoU9cgeWN8MK96Bv4bxYk9kjQsY6cHLhTeFx5InkANvqdWAxf5XEyA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/libraries/angular.min.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/libraries/angular.min.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/libraries/angular.min.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/libraries/angular.min.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DsxnJjZm7rExhCYkeqSSWvOYoYiZOUdXo6lR2GfMckKQkSoAnQDaMw==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/controllers/runtime/errorController.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/controllers/runtime/errorController.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/controllers/runtime/errorController.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/controllers/runtime/errorController.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GsMq4sIwzqPdeLwismG7nBANCD3D20uFgSc0rjAQx8V4nt4Sq90JBA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/registration/registrationFormBodyDirective.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/registration/registrationFormBodyDirective.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/directives/runtime/registration/registrationFormBodyDirective.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/directives/runtime/registration/registrationFormBodyDirective.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k_wMW-WWU3Ey96eFWbOjH6JdyrTlFVeybnbcOLfQ91AsrlE40aH7FA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/unsubscribeService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/unsubscribeService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/unsubscribeService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/unsubscribeService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8E_i-lvN7cQBY_uzlaeK2gdsRJ703ZAYYmg0zIF7Av1ao2yAXzOIxQ==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/myEnter.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/myEnter.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/directives/runtime/myEnter.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/directives/runtime/myEnter.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zEeDpWTZsbe1JOV25NIY1JRE4_LzC40_WbytinJHV-QMW6EKoQgdYA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/dupeLogicService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/dupeLogicService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/dupeLogicService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/dupeLogicService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uP8xapkZYcCa2JmL1gZuhQvF8Zto_IkgKIsh41rPexKecmB-455Rzg==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/gtmService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/gtmService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/gtmService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/gtmService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ljIF07zthCex7BfEI35oHhFxKKRffFEinRJQwkcCGJyx_HI_0Sd6zg==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/vendor/js/jquery.magnific-popup.min.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/vendor/js/jquery.magnific-popup.min.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /vendor/js/jquery.magnific-popup.min.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/vendor/js/jquery.magnific-popup.min.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nSCtwPO-yHX9mCEjSpT49KsA7tmMe9fAgMyDohAIV2N0r1evSIPZpQ==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/ipModal.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/directives/runtime/ipModal.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/directives/runtime/ipModal.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/directives/runtime/ipModal.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bPT-1D4CaeE7DUHKzAPNXg0s7WrGdRJiYFQWoV7qiPFWz1tgBJ8geg==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/pageServices.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/pageServices.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/pageServices.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/pageServices.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aI9kUrQ0QtIAmLf9dAOxP7esIpiJ9eHGdsFlu3v1rItHzE0OYwrsjA==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/externalTemplates/shTemplateService.js
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/externalTemplates/shTemplateService.js
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/externalTemplates/shTemplateService.js HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/externalTemplates/shTemplateService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 51lBHthF2sq6T0rsMd82Eo5Urq7FzO5xe__ecqdkYlQSq2EHFu9fDw==
X-Firefox-Spdy: h2
d1k1kngry9zb7v.cloudfront.net/js/services/runtime/validationService.js?v=2
54.230.245.170301 Moved Permanently 134 B URL HTTP/2 d1k1kngry9zb7v.cloudfront.net/js/services/runtime/validationService.js?v=2
IP 54.230.245.170:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /js/services/runtime/validationService.js?v=2 HTTP/1.1
Host: d1k1kngry9zb7v.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 134
location: https://resources4me.com:443/js/services/runtime/validationService.js
server: awselb/2.0
date: Wed, 30 Nov 2022 00:20:52 GMT
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dEVOLOi17FGOM2TsUKQVpu6kDCuVAmOtuhDVMfrf-S4eFWMn7rRB0g==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 9a1a8d85a45db4075738fd9c291fe90b
5066e7c8f4b8cdf0887af8ad64c9f4cbb9a48f04
f091773a69d00da12e91f7e025df3823f5b580dc2d22b5874ebc9be1f9b7eef8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 00:20:52 GMT
Etag: "63849bed-1d7"
Last-Modified: Tue, 29 Nov 2022 23:41:06 GMT
Server: ECS (dcb/7F37)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Hjsda2SjE32K-iy_TPRsyBapqmQ3bnmspBCQenGI9HqyE-EFCN6oMw==
Age: 2387
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 02ca4292c31c0c0caa2ed7401af8d5bd
16ced3b6956cea150f608c9848bfa2f31e0a3e18
e90eff9a37ae4b3dff3bf24081ff3f110c45619703129b1b3f3f8bd3e0df9da0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5648
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:52 GMT
Last-Modified: Tue, 29 Nov 2022 22:46:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
pushkor.com/client.js
99.83.166.223200 OK 18 kB IP 99.83.166.223:0
File type ASCII text, with very long lines (335)
Hash ddb06f0bb42fa5ff6d16e3de33191955
68ec8678d52917ab8b45d59a27bea6085015525c
bded81faf5aac3e17ffc70c28727d28d733b69144b57b335f6eed8957239a68e
GET /client.js HTTP/1.1
Host: pushkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 18251
server: nginx/1.10.3
x-powered-by: Express
