Overview

URLwww.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
IP 45.76.242.218 (United States)
ASN#20473 AS-CHOOPA
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-12 22:35:26 UTC
StatusLoading report..
IDS alerts0
Blocklist alert34
urlquery alerts No alerts detected
Tags None

Domain Summary (19)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ocsp.pki.goog (3) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.35
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
js.hs-scripts.com (1) 2571 2018-01-31 16:47:28 UTC 2022-11-12 07:31:55 UTC 104.17.213.204
fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-11-12 21:30:48 UTC 142.250.74.10
forms.hsforms.com (1) 5160 2018-03-07 15:21:13 UTC 2022-11-12 07:31:56 UTC 104.16.89.5
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-12 05:57:21 UTC 34.117.237.239
maps.googleapis.com (1) 33876 2014-10-18 20:19:59 UTC 2022-11-12 16:11:55 UTC 142.250.74.42
js.hscollectedforms.net (1) 5697 No data No data 104.17.130.171
js.hs-analytics.net (1) 2411 2013-10-01 15:49:45 UTC 2022-11-12 10:01:10 UTC 104.17.68.176
js.hsforms.net (1) 7264 2013-10-01 13:04:03 UTC 2022-11-12 08:22:06 UTC 104.17.184.73
r3.o.lencr.org (7) 344 No data No data 23.36.76.226
maps.google.com (1) 1899 2016-05-21 18:40:38 UTC 2022-11-12 11:45:38 UTC 216.58.211.14
forms.hubspot.com (1) 3593 No data No data 104.19.155.83
ocsp.digicert.com (7) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-12 06:07:04 UTC 34.102.187.140
www.cpicapital.ca (56) 0 No data No data 45.76.242.218 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.27.12.161
cdnjs.cloudflare.com (5) 235 2015-04-17 20:46:33 UTC 2022-11-12 17:08:07 UTC 104.17.25.14

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/wp-google-map-gold/assets/js/vendor/in (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/wp-google-map-gold/assets/js/maps.js?v (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/Divi/core/admin/fonts/modules/all/modul (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/wp-google-map-gold/assets/js/vendor/ma (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/uploads/2021/02/footer-phone-icon.svg Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/uploads/2021/02/footer-mail-icon.svg Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/uploads/2022/02/wp.svg Phishing
2022-11-12 2 www.cpicapital.ca/wp-includes/css/dist/block-library/style.min.css?ver=a69e (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_r (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/themify-popup/assets/animate.min.css?v (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/Divi/includes/builder/feature/dynamic-a (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/Divi/epanel/shortcodes/js/et_shortcodes (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/uploads/2021/08/CPI_logo_blue.svg Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/uploads/2021/10/pop-logo.svg Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/themify-popup/assets/styles.min.css?ve (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/cpi/style.css?ver=4.17.3 Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/wp-google-map-gold/assets/js/vendor/pr (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/wp-google-map-gold/assets/js/vendor/we (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/blog-designer/public/js/designer.js?ver=1.0 Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes-l (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/blog-designer//admin/css/fontawesome-a (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/cpi/js/jquery.waypoints.min.js?ver=a69e (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/uploads/2021/02/footer-location-icon.svg Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/Divi/core/admin/js/common.js?ver=4.17.3 Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/cpi/style.css?ver=a69e83bcec29e31a4290a (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/blog-designer/public/css/designer_css. (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/Divi/js/scripts.min.js?ver=4.17.3 Phishing
2022-11-12 2 www.cpicapital.ca/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 Phishing
2022-11-12 2 www.cpicapital.ca/wp-includes/js/imagesloaded.min.js?ver=4.1.4 Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/cpi/js/circular-progress.min.js?ver=a69 (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/uploads/2021/11/logo-white.svg Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/plugins/themify-popup/assets/scripts.min.js?ve (...) Phishing
2022-11-12 2 www.cpicapital.ca/wp-content/themes/Divi/style-static.min.css?ver=4.17.3 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 45.76.242.218
Date UQ / IDS / BL URL IP
2022-11-12 22:35:26 +0000 0 - 0 - 34 www.cpicapital.ca/preferred-returns-in-real-e (...) 45.76.242.218


Last 5 reports on ASN: AS-CHOOPA
Date UQ / IDS / BL URL IP
2023-01-30 00:56:32 +0000 0 - 0 - 1 49.winprizes249.monster/es4/coppn2.html?city= (...) 217.69.14.8
2023-01-30 00:56:17 +0000 1 - 0 - 3 49.winprizes249.monster/es4/coppn2.html 217.69.14.8
2023-01-30 00:22:38 +0000 0 - 2 - 0 www.vk4adc.com/web/images/UserFiles/File/PSKR (...) 149.28.177.89
2023-01-29 23:18:59 +0000 0 - 3 - 2 45.32.114.141/xilte/SYtPsYVOaJpNvcqVTOi/ 45.32.114.141
2023-01-29 23:17:56 +0000 0 - 3 - 2 45.32.114.141/xilte/Uqm6Eysf3Hkjwh/ 45.32.114.141


Last 1 reports on domain: cpicapital.ca
Date UQ / IDS / BL URL IP
2022-11-12 22:35:26 +0000 0 - 0 - 34 www.cpicapital.ca/preferred-returns-in-real-e (...) 45.76.242.218