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 05 Jan 2022 16:40:32 GMT
etag: W/"474b-17e2b1d1000"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 7e17f8b8ba6583767cf618f7e029c94a
f8587434a85b1b42d62c414670215ba259509a7a
402710205278e9b7e7c082f5e389fa7a8fd087440249568aa657f28066e08b80
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=156851
Date: Wed, 30 Nov 2022 00:20:52 GMT
Etag: "63866397-1d7"
Expires: Thu, 01 Dec 2022 19:55:03 GMT
Last-Modified: Tue, 29 Nov 2022 19:55:03 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ABOkJsPx9EBqqDUkka_bIUQHb3n46gqB8s57MueQityDYy6JcsdZ2Q==
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 55 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
File type HTML document, ASCII text
Hash 9f073354411bbaf7a319b1519f10b4b7
571498f38548829bf186f49f5be9d5fa6e689a68
4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 55
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: public, max-age=1209600
Date: Wed, 30 Nov 2022 00:20:52 GMT
Etag: "63866b9f-37"
Last-Modified: Tue, 29 Nov 2022 20:29:19 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: s3SUxAWzvJV6atyyS28zQ_ioPh2j3hAWsAp6ffcJS0baKLc0_AzQng==
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 55 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
File type HTML document, ASCII text
Hash 9f073354411bbaf7a319b1519f10b4b7
571498f38548829bf186f49f5be9d5fa6e689a68
4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 55
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: public, max-age=1209600
Date: Wed, 30 Nov 2022 00:20:52 GMT
Etag: "63866b88-37"
Last-Modified: Tue, 29 Nov 2022 20:28:56 GMT
Server: ECS (dcb/7EC7)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XxhPjjWf_PNegZD6AmCMJj2cn7bKUoscgzbYxJJoT22zycAeOL3ZCg==
Age: 1740
resources4me.com/js/services/runtime/timeCalculationService.js
35.170.124.222200 OK 1.4 kB URL HTTP/2 resources4me.com/js/services/runtime/timeCalculationService.js
IP 35.170.124.222:0
File type ASCII text, with CRLF line terminators
Hash 1b69cec450a3a586e9cedfcb621a1cd4
736b7107915a309221d77f2025634cd342a3257d
9eade3556a49d9da3f5051de0902d2adeec2453ac1cb92f0aba4fd4371c06ebe
GET /js/services/runtime/timeCalculationService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1352
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"548-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/services/runtime/pushKorService.js
35.170.124.222200 OK 910 B URL HTTP/2 resources4me.com/js/services/runtime/pushKorService.js
IP 35.170.124.222:0
Hash 93bae66b70c0b9465e45b42d310b18c3
51ea9aca278465e695d483c0e5d1a70c05f7e370
57b1dd3aa66af57f28631305d93ec7d6a6adfc6c2c81e1fb414a9567308315d4
GET /js/services/runtime/pushKorService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 910
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"38e-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/directives/runtime/loader2.js
35.170.124.222200 OK 113 B URL HTTP/2 resources4me.com/js/directives/runtime/loader2.js
IP 35.170.124.222:0
Hash 38644fa1ac0808e1048d5744d2609fc9
c5f3bc9579ec45ac0b3e6b27c745bca7a1879005
d1d1ad4eb65215fcbd6f2e8529364e06abb13ee767ba0929593406d665f014dd
GET /js/directives/runtime/loader2.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 113
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"71-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/vendor/css/portfolio-item.css
35.170.124.222200 OK 368 B URL HTTP/2 resources4me.com/vendor/css/portfolio-item.css
IP 35.170.124.222:0
Hash 8a976669f7dbecc65c5008e9c5f2f25e
95a915ade0b509ab6bf3ca973a6a29484d26b525
1470215a086483c34b2664b4c3a9b6b52da08bb0687bdc27f747cf30067afcaa
GET /vendor/css/portfolio-item.css HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: text/css; charset=UTF-8
content-length: 368
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"170-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 7e17f8b8ba6583767cf618f7e029c94a
f8587434a85b1b42d62c414670215ba259509a7a
402710205278e9b7e7c082f5e389fa7a8fd087440249568aa657f28066e08b80
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=159236
Date: Wed, 30 Nov 2022 00:20:52 GMT
Etag: "63866397-1d7"
Expires: Thu, 01 Dec 2022 20:34:48 GMT
Last-Modified: Tue, 29 Nov 2022 19:55:03 GMT
Server: ECS (dcb/7EEB)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0cJqjXrpyg1kyz1AnvDqpsyy23TCYp1FnY4HEZaJUoaji97t_SsS5w==
Age: 2385
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 7e17f8b8ba6583767cf618f7e029c94a
f8587434a85b1b42d62c414670215ba259509a7a
402710205278e9b7e7c082f5e389fa7a8fd087440249568aa657f28066e08b80
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=156851
Date: Wed, 30 Nov 2022 00:20:52 GMT
Etag: "63866397-1d7"
Expires: Thu, 01 Dec 2022 19:55:03 GMT
Last-Modified: Tue, 29 Nov 2022 19:55:03 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 18vI3izOgn0_56lw9nXCPThOdMPGVHj-4DOOqs3YT1Phe_n1uDyPvw==
resources4me.com/js/directives/runtime/loader.js
35.170.124.222200 OK 111 B URL HTTP/2 resources4me.com/js/directives/runtime/loader.js
IP 35.170.124.222:0
Hash 304ce95186036e2197b13f237891879e
b1b01857c12ccdabb3c02fdb2707e2de24989c46
60786cd2d0df3e29a0fe3fa588ba7e8c157cf9bc2c0fde8c53d613941395ce7b
GET /js/directives/runtime/loader.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 111
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"6f-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/controllers/runtime/privacyController.js
35.170.124.222200 OK 1.6 kB URL HTTP/2 resources4me.com/js/controllers/runtime/privacyController.js
IP 35.170.124.222:0
Hash afd72f00711c241d17ac46a12f73a0fb
15c9ee19aeef72c09289d33f2e20c0cc3f5b789c
327bbb18618ecc17aacd57e20ac70f5fb543d7a9a798fb2f6277187a7207ada1
GET /js/controllers/runtime/privacyController.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1597
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"63d-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/vendor/js/popper.min.js
35.170.124.222200 OK 21 kB URL HTTP/2 resources4me.com/vendor/js/popper.min.js
IP 35.170.124.222:0
File type ASCII text, with very long lines (20831)
Hash 56456db9d72a4b380ed3cb63095e6022
6dbce88aee15b42f29083df7a07513cf3b486ba0
66f3a07e1fa9b64a686b66381e4458dbc8abf3dbbff954720c4eec07b84411c2
GET /vendor/js/popper.min.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 21004
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"520c-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/directives/runtime/redirectLoader.js
35.170.124.222200 OK 179 B URL HTTP/2 resources4me.com/js/directives/runtime/redirectLoader.js
IP 35.170.124.222:0
Hash b2d950a3c38f18d804c6dffb2b4a96ce
80d044bc7a93621a01183a3ca7f083983cbe259d
a7df4ca382aebcfcd2d6de1f670dfad8d8935ce852bd0ebfbf71852bbabc787c
GET /js/directives/runtime/redirectLoader.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 179
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"b3-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/services/runtime/emailService.js
35.170.124.222200 OK 515 B URL HTTP/2 resources4me.com/js/services/runtime/emailService.js
IP 35.170.124.222:0
Hash 12431a019af53e4c1f7ce6b807bbe781
cf44b87ee065e33663ea0d6cb3fff55f54eb4d09
4d6006e9918d02d8a2d98b46537934e462e5527cc0bad78e1f4e318ac3b9c7bc
GET /js/services/runtime/emailService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 515
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"203-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/libraries/angular-sanitize.js
35.170.124.222200 OK 5.9 kB URL HTTP/2 resources4me.com/js/libraries/angular-sanitize.js
IP 35.170.124.222:0
File type ASCII text, with very long lines (1664)
Hash b0e4e3776cafea28377b83746208f8f2
a933566706e041beb4e5235a7eae2b0248eaacf0
b63afa5692cd7c35f8c333ed98e01bef875fe7a62af320ff3825306a776d03d0
GET /js/libraries/angular-sanitize.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 5864
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"16e8-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/vendor/js/jquery.magnific-popup.min.js
35.170.124.222200 OK 20 kB URL HTTP/2 resources4me.com/vendor/js/jquery.magnific-popup.min.js
IP 35.170.124.222:0
File type ASCII text, with very long lines (20087)
Hash 743ccc438e10ebe7e1def696d7b0884d
4e46db99cb1402bc916cfbd6df6af9519165a229
9cd173d2b12a4a3b2295ae2f67bca95a8916fcfbe8d528a85e8528d6baeca9b2
GET /vendor/js/jquery.magnific-popup.min.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 20217
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"4ef9-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/services/runtime/dupeLogicService.js
35.170.124.222200 OK 723 B URL HTTP/2 resources4me.com/js/services/runtime/dupeLogicService.js
IP 35.170.124.222:0
Hash 2ae616c0ecc30b561b9d18ff55dc2f8f
d7e4f2ce1a42542be3635147994f4838df6195e0
af94ae40a60cb9d579f798e8caabbde70f4c6a201a1cb7363f57f23fb473ec07
GET /js/services/runtime/dupeLogicService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 723
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"2d3-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/services/runtime/oneSignalService.js
35.170.124.222200 OK 1.8 kB URL HTTP/2 resources4me.com/js/services/runtime/oneSignalService.js
IP 35.170.124.222:0
Hash c8369ee4c0aea8b2ba45098dd6a8a183
cded7f83b0a36837cf76c21dce3193bfdd2d751d
0913bb96182035ee12dbc6625cf090fe4257111819f206e585791adb9bb78fb0
GET /js/services/runtime/oneSignalService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1773
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"6ed-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/services/runtime/gtmService.js
35.170.124.222200 OK 539 B URL HTTP/2 resources4me.com/js/services/runtime/gtmService.js
IP 35.170.124.222:0
Hash c08aa452a7b7c01cd09dfd8208883c44
8af1db02a93ff51929a91f4dffccb3c3eeea7cf2
7b7d576ea52fcbbf361ea71749cb321d61d0adf30ed28e10fe2d58f27e2b6ccd
GET /js/services/runtime/gtmService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 539
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"21b-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/controllers/runtime/rulesController.js
35.170.124.222200 OK 1.6 kB URL HTTP/2 resources4me.com/js/controllers/runtime/rulesController.js
IP 35.170.124.222:0
Hash ee7a63cc8ba1818e1a4aa0138e53e316
73daae57cb63b2dfa815293b3a1465eb32db0c89
4807f7f2a8956594a6a674abca1be11b33bccf967c9282ee01c6d507cab1a8d9
GET /js/controllers/runtime/rulesController.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1574
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"626-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/services/runtime/pageServices.js
35.170.124.222200 OK 7.3 kB URL HTTP/2 resources4me.com/js/services/runtime/pageServices.js
IP 35.170.124.222:0
Hash f2c66568241fb1edae747eb98d396dc4
9e65c095f5890b7d9efe8adbeab96f3b8b54dfa7
7cb948d49f5cf35af97f90393927745cc1c039354cb80cf29b04fcab082d7179
GET /js/services/runtime/pageServices.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 7281
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"1c71-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/controllers/runtime/termsController.js
35.170.124.222200 OK 1.6 kB URL HTTP/2 resources4me.com/js/controllers/runtime/termsController.js
IP 35.170.124.222:0
Hash 829a7d04ca7286577b93b1135c09e203
8b46dd92164b5b9955502483b17b13c8fe8af5aa
1344d104725c78053d8ffa112b8d81e1f111d5fa1169e009037830032723266a
GET /js/controllers/runtime/termsController.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1594
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"63a-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/services/runtime/unsubscribeService.js
35.170.124.222200 OK 435 B URL HTTP/2 resources4me.com/js/services/runtime/unsubscribeService.js
IP 35.170.124.222:0
Hash a6107e7b24fcecc77d7df88a90e29960
e719cee179c2ff869d7954c6473b105fdd5cb6a6
83dcda4b9586f03903c6bfb19a83b528cab2ea1532287a3e474a1a8516ab1a09
GET /js/services/runtime/unsubscribeService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 435
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"1b3-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/directives/runtime/myEnter.js
35.170.124.222200 OK 484 B URL HTTP/2 resources4me.com/js/directives/runtime/myEnter.js
IP 35.170.124.222:0
Hash 36f5fbef59a916f0e74eb6e56fbdce85
95a11d8753a3a25070d01775a681d11d170b8223
0f1feae3eb34e7db5060b6fe314d5f8c16d8f06f343ed3cb31ff0e79ee5c4518
GET /js/directives/runtime/myEnter.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 484
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"1e4-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/directives/runtime/ipModal.js
35.170.124.222200 OK 113 B URL HTTP/2 resources4me.com/js/directives/runtime/ipModal.js
IP 35.170.124.222:0
Hash 839ed78421375374a47c99be7be931a2
62152d42f1f12e54c59fde1279ee438db0596fdc
1e84ac62d91f0027cf7eeb6e4213a5c177a2a1b92ba09004bd2136bc28a463b8
GET /js/directives/runtime/ipModal.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 113
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"71-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/controllers/runtime/errorController.js
35.170.124.222200 OK 232 B URL HTTP/2 resources4me.com/js/controllers/runtime/errorController.js
IP 35.170.124.222:0
Hash f76f6a5453a3f9fef8555f3dfdad2bc1
313c20b1b70c35f17532bc5d425ad4cca811f0a6
63bba80812af61f5f2bdaf6671b102b1309559d1eac5f7cdde192ed757073a71
GET /js/controllers/runtime/errorController.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 232