No other reports with similar screenshot

JavaScript

Executed Scripts (46)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (99)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12215
Expires: Sun, 13 Nov 2022 01:58:49 GMT
Date: Sat, 12 Nov 2022 22:35:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5610
Cache-Control: max-age=134971
Date: Sat, 12 Nov 2022 22:35:14 GMT
Etag: "636f75f3-1d7"
Expires: Mon, 14 Nov 2022 12:04:45 GMT
Last-Modified: Sat, 12 Nov 2022 10:31:15 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02"
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8363
Expires: Sun, 13 Nov 2022 00:54:37 GMT
Date: Sat, 12 Nov 2022 22:35:14 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 12 Nov 2022 21:44:03 GMT
cache-control: public,max-age=3600
age: 3071
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4736bac84ca28f2b1e961159fb4ea098
Sha1:   1319612979f53896fcfeacd4215c2715d4951e4c
Sha256: 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
                                        
                                            GET /preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         45.76.242.218
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 12 Nov 2022 22:35:14 GMT
Content-Length: 162
Connection: keep-alive
Location: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 8G3Kb3jhBHgE+VvZFVJ6CMInj34MHgDxdIvnANqRXh8uKv1XRbMCrwxtbt8YZ6wINVH7eeI+g60=
x-amz-request-id: AV6XABG35JNBBGJB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 12 Nov 2022 22:13:10 GMT
age: 1324
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:14 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Retry-After, ETag, Alert, Expires, Backoff, Content-Type, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 12 Nov 2022 22:25:00 GMT
cache-control: public,max-age=3600
age: 614
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A71A3A249082639B2572CADF5344BB6B4B1067E942C423CF671175F98FE658AA"
Last-Modified: Fri, 11 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 13 Nov 2022 04:35:14 GMT
Date: Sat, 12 Nov 2022 22:35:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4893
Cache-Control: max-age=129191
Date: Sat, 12 Nov 2022 22:35:14 GMT
Etag: "636f622c-1d7"
Expires: Mon, 14 Nov 2022 10:28:25 GMT
Last-Modified: Sat, 12 Nov 2022 09:06:52 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: A2VDoJ89Cp1C6eP1j+iwmQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.27.12.161
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CTo0YJLAJb1TaFLp9wOD8DNz8D0=

                                        
                                            GET /preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
content-length: 21243
x-pingback: https://www.cpicapital.ca/xmlrpc.php
link: <https://www.cpicapital.ca/wp-json/>; rel="https://api.w.org/", <https://www.cpicapital.ca/wp-json/wp/v2/posts/12714>; rel="alternate"; type="application/json", <https://www.cpicapital.ca/?p=12714>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
x-cache-status: MISS
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11736), with CRLF, LF line terminators
Size:   21243
Md5:    523573484a767dbb3f0bc7bae8f91d6b
Sha1:   5a93c5f1d764ea5287c1e9a0959ccdbb4f798c34
Sha256: 6cffc6dbb3d38c62fbec4659af54c199f820682ce52e33ba64ce5250b90c8f1c
                                        
                                            GET /ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:15 GMT
content-length: 10158
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf0-ad36"
last-modified: Mon, 04 May 2020 16:04:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2093567
expires: Thu, 02 Nov 2023 22:35:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TFzFlzV3oxT7r86axrE5RTbHJSx7Mb4pK59%2FWbSnckkNJcS%2FroJS2HMU1ax0zkTa7w5lU5PnPn3JXwsrU0syYyykacnvcWNANDwxDmf2vnAmHGuZNzMNUfHMevedF8g%2BMay32P7p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7692bd60a806b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (31997)
Size:   10158
Md5:    da09af9c30411ac4ea58fa932c2bcdf1
Sha1:   3021a222be0168efcad5db279a305485935aeff5
Sha256: 19e819601b91eb75c0609dd6343a344f280a94b83e06e58595bafff5b12ca7f4
                                        
                                            GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:15 GMT
content-length: 845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf0-d17"
last-modified: Mon, 04 May 2020 16:04:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 13469477
expires: Thu, 02 Nov 2023 22:35:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=852Vh6jM1rDp6cdEvf6vJUDmHXzQGBIH9JMQ8BoV0%2BU2ihYQ%2BPgYkw2h8A1nHHEILbbVOmDCW2hoRBxtMN%2Ftfna4m61hynWO253pB37LNo56Kdq2vxEuON0WXdC6ghU8%2Bg%2BuzKqj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7692bd60a801b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3184)
Size:   845
Md5:    156afaf08dd47df971d3a40926c19974
Sha1:   d3f886560b55ff3c39d628ef16a71ca49cb7ecfb
Sha256: e4f93dd20cb7feb2c6d408b396e194928381545d24584431ab341ed094fb31fa
                                        
                                            GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.min.css?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:15 GMT
content-length: 331
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf0-3f5"
last-modified: Mon, 04 May 2020 16:04:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3295815
expires: Thu, 02 Nov 2023 22:35:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mcbXli6IikGDG0x8kAHvv9Y0dUeczSVERNhFTtSz8n2qfw0Tose5vz6ac%2B0gVH7s7j5nTgyD3%2BYJmtpXAGtShdtOuXYza%2BUzQrRfqBcMRTdh9jDNqZAYQ0gaFcjz%2BJirqE%2B7vaLz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7692bd60a807b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (846)
Size:   331
Md5:    c9eb6550c91c2a2f505af3b9acfbd9f5
Sha1:   9db062adb9e1f8b45ba84af5e55dd38587ddabc6
Sha256: c64f83ee7947be6b299005510b64a85d5dd88998275f1ca498e27bad15ba35bc
                                        