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"e8-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/services/runtime/locationService.js
35.170.124.222200 OK 1.0 kB URL HTTP/2 resources4me.com/js/services/runtime/locationService.js
IP 35.170.124.222:0
Hash 0cf068142a41171ee55824ef6c4b7673
e84b3689c34edd6b04878da0be8ef424317c445f
aeadc7c2dfe0215afdd45c0311e53844a81cebc9b26970c9fe1d49c9ac173634
GET /js/services/runtime/locationService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1005
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"3ed-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/externalTemplates/shTemplateService.js
35.170.124.222200 OK 3.6 kB URL HTTP/2 resources4me.com/js/externalTemplates/shTemplateService.js
IP 35.170.124.222:0
Hash faafbf31cc2cd95109a75692af8f8886
a0700233353437aa60211856cfc5b80c89195be6
e37df7cccba398808f0868f8dadb73dc548e2fd97b308aee6ba4018a5f600bee
GET /js/externalTemplates/shTemplateService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 3597
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"e0d-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/directives/runtime/registration/registrationFormBodyDirective.js
35.170.124.222200 OK 155 B URL HTTP/2 resources4me.com/js/directives/runtime/registration/registrationFormBodyDirective.js
IP 35.170.124.222:0
Hash 5007896efe821e71eca08f50f904fc2e
9d7ae968470881554618300507c02bfe8dcfd700
d26c782a840d5503788013252e826b0657246eb7fc0f887bb767f2ec245883ca
GET /js/directives/runtime/registration/registrationFormBodyDirective.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 155
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"9b-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/services/runtime/validationService.js
35.170.124.222200 OK 3.2 kB URL HTTP/2 resources4me.com/js/services/runtime/validationService.js
IP 35.170.124.222:0
Hash be26a27dcf60b6b237cc1067374e957e
9c9c341625c56dbabd5cd4a728f345ed3794683a
bed0e69566496c157f61ee653f517e96664e0d2ddacf9db40550d9cf2cca0490
GET /js/services/runtime/validationService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 3193
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"c79-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/directives/runtime/registration/continueButtonDirective.js
35.170.124.222200 OK 151 B URL HTTP/2 resources4me.com/js/directives/runtime/registration/continueButtonDirective.js
IP 35.170.124.222:0
Hash 64e7e5b5a1a11ec7dc5095ce95b20bb1
1e0034244f0a49e1b3094f145d3e076c5795661b
0c460da2e4b8020e7b5606bb927a9b07b62acee958c5ff902e0d93c91a968756
GET /js/directives/runtime/registration/continueButtonDirective.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 151
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"97-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/externalTemplates/startTemplateService.js
35.170.124.222200 OK 2.8 kB URL HTTP/2 resources4me.com/js/externalTemplates/startTemplateService.js
IP 35.170.124.222:0
Hash 2b6d24040e9f4a378a6851b17a024cde
42c2b58a43f8e12782d00535aa008618cce93236
8cf06c0094e8e4fb0b799852c198a8e6132639d0ff3d2fe868c84fd7581e3d0b
GET /js/externalTemplates/startTemplateService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 2829
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"b0d-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/vendor/js/bootstrap.bundle.min.js
35.170.124.222200 OK 58 kB URL HTTP/2 resources4me.com/vendor/js/bootstrap.bundle.min.js
IP 35.170.124.222:0
File type ASCII text, with very long lines (57791)
Hash 9075742ee1fe2d0c1d47a431fda233e4
1ed20f32fb45b9c9cd1fc1b7c58f422f9d0375c0
e184f406380108ed797bf9d0eebd49b314d360f89882aee36ae771924a412e7d
GET /vendor/js/bootstrap.bundle.min.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 58073
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"e2d9-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/externalTemplates/templateService.js
35.170.124.222200 OK 699 B URL HTTP/2 resources4me.com/js/externalTemplates/templateService.js
IP 35.170.124.222:0
Hash a10f37cab7daa4549600d1bb9509f8ca
7f1ad69dab42cfc47ff0db1d37011906c843d6b9
2aed9389856e628b3dd9c0a1bb0ff4c6a3138494ed688a6be61e33dc95c0de25
GET /js/externalTemplates/templateService.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 699
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"2bb-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/vendor/js/owl.carousel.min.js
35.170.124.222200 OK 44 kB URL HTTP/2 resources4me.com/vendor/js/owl.carousel.min.js
IP 35.170.124.222:0
File type ASCII text, with very long lines (31997)
Hash 2f81c8e306ab721a8bc7037b418cb403
c4ee8df80214724dcca2d44342deeb9d606fd219
ef52ead07fdb220ecd63baa9d08c80142239de79e4e1e4a1b15298f9d075950b
GET /vendor/js/owl.carousel.min.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 44347
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"ad3b-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/libraries/angular-route.js
35.170.124.222200 OK 46 kB URL HTTP/2 resources4me.com/js/libraries/angular-route.js
IP 35.170.124.222:0
Hash beee7b8b30af7e81237c1851468d166e
3d54e36ae95af1a333d512a818fce8ef42943fd5
95bf1999c2ce144ad5490889ee9863f0d8c1114d939de8975314e24609d03bb1
GET /js/libraries/angular-route.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 45507
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"b1c3-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/libraries/moment.js
35.170.124.222200 OK 143 kB URL HTTP/2 resources4me.com/js/libraries/moment.js
IP 35.170.124.222:0
File type Algol 68 source text\012- Pascal source, ASCII text
Size 143 kB (143102 bytes)
Hash e13a2c4467d3a098c713e142b032c426
102e275c9a8ab28eb064f8991e84312b06882676
8646cc4105e728b8cee6eb9af2a7eb26c9d7d94be1c47a5c5340d408b71f258a
GET /js/libraries/moment.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 143102
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"22efe-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/js/libraries/angular.min.js
35.170.124.222200 OK 174 kB URL HTTP/2 resources4me.com/js/libraries/angular.min.js
IP 35.170.124.222:0
File type ASCII text, with very long lines (1540)
Size 174 kB (173539 bytes)
Hash 7a2842ccb36f0c0e6354373f34264db8
db8fb598c1fb2f23911d6fe7c8b27d45bed425e1
f68c97b29ddb22f2521af0be4fba13b061a5e77f36d7a8bf091930d00f699900
GET /js/libraries/angular.min.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 173539
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"2a5e3-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-WHCWNZW
142.250.74.168200 OK 81 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WHCWNZW
IP 142.250.74.168:0