                                            GET /ajax/libs/featherlight/1.7.13/featherlight.min.js?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:15 GMT
content-length: 3183
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e59-2404"
last-modified: Mon, 04 May 2020 16:10:01 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 13738584
expires: Thu, 02 Nov 2023 22:35:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EEKcCkeymiIcDq7IQrKXi1k%2FLhtgKx%2BxCicE35t8rm344Qdn7jJn3Bgms2cI1ikgK4dyE4oDWT3Np4VO7MZ57HbCcvVTcXW%2FCYxKH%2BkpBLDLdWYKtsApzOMWFYMme%2BJ0OpltBFkz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7692bd60a804b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (9022)
Size:   3183
Md5:    91329d51948ec272fbea3fe5f1ddbf76
Sha1:   62cef759cab458fdaedd6b77704583b74d4461d5
Sha256: 6bc62626aedf22daa034d876673f2ce8ddac67a17a8496aa0bbd6255632263aa
                                        
                                            GET /ajax/libs/featherlight/1.7.13/featherlight.min.css?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:15 GMT
content-length: 599
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e59-74c"
last-modified: Mon, 04 May 2020 16:10:01 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9942773
expires: Thu, 02 Nov 2023 22:35:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YD1Xt%2BanYh5YurSS3fQWT2JIcR0eo255JAWlDHJQiJZXtspRXUl3Ptw4nJREb8iGXn3n%2BlPTelrU098j4kjgrhSYA%2BP3oVeMT72zX2nIsxqeezv5NnTQ7%2F7QMuIztKaSZ4S7l4A5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7692bd60b81cb527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1670)
Size:   599
Md5:    c66929867945e0643a65a84d10ca76b2
Sha1:   77e1859371a8d6d74ffbf952827b2f16bfdfe344
Sha256: 18e7c9d4fee6bfc6b027275b8a06670cc7814a8df5919da21bac579557597e07
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5359
Cache-Control: max-age=149083
Date: Sat, 12 Nov 2022 22:35:16 GMT
Etag: "636fae10-116"
Expires: Mon, 14 Nov 2022 15:59:59 GMT
Last-Modified: Sat, 12 Nov 2022 14:30:40 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 12 Nov 2022 22:35:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 12 Nov 2022 22:35:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6338
Cache-Control: max-age=134250
Date: Sat, 12 Nov 2022 22:35:16 GMT
Etag: "636f704c-117"
Expires: Mon, 14 Nov 2022 11:52:46 GMT
Last-Modified: Sat, 12 Nov 2022 10:07:08 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3241
Expires: Sat, 12 Nov 2022 23:29:17 GMT
Date: Sat, 12 Nov 2022 22:35:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3241
Expires: Sat, 12 Nov 2022 23:29:17 GMT
Date: Sat, 12 Nov 2022 22:35:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3241
Expires: Sat, 12 Nov 2022 23:29:17 GMT
Date: Sat, 12 Nov 2022 22:35:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3241
Expires: Sat, 12 Nov 2022 23:29:17 GMT
Date: Sat, 12 Nov 2022 22:35:16 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bfc69f5-02e2-48e4-a7f8-345ee02dd656.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11187
x-amzn-requestid: 475229e1-bbb5-43a0-8733-1140a99b6b6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEIaqFFrIAMF7KA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364baaa-4261a60e57ae0c4d7a62e5e9;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 07:09:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NOu_3OBXieJtRp3_FbCykAhx3laNraMMTqFKfjXIiV6QqPTeUYsnfQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 06:02:50 GMT
age: 59546
etag: "399ce32b1fdcdef9061bddb840663f35e39b919a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11187
Md5:    4f181df0e475c123b46f016d3c0bbaa5
Sha1:   399ce32b1fdcdef9061bddb840663f35e39b919a
Sha256: ed9ba753f718903cd997c027f58b63f41e32107367b22b03f964d7eecdf9ba16
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd2698a2-6980-44f7-aa49-52cc55dc0647.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6327
x-amzn-requestid: 4228ad59-2113-4457-b225-fd931b5e1092
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bUquTE1KoAMFi1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636b57f4-353d91f526e7efb9088c8692;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 07:34:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: F_cpNY6oFlOj9NvJXbdyFHpGZlkn_5jzUwLpiOqNs8I_zQbEgVKN_w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 21:55:53 GMT
age: 2363
etag: "bba046058fb4144e78ccc43e22baa873c1cd396d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6327
Md5:    9089a86b213cc0f8701c5ce6ed1a135a
Sha1:   bba046058fb4144e78ccc43e22baa873c1cd396d
Sha256: 9929557912911c1afa95ad55509fbda53d7755e5b0f7eb33adf4f8ee9a9f61de
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4da03871-10a1-4d64-8f01-11282f1f6f20.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13931
x-amzn-requestid: 3f6caf57-b687-4d1b-af40-a21bbebaff95
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEI_KFf2IAMFwgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364bb94-23ae7ecd18dc41521e172237;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 07:13:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CoDvVLQV5-9tqbMiKDNkb6y-U0EGO36WHPtZ3Am-eGbPdGLXd7tNYA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 03:53:05 GMT
age: 67331
etag: "29d00e0276be7b87b759d78edbb3851c52e4db86"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13931
Md5:    dbfb6798f32968c8e68ba386edf23794
Sha1:   29d00e0276be7b87b759d78edbb3851c52e4db86
Sha256: 4379cce07bdfea4da27c1f158d1c16928346f8ebdf00272737fd1cf1c75f5fee
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a9d38fc-0dee-4412-bfef-620ec5ad637d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8699
x-amzn-requestid: b8c0d987-2ca4-4fb5-b2a2-6f262ac3e9f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bHbGiEBMIAMFxzQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63660bc3-0a4863164f8313e1310700c6;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 07:07:47 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fhGr0dGIo-khJAPKA0t5WUzrrjziu4cfG1qAcLdR2QQGAfvsDoeCBw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 03:21:55 GMT
age: 69201
etag: "48fa15cd9d04448bcfde91d3fdef1ff3ff16d8a4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8699
Md5:    0077b7342ec253df4859e37e6bd05e80
Sha1:   48fa15cd9d04448bcfde91d3fdef1ff3ff16d8a4
Sha256: 9af831fc83059c499c0d45aed0fc6f30154caa972d29ce63a71bbfc6b9e26e88
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8995ae3b-9ed6-4d82-aeda-bce16829dd81.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7018
x-amzn-requestid: 35b9ea76-0024-42a6-9561-f2f87fa09f70
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bHcAoGLUIAMFkVA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63660d37-29eb6d7d6379fff612a6a593;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 07:13:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _Lgx5YJ1SaHAGB2vH0VIXW7Hu6ZIjdvyLjo3XFasEXqUNqCeKzLqJQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 04:07:30 GMT
age: 66466
etag: "eba0fcacc61aed15fe7c4aa11a951e1b681f08d2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7018
Md5:    8bb9138fde16b4052595c61c9aae69a1
Sha1:   eba0fcacc61aed15fe7c4aa11a951e1b681f08d2
Sha256: 11b98e67b1e869b2456ace0e07aa6f5019d15f43c8132f482c76e322282d8e63
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcda76b4a-e2cf-4a4f-903b-a939ac862b71.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11388
x-amzn-requestid: 476bbb49-4bd4-408f-b82f-3dfd52dcf7ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bgfNdEYsoAMF0HA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63701255-06630c41353045dc5e5d58b8;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 21:38:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -wI4Gprap42Eewd0DwppPQcSN4Bj5LX-PDAGk-eo-UCk8TuX_Dd9_A==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 21:54:29 GMT
age: 2447
etag: "58ebbd459c47d5f773da1da77f370286e006ae30"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11388
Md5:    3fd9f2cf5d5cbda75b55b310034f8294
Sha1:   58ebbd459c47d5f773da1da77f370286e006ae30
Sha256: 6b04a734b7e10e329df43e107462906f1690c95783cad69d56a412955b88d66e
                                        