File type ASCII text, with very long lines (5026)
Hash 9e37abc194913502941a023598389ffe
69422c24e7a1b630cd72bbedf81a9bd85eb21eab
06ee591773b7176a6be94f094139e22ab06f8181f1d47aebd4253e8db3a31b9f
GET /gtm.js?id=GTM-WHCWNZW HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 30 Nov 2022 00:20:53 GMT
expires: Wed, 30 Nov 2022 00:20:53 GMT
cache-control: private, max-age=900
last-modified: Wed, 30 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81094
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
signup.resources4relief.com/favicon.ico
35.170.124.222200 OK 318 B URL HTTP/2 signup.resources4relief.com/favicon.ico
IP 35.170.124.222:0
File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel\012- data
Hash 0eb6a3e58fb0f61f080bfd48d9be4a2d
669802179243bd9c47aae26d03090f5f8e40a015
3755ed10fae26af17e06f7ff740b9138c0f6b47b524d6bbbaae98f999433e1ea
GET /favicon.ico HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:53 GMT
content-type: image/x-icon
content-length: 318
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"13e-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/pages/runtime/pageTemplates/sh.html
35.170.124.222200 OK 6.1 kB URL HTTP/2 signup.resources4relief.com/pages/runtime/pageTemplates/sh.html
IP 35.170.124.222:0
File type HTML document, Unicode text, UTF-8 text
Hash 0099f8663c606fec6a792cc8379ca480
e11265839d3761c9eaa191731d3639143554eb2b
344c6ed53a45bf0de104a7c307eabbfef76d7b9e9f1b6d528796230d5a8d1797
GET /pages/runtime/pageTemplates/sh.html HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:53 GMT
content-type: text/html; charset=UTF-8
server: nginx/1.10.3
vary: Accept-Encoding
x-powered-by: Express
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"627e-18453f8d030"
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 22:41:08 GMT
expires: Wed, 30 Nov 2022 00:41:08 GMT
cache-control: public, max-age=7200
age: 5985
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
13.107.21.200200 OK 11 kB IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11421
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=36D4CF6132F761123AC0DD0D33026079; domain=.bing.com; expires=Mon, 25-Dec-2023 00:20:53 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 44C96B7C45BB45EE9D643499EBF50854 Ref B: OSL30EDGE0109 Ref C: 2022-11-30T00:20:53Z
date: Wed, 30 Nov 2022 00:20:52 GMT
X-Firefox-Spdy: h2
signup.resources4relief.com/templates/registerFormBody.html
35.170.124.222200 OK 2.8 kB URL HTTP/2 signup.resources4relief.com/templates/registerFormBody.html
IP 35.170.124.222:0
Hash 13f4abe2d6cb8cfa13fd6f048b3a80d2
2a6aba037fb440ea108c3e85b438835c0c67b707
e84757f9a69e9a3bfb9df00cb75821a9e62aa6feede138e5a9b3a19ef881d6b8
GET /templates/registerFormBody.html HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:53 GMT
content-type: text/html; charset=UTF-8
content-length: 2790
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"ae6-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/templates/redirectLoader.html
35.170.124.222200 OK 934 B URL HTTP/2 signup.resources4relief.com/templates/redirectLoader.html
IP 35.170.124.222:0
File type gzip compressed data, max compression\012- data
Hash c4d7b38d4599b9fd7dc2c29cb704d273
1e751bbd70d475b9c570ff30b915322225fdc9fb
1d78117c32095057303e5f792061c53dd95aa9c5bce07512ec3bef04a194f7c0
GET /templates/redirectLoader.html HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:53 GMT
content-type: text/html; charset=UTF-8
content-length: 296
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"128-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=26007078&tm=gtm002&Ver=2&mid=e46f1cae-b7d3-4b56-bab5-8c9c7a92f608&sid=d9945d30704411ed9fb4fb51d2101457&vid=d9947ce0704411ed8344219064ba391b&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sign%20Up&p=https%3A%2F%2Fsignup.resources4relief.com%2Flp%23%2Fsh%2F5e61963f69696552bca63ac5%3Fsr%3D8%26s1%3D10239e7dc9cd4ac8ca277af8347e59%26s2%3DSMS%26s3%3D%26jp%3D3%26fn%3DTobi%26ln%3DKerns%26em%3Dkernstobitobinr%40gmail.com%26z%3D47933%26utm_source%3Dr4m_8_5e61963f69696552bca63ac5%26utm_medium%3Dcpa%26utm_campaign%3D422&r=<=5236&evt=pageLoad&sv=1&rn=451669
13.107.21.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=26007078&tm=gtm002&Ver=2&mid=e46f1cae-b7d3-4b56-bab5-8c9c7a92f608&sid=d9945d30704411ed9fb4fb51d2101457&vid=d9947ce0704411ed8344219064ba391b&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sign%20Up&p=https%3A%2F%2Fsignup.resources4relief.com%2Flp%23%2Fsh%2F5e61963f69696552bca63ac5%3Fsr%3D8%26s1%3D10239e7dc9cd4ac8ca277af8347e59%26s2%3DSMS%26s3%3D%26jp%3D3%26fn%3DTobi%26ln%3DKerns%26em%3Dkernstobitobinr%40gmail.com%26z%3D47933%26utm_source%3Dr4m_8_5e61963f69696552bca63ac5%26utm_medium%3Dcpa%26utm_campaign%3D422&r=<=5236&evt=pageLoad&sv=1&rn=451669
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=26007078&tm=gtm002&Ver=2&mid=e46f1cae-b7d3-4b56-bab5-8c9c7a92f608&sid=d9945d30704411ed9fb4fb51d2101457&vid=d9947ce0704411ed8344219064ba391b&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sign%20Up&p=https%3A%2F%2Fsignup.resources4relief.com%2Flp%23%2Fsh%2F5e61963f69696552bca63ac5%3Fsr%3D8%26s1%3D10239e7dc9cd4ac8ca277af8347e59%26s2%3DSMS%26s3%3D%26jp%3D3%26fn%3DTobi%26ln%3DKerns%26em%3Dkernstobitobinr%40gmail.com%26z%3D47933%26utm_source%3Dr4m_8_5e61963f69696552bca63ac5%26utm_medium%3Dcpa%26utm_campaign%3D422&r=<=5236&evt=pageLoad&sv=1&rn=451669 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=16DB715496216004044A633897D461ED; domain=.bing.com; expires=Mon, 25-Dec-2023 00:20:53 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 30E43F4AF40D44B29E0B5DC5742DEA64 Ref B: OSL30EDGE0109 Ref C: 2022-11-30T00:20:53Z
date: Wed, 30 Nov 2022 00:20:53 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/p/action/26007078.js
13.107.21.200204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/26007078.js
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/26007078.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=3B41536D260065711D60410127F56485; domain=.bing.com; expires=Mon, 25-Dec-2023 00:20:53 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 36CDEFBB589D4B5DA7627951946E88C7 Ref B: OSL30EDGE0109 Ref C: 2022-11-30T00:20:53Z
date: Wed, 30 Nov 2022 00:20:53 GMT
X-Firefox-Spdy: h2
resources4me.com/js/libraries/ui-bootstrap-tpls-2.5.0.min.js
35.170.124.222200 OK 4 B URL HTTP/2 resources4me.com/js/libraries/ui-bootstrap-tpls-2.5.0.min.js
IP 35.170.124.222:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
GET /js/libraries/ui-bootstrap-tpls-2.5.0.min.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 125728
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"1eb20-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto+Slab
142.250.74.106200 OK 1.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Slab