                                            GET /maps/api/js?key=AIzaSyDMG5PTq_3M3Pc0jf4nwpfmNV1D8lLKU2U&libraries=geometry%2Cplaces%2Cweather%2Cpanoramio%2Cdrawing&language=en&ver=5.2.8 HTTP/1.1 
Host: maps.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.211.14
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
date: Sat, 12 Nov 2022 22:35:16 GMT
expires: Sat, 12 Nov 2022 23:05:16 GMT
cache-control: public, max-age=1800
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 58623
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=26
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2403)
Size:   58623
Md5:    75c9153af6f0a9656250d9182ed5eb5d
Sha1:   12d0eee778c7a320f59447ffe97966af6610d69b
Sha256: 4d36a69921b35b4836666004c1f90800df5ccf027d393c1b5e3146442942c077
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 12 Nov 2022 22:35:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6338
Cache-Control: max-age=134250
Date: Sat, 12 Nov 2022 22:35:16 GMT
Etag: "636f704c-117"
Expires: Mon, 14 Nov 2022 11:52:46 GMT
Last-Modified: Sat, 12 Nov 2022 10:07:08 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /wp-content/themes/Divi/js/smoothscroll.js?ver=4.17.3 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 02 May 2022 05:52:19 GMT
vary: Accept-Encoding
etag: W/"626f7193-1652"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5644)
Size:   2712
Md5:    aa134efbae0a7d18ed616d32c23be3dc
Sha1:   a052d3aab005399b087c6df6f94557d3aa3f0b28
Sha256: 7d91b6c8ebd7d3b600c01c11bd2c62b6bcd4124ea90f292feffcb08038351d0b
                                        
                                            GET /wp-content/uploads/2021/11/st-ca.png HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
content-length: 4287
last-modified: Mon, 22 Nov 2021 05:42:24 GMT
etag: "619b2dc0-10bf"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 358 x 129, 8-bit colormap, non-interlaced\012- data
Size:   4287
Md5:    ff086011bafe741c24d1d0e6125f8495
Sha1:   5e8224a0e3732c3821869e7de832d54b9211b28a
Sha256: b4735246f632268064c1f9d27a767409a3bf5439f54db6f0bc0ed1d661e1e59c
                                        