IP 142.250.74.106:0
Hash 5045218b9bd6cb86658a7c7f7e2e066c
00bbc6aa406b8dc717443f07cd01f963ba6d83d0
2b9b31de68d2e07e7d25d818384834fadec66414650f9ec402cd51f1866ddcd7
GET /css?family=Roboto+Slab HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 00:20:51 GMT
date: Wed, 30 Nov 2022 00:20:51 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
216.58.207.227200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 31196, version 1.0\012- data
Hash ea2343c7dccad57360fb611d67204445
b603d9e68bb1ed5e4b33d5e31121160cb4d23452
2a04078f9550381b5148170ceaf5b378a1b31ed8274c6d0094aeba6f599462cc
GET /s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://signup.resources4relief.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 14:53:25 GMT
expires: Sun, 26 Nov 2023 14:53:25 GMT
cache-control: public, max-age=31536000
age: 293249
last-modified: Mon, 11 Jul 2022 20:43:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
signup.resources4relief.com/api/rn/validate/ip2
35.170.124.222200 OK 278 B URL HTTP/2 signup.resources4relief.com/api/rn/validate/ip2
IP 35.170.124.222:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f15abd94e4d234f5623f4891b6f6982
291d395eaa55845777acb7a3ceea7311661d5424
f653168258992abde3f9711ce9b879796b169177a81ec35d3e507eaeef495e6b
POST /api/rn/validate/ip2 HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 36
Origin: https://signup.resources4relief.com
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: application/json; charset=utf-8
content-length: 278
server: nginx/1.10.3
x-powered-by: Express
vary: X-HTTP-Method-Override
etag: W/"116-KR05XqpVhFd3rLejzupzEWYdVCQ"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/api/rn/find/page?page_id=5e61963f69696552bca63ac5
35.170.124.222200 OK 66 kB URL HTTP/2 signup.resources4relief.com/api/rn/find/page?page_id=5e61963f69696552bca63ac5
IP 35.170.124.222:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65422), with no line terminators
Hash 01d57c641466be8dd218c087b392e911
424fc295872f927329dc5203902b7e1e20eab50e
5da8ac6cfcb151bc656cb1bf34edf148098cc87dec1d32e3af4f251fad6ab509
GET /api/rn/find/page?page_id=5e61963f69696552bca63ac5 HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: application/json; charset=utf-8
content-length: 65988
server: nginx/1.10.3
x-powered-by: Express
etag: W/"101c4-Qk/ClYcvknMp3FIDkCt+HiDqtQ4"
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash a0fe20d41a043db700a84924cd9793f3
c0da481fef6cd00558f6e68b074acb34bef8292f
03caeb65ab9e22f6d6fe0d344d327950d20ee9ed144e2da0e5e062943a03fc56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-116614915-1&cid=718944744.1669767653&jid=193505953&_u=YADAAEAAAAAAACAAI~&z=1885045596
216.58.207.228200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-116614915-1&cid=718944744.1669767653&jid=193505953&_u=YADAAEAAAAAAACAAI~&z=1885045596
IP 216.58.207.228:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-116614915-1&cid=718944744.1669767653&jid=193505953&_u=YADAAEAAAAAAACAAI~&z=1885045596 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 00:20:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
signup.resources4relief.com/pages/runtime/regFormTemplates/ShortReg3.html
35.170.124.222200 OK 1.7 kB URL HTTP/2 signup.resources4relief.com/pages/runtime/regFormTemplates/ShortReg3.html
IP 35.170.124.222:0
Hash fca17f40dd49c54e3ec694a05f1740f5
e1edc7c0e1ff64548d6a06363057c30160e574e9
fdf587b85a4c0ab7bedb562dc5647098a0ce06cb91ecea0941e86f34b8de162b
GET /pages/runtime/regFormTemplates/ShortReg3.html HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: text/html; charset=UTF-8
content-length: 1672
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"688-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/templates/jumppages/jumpPage2.html
35.170.124.222200 OK 4.3 kB URL HTTP/2 signup.resources4relief.com/templates/jumppages/jumpPage2.html
IP 35.170.124.222:0
Hash 055e1bf9e3b16b4cd714c17575d12d0e
db9423e3b6bf1c129cae12135c1ed2d42f659c59
8d2c079e57c9f7a5bfaf8632efa5848edfb11888419e2c31b8ba9c74ccaf6d7a
GET /templates/jumppages/jumpPage2.html HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: text/html; charset=UTF-8
server: nginx/1.10.3
vary: Accept-Encoding
x-powered-by: Express
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"4819-18453f8d030"
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/img-logo@3x.png
35.170.124.222200 OK 20 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/img-logo@3x.png
IP 35.170.124.222:0
File type PNG image data, 552 x 162, 8-bit colormap, non-interlaced\012- data
Hash 8ba057b98a4ac3d447d733c68d79a23c
edbb6d120f5c1da9e56559f2020d9ef135a9427f
f745058086ea6f6951fb67394c4d8ebce3d9bcf8bd7085f4e9035783fcca817b
GET /assets/img/jumppage/img-logo@3x.png HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/png
content-length: 20144
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"4eb0-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/ic-grants.svg
35.170.124.222200 OK 3.4 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/ic-grants.svg
IP 35.170.124.222:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2458)
Hash 968562ae33e063fcbcf7cd562e182cdd
81839f13f706ea4489440dc348fd683ae3cd404d
c593c08a06610bccf75edbf3c585919367b50e546c24591dab6f68f5524fa00f
GET /assets/img/jumppage/ic-grants.svg HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/svg+xml
content-length: 3377
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"d31-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash abd55ecd24d357a9f02612558f723a90
6a1e6963864f0b53ddc6205d35225e6cf0bcbeec
195fa531e0462be58d5c62ebbe6060e147c94bdb1d38ff46c341c74e0ab2671a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3402a11f28d369c1ad537c8e44ba5568
17c9fc852ca71dc4d46f786537adda4ee0e9a3ef
dd142866516f3293fab9f67f092d37b70c39fc58512734c8e88dab5c5faf7264
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 00:20:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dvblj9lkfdpc4.cloudfront.net/cmnst-r4r-logo5.png
54.230.245.196200 OK 9.1 kB URL HTTP/2 dvblj9lkfdpc4.cloudfront.net/cmnst-r4r-logo5.png
IP 54.230.245.196:0
File type PNG image data, 350 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash cc1ddff42f5f9243156f8486da5b676b
b013c9616356987c3dbf0b7eba1533dc451a1ad4
ff024b0ba9577c54c3ff3fc531b6de30ba27a0dce32863f6c9afd83497c21bc5
GET /cmnst-r4r-logo5.png HTTP/1.1
Host: dvblj9lkfdpc4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 9107
last-modified: Fri, 19 Feb 2021 11:28:44 GMT
accept-ranges: bytes
server: AmazonS3
date: Tue, 29 Nov 2022 14:15:50 GMT
etag: "cc1ddff42f5f9243156f8486da5b676b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4c_eg2DG-inF4HVTbMM55BjnxgMNIvEoV3h7bWIuFr2fbtprWIk5gQ==
age: 36305
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/ic-housing.svg
35.170.124.222200 OK 1.7 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/ic-housing.svg
IP 35.170.124.222:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (817)
Hash b26850fb88a94d4946dae7253d904ea3
162d7b63df555c2d10a085a47078d65cfe256d45
fca5087114d86d81d68bbbf10801bf7e398fa12fe1f213f88a48c72205c07647
GET /assets/img/jumppage/ic-housing.svg HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/svg+xml
content-length: 1736
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"6c8-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/ic-single-parents-help.svg
35.170.124.222200 OK 2.9 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/ic-single-parents-help.svg
IP 35.170.124.222:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1995)
Hash 30a79d68e80ab04cea9b5a6ffed16652
d4a6d761dc8a9b4e4ba53ea26eb1bd34c51f84ee
9d2f922e37c7926bdfa7299b93791b5c51a2950cf8fc5f17c09562cfc4b910b1
GET /assets/img/jumppage/ic-single-parents-help.svg HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/svg+xml
content-length: 2914
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"b62-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/ic-education.svg
35.170.124.222200 OK 1.5 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/ic-education.svg
IP 35.170.124.222:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (598)
Hash ee8a7ba015b8744c6a834fd41617bc32
d224468f83269816070ebe9fd53454deafbde420
0b6e37fffcab909207caccda03d92d7b73781a979f3ebfbf5fcf52d7fbfcfeb8
GET /assets/img/jumppage/ic-education.svg HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/svg+xml
content-length: 1517
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"5ed-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/ic-disability-help.svg
35.170.124.222200 OK 2.0 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/ic-disability-help.svg
IP 35.170.124.222:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1113)
Hash 854687d03ad1e132029765eee3e73a60
0d91b2b0113b6986c18a1a72bf4e8f7c1b21b6c9
72ca26589e04b5797845c1a1f16061c70fd7e93001845a478e780404086d52d8
GET /assets/img/jumppage/ic-disability-help.svg HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/svg+xml
content-length: 2032
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"7f0-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/ic-financial-resources.svg
35.170.124.222200 OK 3.4 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/ic-financial-resources.svg
IP 35.170.124.222:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2442)
Hash d7e69eb5ed8cd1edeebb8aeb63078a47
d5c3005a20739c00cf7be12c31946855e4edd8bb
2ccb103a35bb893176019b745fee7717d32ae1a0ae6518e5ac59135747d4116d
GET /assets/img/jumppage/ic-financial-resources.svg HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/svg+xml
content-length: 3361
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"d21-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/img_jennifer@2x.png
35.170.124.222200 OK 25 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/img_jennifer@2x.png
IP 35.170.124.222:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash 8ec25dda6aef96b0090852c63e1f42d6
a3e9380a275079445286a093be15a4ac6177410c
6a5d8f9f37c52683fa27fd04b864fe8a39cf3116e7888398213ff19152bfde9f
GET /assets/img/jumppage/img_jennifer@2x.png HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/png
content-length: 24563
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"5ff3-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/img-banner@3x.png
35.170.124.222200 OK 272 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/img-banner@3x.png
IP 35.170.124.222:0
File type PNG image data, 2529 x 1803, 8-bit colormap, non-interlaced\012- data
Size 272 kB (272340 bytes)
Hash a35b50d42a2bc484aeaf7f9e2ee77397
05fa6d2d4b716abe1f6977907ae1b84c2b988b11
604794c6900d0163c2647ec257c5d1aae78a713ee290f48be8e1d7ca79165abc
GET /assets/img/jumppage/img-banner@3x.png HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/png
content-length: 272340
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"427d4-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/ic-quotes.svg
35.170.124.222200 OK 1.0 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/ic-quotes.svg
IP 35.170.124.222:0
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 86aa31c77913ae0bfb8178dd3b14a3b0
a760cd103365d19db17669fd7b6df1bf7a66f6ee
87697c5ae897948b379ded1230311720b1e4a8348e5400d88a359549ecdff9c6
GET /assets/img/jumppage/ic-quotes.svg HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/svg+xml
content-length: 1045
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"415-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/img_thomas@2x.png
35.170.124.222200 OK 12 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/img_thomas@2x.png
IP 35.170.124.222:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash 8ba052f090b4236930e119af76ada614
5a500a16e283c68410125e78e7397c2935d57ba6
8dacfa85862b02634157e9661bab0f64b9b75bca597e5eeb486a6a1cb5d9e859
GET /assets/img/jumppage/img_thomas@2x.png HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/png
content-length: 12317
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"301d-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/assets/img/jumppage/img_jeremy@2x.png
35.170.124.222200 OK 22 kB URL HTTP/2 signup.resources4relief.com/assets/img/jumppage/img_jeremy@2x.png
IP 35.170.124.222:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, interlaced\012- data
Hash baa63afddeeb6ba36f125edc0955fd4c
8b4b9e878f1b2560586e5560df9bde6ffe23f674
d4baa5fa0b7e465e886cb22e95dafe952e41459118631083669c052b4c9f22d5
GET /assets/img/jumppage/img_jeremy@2x.png HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: image/png
content-length: 21973
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"55d5-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/fonts/Gordita-Regular.otf
35.170.124.222200 OK 123 kB URL HTTP/2 signup.resources4relief.com/fonts/Gordita-Regular.otf
IP 35.170.124.222:0
File type OpenType font data\012- data
Size 123 kB (123236 bytes)
Hash 72b61656717612336e46e12dbf5e2e1f
4180ceaaf5b38e3c554a33c3fee07a7b421e1b8c
6e755ce2892d3ebfa772786fdd9ae8182cdc09a05302a4b75f66dabe2ae66440
GET /fonts/Gordita-Regular.otf HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: font/otf
content-length: 123236
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"1e164-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/fonts/Gordita-Bold.otf
35.170.124.222200 OK 125 kB URL HTTP/2 signup.resources4relief.com/fonts/Gordita-Bold.otf
IP 35.170.124.222:0