                                            GET /wp-content/uploads/2021/11/yahoo-finance-logo-1024x375white.png HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
content-length: 3879
last-modified: Mon, 22 Nov 2021 07:10:27 GMT
etag: "619b4263-f27"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1024 x 375, 1-bit colormap, non-interlaced\012- data
Size:   3879
Md5:    53f5a31794bc82a87db1df8f82eda128
Sha1:   038b57c55401de41cf66d0184908dd946516f661
Sha256: d07bf26fdc9ac391394b32365b40e7da3d88fbeb6355116eb21bf0f25bcd92ef
                                        
                                            GET /wp-content/uploads/2021/11/forbes-logo-black-and-white-1280x478.png HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
content-length: 15737
last-modified: Mon, 22 Nov 2021 07:11:45 GMT
etag: "619b42b1-3d79"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1280 x 478, 8-bit colormap, non-interlaced\012- data
Size:   15737
Md5:    53bcdce9949570d7c506615f606f98cd
Sha1:   2ca4e992cd7fbc52a745f172c4760881c4bfa6b8
Sha256: 71dd7391b7a40264692f797a72d4bea00c9bbe44718d21f9d341e6ca7fa1a602
                                        
                                            GET /wp-content/uploads/2022/04/25-fundamental-questions-book-300x300.png HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
content-length: 19917
last-modified: Sat, 30 Apr 2022 06:02:23 GMT
etag: "626cd0ef-4dcd"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Size:   19917
Md5:    b1c0867dc8382cc2844f19b143dc06fc
Sha1:   d0a4180717fd76c9a905933ebec311af07164fcf
Sha256: bcf2723b19f126a8d52fbe1f9efc2b496102f27df74f39c8895675f3cd2f13f8
                                        
                                            GET /wp-content/uploads/2022/05/Ava-avatar.jpg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
content-length: 5885
last-modified: Fri, 06 May 2022 07:06:48 GMT
etag: "6274c908-16fd"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 100x100, components 3\012- data
Size:   5885
Md5:    b718795cb0afc999844a275939911e44
Sha1:   da7d459064755706ffd7d8f4cc488ab01d9d4433
Sha256: ec63c8934d3293f99a5c1aff1e2e0e281d3e758322a69bd713daec37234cacc6
                                        
                                            GET /wp-content/uploads/2022/04/CPI-capital_Preferred-Returns-Explained-in-Real-Estate-Private-Equity-syndications-2-1280x854.jpg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
content-length: 96294
last-modified: Thu, 28 Apr 2022 14:09:23 GMT
etag: "626aa013-17826"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1280x854, components 3\012- data
Size:   96294
Md5:    68b426d9ae2390ca507c7229699f2ec8
Sha1:   2d7b5ef358d8e5c5c13e5104b2ee6f0cbdc46e6f
Sha256: 9835820c92bf233084bf8c1f6257a44f07884235a2c41278f4806ff8f489f9d8
                                        
                                            GET /wp-content/uploads/2022/03/happy-family-laptop.jpg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
content-length: 90589
last-modified: Tue, 15 Mar 2022 18:59:15 GMT
etag: "6230e203-161dd"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1000x667, components 3\012- data
Size:   90589
Md5:    ccee945542eb4437680bcc9923fae4e7
Sha1:   6bc2def02eceede976ece46a25934c66171fef44
Sha256: be19dae818470a56e856fa62c85987ad8a33965e746be72402e8c3eb37fcc476
                                        
                                            GET /wp-content/uploads/2021/10/Brochure_Cover_Mockup.png HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
content-length: 128425
last-modified: Wed, 20 Oct 2021 19:37:53 GMT
etag: "61707011-1f5a9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 719 x 572, 8-bit colormap, non-interlaced\012- data
Size:   128425
Md5:    2a6d9b6a8ca73a1529e2aaf27e2149c4
Sha1:   78f9179cf1c5864dcd535376ac342bcaf441b99b
Sha256: e97b42e695a1f9949370e5912674735c145ceb1818c5b9fe22bc8e1a1879170a
                                        
                                            GET /wp-content/plugins/themify-popup/assets/lightbox.min.css?ver=1.3.5 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Tue, 06 Sep 2022 13:42:15 GMT
vary: Accept-Encoding
etag: W/"63174e37-1794"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6034), with CRLF line terminators
Size:   1840
Md5:    9c047306f14a497e29c65968f966a590
Sha1:   f676501e7b49f586c979a536088cb56772465cb7
Sha256: d9034fc1a72bee54e8297c01fa0add00633d8b93d8108023f44be7533e7b766d
                                        
                                            GET /wp-content/plugins/wp-google-map-gold/assets/js/vendor/infobox/infobox.js?ver=5.2.8 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Wed, 20 Oct 2021 13:41:29 GMT
vary: Accept-Encoding
etag: W/"61701c89-6b84"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   43589
Md5:    d923ba9ed00efcfbfaf42a4835927dce
Sha1:   317c3d45b7f6d2ac90252eb6ea649ff08f77e760
Sha256: 07881c11ff494fa5c718ce02c18f94d3f4871f6c0d579a01a3e26355f00f6299

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/wp-google-map-gold/assets/js/maps.js?ver=5.2.8 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Wed, 20 Oct 2021 13:41:29 GMT
vary: Accept-Encoding
etag: W/"61701c89-35fd2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   74340
Md5:    e626653972ddaf5fa1fa1d9ef69a6356
Sha1:   93bb976251d338bfce569823592850acf8cf487b
Sha256: b5b9500111b30f4c2a940ee079719883cbfce7ec128fad4e89cfd1b547fd329e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/cpi/js/global.js?1769084972=1015012177&ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Fri, 22 Oct 2021 09:48:23 GMT
vary: Accept-Encoding
etag: W/"617288e7-332e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   41249
Md5:    6d14f811689089deb9b8d52491874c5f
Sha1:   ef34211466d6356ac1d023f88215e64d32a8b8fa
Sha256: fcc2e9f1d9e1182d904a585b3af149d4562c6aca2d5d1ed1b25afbe590e7be04
                                        
                                            GET /wp-content/themes/cpi/js/aligner.js?61936004=1598113653&ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Wed, 20 Oct 2021 13:41:35 GMT
vary: Accept-Encoding
etag: W/"61701c8f-351"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (385)
Size:   50705
Md5:    1c8cb90171d7259267486d28a1df57c5
Sha1:   574cbc4028d21adafe894f6bb22b30104bd5bd73
Sha256: 41f818f96b4b41f768d8c5f9d9f72cba62336b5ebad04ef4f086eef27cc911cf
                                        
                                            GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.ttf HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/wp-content/themes/Divi/style-static.min.css?ver=4.17.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/octet-stream
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
content-length: 92400
last-modified: Mon, 02 May 2022 05:52:18 GMT
etag: "626f7192-168f0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules \012- data
Size:   92400
Md5:    de27b3e66b2f8017e000aa9d8d24d60e
Sha1:   e6d716de8f35ba6daf55d57e7fe0ed8d8e50f1f7
Sha256: d201a2c3118a00c82cc48e89815f5139f23956bbe248107dcf522acc77b97c09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Thu, 18 Mar 2021 19:37:16 GMT
vary: Accept-Encoding
etag: W/"6053abec-71b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1626)
Size:   909
Md5:    e84101608dc4c5a3c3e64834f237ae3f
Sha1:   b41c2ad22995e83c931944495744ccfd653c7843
Sha256: a85e7e889540136badcbbcd78cff3f729d266d35f0d8423e033e1d9bffb16c91

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/wp-google-map-gold/assets/js/vendor/markerclustererplus/markerclustererplus.js?ver=5.2.8 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Wed, 20 Oct 2021 13:41:29 GMT
vary: Accept-Encoding
etag: W/"61701c89-d043"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   201868
Md5:    0d6c014e366030d56cf19b9dbe201c8e
Sha1:   fadfcd8d239de1889798d3260ffe281716fa9929
Sha256: e72988e0fc2db22f72e1dd4288c1107d67685db9359208bbe9718dfcaa510868

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2021/02/footer-phone-icon.svg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 20 Sep 2021 21:30:46 GMT
vary: Accept-Encoding
etag: W/"6148fd86-225"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   486018
Md5:    7cd4d9d642710995504dcf603ba7f680
Sha1:   a67bd237204a67dbf6ac60d46978080d5a7613ba
Sha256: 6e6d2b94b0cc070850a3d089ad3345d8a64d191eb39ca03f849efe3c41754baf

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5211
Cache-Control: max-age=160856
Date: Sat, 12 Nov 2022 22:35:17 GMT
Etag: "636fdca2-117"
Expires: Mon, 14 Nov 2022 19:16:13 GMT
Last-Modified: Sat, 12 Nov 2022 17:49:22 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5211
Cache-Control: max-age=160856
Date: Sat, 12 Nov 2022 22:35:17 GMT
Etag: "636fdca2-117"
Expires: Mon, 14 Nov 2022 19:16:13 GMT
Last-Modified: Sat, 12 Nov 2022 17:49:22 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cpicapital.ca
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.42
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                        
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 12 Nov 2022 22:35:17 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.cpicapital.ca
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   23
Md5:    e3981ca10169a319d5aa062bf43a5fa1
Sha1:   2c6ed584767b65688ce99b1ebe1a3b7448a67421
Sha256: 8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
                                        
                                            GET /wp-content/uploads/2022/04/cropped-favicon-192x192.png HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:17 GMT
content-length: 10695
last-modified: Sun, 17 Apr 2022 07:52:03 GMT
etag: "625bc723-29c7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   10695
Md5:    a6fdb075a0e5f2305d95a9bae583b7f5
Sha1:   d85497416b2603c9169d32fb9b1fee4b5560f1e6
Sha256: 4d47cf2fbfb1ceec46d850e8f246998e9eec534b657b3c39c3573efbc4f253ce
                                        
                                            GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Thu, 18 Mar 2021 19:37:16 GMT
vary: Accept-Encoding
etag: W/"6053abec-5e4a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (23966)
Size:   8222
Md5:    1d06dfe09b6d3ef197b27b3985b4d19f
Sha1:   9f28adb1e02c80104202c9a099cdb743898d59a4
Sha256: 20992c74a841fcebf8bb2fb3d70458a090f8cbaae1fadeda4b37c13b3e0c92df
                                        