File type OpenType font data\012- data
Size 125 kB (124568 bytes)
Hash 7f849b37cc6fec4fdc61064d1506c0a1
af8c77fe8c8b11fdaa96932fcbf6d9a1327b505d
6ac723c1831ed9996fbe7dee1d44950e6611c8c0b87f1d754dcc6f23c3b8b5a3
GET /fonts/Gordita-Bold.otf HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: font/otf
content-length: 124568
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"1e698-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
signup.resources4relief.com/fonts/Gordita-Medium.otf
35.170.124.222200 OK 124 kB URL HTTP/2 signup.resources4relief.com/fonts/Gordita-Medium.otf
IP 35.170.124.222:0
File type OpenType font data\012- data
Size 124 kB (123676 bytes)
Hash 5ef002714f0493e3e6d7c2afff9c826a
08ddd7a722c14476412a693c8e76254102db8fcd
5c06ac5ba3ed7514bf4a16e765cb1bae68e6215f7ae11230fd8e55dc94129bb1
GET /fonts/Gordita-Medium.otf HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/lp
Cookie: _gcl_au=1.1.1409655509.1669767653; _ga_5W96X2ESK5=GS1.1.1669767652.1.0.1669767652.0.0.0; _ga=GA1.2.718944744.1669767653; _gid=GA1.2.705193456.1669767653; _gat_UA-116614915-1=1; _uetsid=d9945d30704411ed9fb4fb51d2101457; _uetvid=d9947ce0704411ed8344219064ba391b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:54 GMT
content-type: font/otf
content-length: 123676
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:05 GMT
etag: W/"1e31c-18453f8cc48"
access-control-allow-origin: *
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-5W96X2ESK5>m=2oebs0&_p=1068108975&cid=718944744.1669767653&ul=en-us&sr=1280x1024&_s=1&sid=1669767652&sct=1&seg=0&dl=https%3A%2F%2Fsignup.resources4relief.com%2Flp&dt=Sign%20Up&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-5W96X2ESK5>m=2oebs0&_p=1068108975&cid=718944744.1669767653&ul=en-us&sr=1280x1024&_s=1&sid=1669767652&sct=1&seg=0&dl=https%3A%2F%2Fsignup.resources4relief.com%2Flp&dt=Sign%20Up&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-5W96X2ESK5>m=2oebs0&_p=1068108975&cid=718944744.1669767653&ul=en-us&sr=1280x1024&_s=1&sid=1669767652&sct=1&seg=0&dl=https%3A%2F%2Fsignup.resources4relief.com%2Flp&dt=Sign%20Up&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://signup.resources4relief.com
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://signup.resources4relief.com
date: Wed, 30 Nov 2022 00:20:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.1.0/css/all.css
172.64.132.15200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.1.0/css/all.css
IP 172.64.132.15:0
GET /releases/v5.1.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://signup.resources4relief.com
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: text/css
x-amz-id-2: ob0KcqtfamP42pd9dqJBHe+QQ7Z/ujDcx7Wvknsivehv6TRdT3qYTs7xRq+twGfonW4O+REkOvs=
x-amz-request-id: Y17SBZC1EKWKRGF5
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:30:31 GMT
etag: W/"826c57385f3d35cfed5478ba7b1f5c03"
cache-control: max-age=31556926
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JyshO74yVcEgmQVfdaWRHiHho3I%2F2I%2BYtSSQNaX6Jd6ieNVoY4ipGbqjm7ZGwgc203MimxDyoVgz5sp8xd%2FYIgDXZqylrVv5GmKYKFcTNmtE1CSUCrNwWLIRZvsxLl1er28UChVy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771f6b7079e37511-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
resources4me.com/vendor/js/jquery.min.js
35.170.124.222200 OK 0 B URL HTTP/2 resources4me.com/vendor/js/jquery.min.js
IP 35.170.124.222:0
GET /vendor/js/jquery.min.js HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: application/javascript; charset=UTF-8
content-length: 86927
server: nginx/1.10.3
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"1538f-18453f8d030"
access-control-allow-origin: *
X-Firefox-Spdy: h2
resources4me.com/vendor/css/bootstrap.min.css
35.170.124.222200 OK 0 B URL HTTP/2 resources4me.com/vendor/css/bootstrap.min.css
IP 35.170.124.222:0
GET /vendor/css/bootstrap.min.css HTTP/1.1
Host: resources4me.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://signup.resources4relief.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:52 GMT
content-type: text/css; charset=UTF-8
server: nginx/1.10.3
vary: Accept-Encoding
x-powered-by: Express
cache-control: public, max-age=0
last-modified: Mon, 07 Nov 2022 21:22:06 GMT
etag: W/"2606f-18453f8d030"
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
hittrc.com/?c=18961&first=Tobi&last=Kerns&email=kernstobitobinr@gmail.com&phone=17653500478&zip=47933&l=&sc=
188.114.96.1302 Found 0 B URL HTTP/2 hittrc.com/?c=18961&first=Tobi&last=Kerns&email=kernstobitobinr@gmail.com&phone=17653500478&zip=47933&l=&sc=
IP 188.114.96.1:0
GET /?c=18961&first=Tobi&last=Kerns&email=kernstobitobinr@gmail.com&phone=17653500478&zip=47933&l=&sc= HTTP/1.1
Host: hittrc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Wed, 30 Nov 2022 00:20:50 GMT
content-type: text/html; charset=utf-8
location: https://www.brmclick.com/aff_c?offer_id=422&aff_id=8&aff_sub=SMS&aff_sub2=309096486&first=Tobi&last=Kerns&email=kernstobitobinr@gmail.com&phone=17653500478&zip=47933
cache-control: private
set-cookie: ASP.NET_SessionId=r0dtfivwwq3m4rloov4pymb1; path=/; HttpOnly; SameSite=Lax
trkr=317914141; expires=Wed, 07-Dec-2022 00:20:50 GMT; path=/; secure
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qhhnU%2F%2FnKP2IbVuKppo23kHM%2FuUJzI%2Bi4y1AFAYIrt%2FtWQDsook3kSOtbvYW5U4QLI5ao8AwqiMvwnk2PjvMNbPIbsolCquwkZo4dFrfF1MwW66V%2BD3XH0%2BvFYIE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771f6b63ad24b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
signup.resources4relief.com/lp
35.170.124.222200 OK 0 B URL HTTP/2 signup.resources4relief.com/lp
IP 35.170.124.222:0
GET /lp HTTP/1.1
Host: signup.resources4relief.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: text/html; charset=UTF-8
server: nginx/1.10.3
vary: Accept-Encoding
x-powered-by: Express
cache-control: public, max-age=0
last-modified: Mon, 21 Nov 2022 15:17:39 GMT
etag: W/"f5cb-1849ac42e38"
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,300,600&subset=cyrillic,latin
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,300,600&subset=cyrillic,latin
IP 142.250.74.106:0
GET /css?family=Open+Sans:400,300,600&subset=cyrillic,latin HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 00:20:51 GMT
date: Wed, 30 Nov 2022 00:20:51 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js
104.18.225.52200 OK 0 B URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP 104.18.225.52:0
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://signup.resources4relief.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 00:20:51 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 1457
expires: Sat, 03 Dec 2022 00:20:51 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 771f6b705beab4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2