                                            GET /wp-content/uploads/2021/02/footer-mail-icon.svg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 20 Sep 2021 21:30:46 GMT
vary: Accept-Encoding
etag: W/"6148fd86-304"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (668)
Size:   69967
Md5:    94fb3b08ff8de29c10a5a21cbbe8c4ec
Sha1:   1b4a8e7f5cc951e295a45688df236b809e8001fb
Sha256: 7770b09887ad3c6e15f94bb8fc4772a906abf621945861120ee32c14de5b9203

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2022/02/wp.svg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 07 Feb 2022 11:30:59 GMT
vary: Accept-Encoding
etag: W/"620102f3-4c6"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1268)
Size:   63045
Md5:    a21f91b340edb8a435f809517b5099f7
Sha1:   f8d204e95b4879079ae43e3a0a003077d9e04239
Sha256: 0f027d79f41a4f723dd8ce2914ed8263312ce5c93838d20a4c1d6edb2d3156f3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15103da1-5996-4497-9ec1-6bf49292c35c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9708
x-amzn-requestid: 08ff92c4-61ac-490e-9c5b-0c3e97abb6fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bBpBDGjPoAMFV8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6363bba0-7a0b97ea587f036e33c43e5f;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 13:01:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: B-VFR3675yhlwYVLgxGl9621BEfaTzCwdxglY0z07efK3bJ1cCzGqA==
via: 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 04:57:42 GMT
age: 63460
etag: "b96ef6b0060b6dd83475728986ff333faf35c4b6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9708
Md5:    b3ce8ed12a73c0d1cc9a5f838bff34c8
Sha1:   b96ef6b0060b6dd83475728986ff333faf35c4b6
Sha256: 12466854c0ba0cf11043d6b0ef171c8d6645e6d7f4de4211e1426d0c883a0d96
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Wed, 21 Sep 2022 05:18:39 GMT
vary: Accept-Encoding
etag: W/"632a9eaf-15b64"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /8021107.js?integration=WordPress&ver=9.0.397 HTTP/1.1 
Host: js.hs-scripts.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.213.204
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:16 GMT
x-trace: 2B27D8861AD6D5D2B2D901D6DB290AD36662E2EBAE000000000000000000
cache-control: public, max-age=60
vary: origin, Accept-Encoding
x-hubspot-correlation-id: bee7e384-f251-4fc0-8b38-65c90baf0b9b
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-origin: https://www.cpicapital.ca
last-modified: Sat, 12 Nov 2022 22:35:16 GMT
cf-cache-status: MISS
expires: Sat, 12 Nov 2022 22:36:16 GMT
server: cloudflare
cf-ray: 7692bd6129a9b505-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css?ver=4.17.3 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 02 May 2022 05:52:18 GMT
vary: Accept-Encoding
etag: W/"626f7192-f6e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/themify-popup/assets/animate.min.css?ver=3.6.2 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Tue, 06 Sep 2022 13:42:15 GMT
vary: Accept-Encoding
etag: W/"63174e37-3235"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.17.3 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 02 May 2022 05:52:18 GMT
vary: Accept-Encoding
etag: W/"626f7192-d15"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/Divi/epanel/shortcodes/js/et_shortcodes_frontend.js?ver=4.17.3 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 02 May 2022 05:52:18 GMT
vary: Accept-Encoding
etag: W/"626f7192-362d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2021/08/CPI_logo_blue.svg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 20 Sep 2021 21:30:46 GMT
vary: Accept-Encoding
etag: W/"6148fd86-6af"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2021/10/pop-logo.svg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 18 Oct 2021 16:20:28 GMT
vary: Accept-Encoding
etag: W/"616d9ecc-b1e"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/themify-popup/assets/styles.min.css?ver=1.3.5 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Tue, 06 Sep 2022 13:42:15 GMT
vary: Accept-Encoding
etag: W/"63174e37-26b4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/cpi/style.css?ver=4.17.3 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Thu, 02 Dec 2021 13:23:55 GMT
vary: Accept-Encoding
etag: W/"61a8c8eb-d52"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/cpi/css/index.css?21942146=1265344100&ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Tue, 08 Feb 2022 08:41:51 GMT
vary: Accept-Encoding
etag: W/"62022ccf-27395"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/blog-designer/public/js/ticker.min.js?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Sat, 12 Nov 2022 18:10:14 GMT
vary: Accept-Encoding
etag: W/"636fe186-1f90"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /collectedforms.js HTTP/1.1 
Host: js.hscollectedforms.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cpicapital.ca
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.17.130.171
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:17 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 13 Sep 2022 10:41:10 UTC
etag: W/"7a468b833be86c01bc8dfd455308f792"
x-amz-server-side-encryption: AES256
x-amz-version-id: 5afLcxIjU5LfvvyyfvxzjsWXufXHSL1t
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 736ad67f05a9a5a8fd5ed8cba30196f4.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: J7w3SJS4lzMrb0OikyuH9V8zdSy7lu35i_RitfgIMKE3vbjb0AdH9g==
cache-control: s-maxage=86400, max-age=0
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=collected-forms-embed-js/static-1.292/bundles/project.js&cfRay=7692bd65ef46b51e-IAD
x-hs-target-asset: collected-forms-embed-js/static-1.292/bundles/project.js
x-hs-cache-status: MISS
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: MISS
server: cloudflare
cf-ray: 7692bd65ef46b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /analytics/1668292500000/8021107.js HTTP/1.1 
Host: js.hs-analytics.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.68.176
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Sat, 12 Nov 2022 22:35:18 GMT
x-amz-id-2: 3v8381JcC9LpM0L0XAajTYVkHXp8pociCLrwOlUK3FTMh81LU0UmzLD7/AapaZjwKij8CYvVzeM=
x-amz-request-id: QG8PT0X76ERSZY0F
last-modified: Fri, 04 Nov 2022 20:40:18 GMT
etag: W/"3e85443b436247b33984169f78342537"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: null
access-control-allow-credentials: false
vary: origin, Accept-Encoding
expires: Sat, 12 Nov 2022 22:40:18 GMT
cf-cache-status: MISS
server: cloudflare
cf-ray: 7692bd69ec9ab518-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/wp-google-map-gold/assets/js/vendor/print/print.js?ver=5.2.8 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Wed, 20 Oct 2021 13:41:29 GMT
vary: Accept-Encoding
etag: W/"61701c89-1571"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/wp-google-map-gold/assets/js/vendor/webfont/webfont.js?ver=5.2.8 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Wed, 20 Oct 2021 13:41:29 GMT
vary: Accept-Encoding
etag: W/"61701c89-3384"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/blog-designer/public/js/designer.js?ver=1.0 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Sat, 12 Nov 2022 18:10:14 GMT
vary: Accept-Encoding
etag: W/"636fe186-2738"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /forms/embed/v2.js?ver=9.0.397 HTTP/1.1 
Host: js.hsforms.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.184.73
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:16 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 08 Nov 2022 04:03:44 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: T7pj.HiqNlA.Pcmc9ZVDzn.xAZqxkDRz
etag: W/"829df6637e6c45155215adcc9a4c3116"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f01dafb3bec9893b47152910d47900a4.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: 8jWqtY9nKLPZxsl47TsVNvToC3pFNnUkqY0RqnV_1Y_AqwwwNjBWow==
cache-control: s-maxage=600, max-age=300
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=forms-embed/static-1.2310/bundles/project-v2.js&cfRay=7671bea22d4eb4f1-IAD
x-hs-target-asset: forms-embed/static-1.2310/bundles/project-v2.js
access-control-allow-origin: *
x-hs-cache-status: HIT
cache-tag: staticjsapp-forms-embed-v2-web-prod,staticjsapp-prod
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xiGn4TUHRtwiT980QFJyu9TtgHFw32o%2B19pAU0B4xCQ9Mj9%2BHaPVXUAvDyeQz8c%2B6%2FLd8Cz%2BvBzvp7XnVZcNjbLVqAdK%2FEelo%2F1NRxOfQlNAYvnBDWFWp1Xa6qCXW%2Bxn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7692bd615ad50b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes-legacy.css?ver=4.17.3 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 02 May 2022 05:52:18 GMT
vary: Accept-Encoding
etag: W/"626f7192-8c8d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/blog-designer//admin/css/fontawesome-all.min.css?ver=1.0 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Sat, 12 Nov 2022 18:10:14 GMT
vary: Accept-Encoding
etag: W/"636fe186-8a8f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Wed, 20 Oct 2021 13:54:19 GMT
vary: Accept-Encoding
etag: W/"61701f8b-15db1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/cpi/js/jquery.waypoints.min.js?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Wed, 20 Oct 2021 13:41:35 GMT
vary: Accept-Encoding
etag: W/"61701c8f-2167"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /collected-forms/v1/config/json?portalId=8021107&utk= HTTP/1.1 
Host: forms.hubspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cpicapital.ca
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.19.155.83
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:17 GMT
vary: origin
x-hubspot-correlation-id: f15b75cf-26c3-4063-a8af-d487786a5060
access-control-allow-credentials: false
access-control-allow-origin: https://www.cpicapital.ca
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: *
access-control-max-age: 180
x-robots-tag: none
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=l6CEUii9XTrGliG.dXLUsll4kM7adJWWNuMS6d7Alrc-1668292517-0-AYZGJQCxiEfLUFyNkhfvAqySwhD2tyzDHe6bCZRc/N9hU7Bt51iYr48Gyj+KRDcwxQCZ1/kJU4rmPGhNT0e9kXY=; path=/; expires=Sat, 12-Nov-22 23:05:17 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VS%2FNNHmRrHslWl4gd9nQoubltsCbdVS5TIDtDLzNVFLzxfYhjn3eoxrNSdv7kuErE63T0J%2BEHdzPxhrwVKcXHz7rvhBDNiq7bEXf%2FsV1zdOTFdJs5Ka9QGbtH61jzidhYdxH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7692bd68fabfb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2021/02/footer-location-icon.svg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 20 Sep 2021 21:30:46 GMT
vary: Accept-Encoding
etag: W/"6148fd86-1a5"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.17.3 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 02 May 2022 05:52:18 GMT
vary: Accept-Encoding
etag: W/"626f7192-53f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/cpi/style.css?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Thu, 02 Dec 2021 13:23:55 GMT
vary: Accept-Encoding
etag: W/"61a8c8eb-d52"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/better-click-to-tweet/assets/css/styles.css?ver=3.0 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Sat, 12 Nov 2022 18:09:52 GMT
vary: Accept-Encoding
etag: W/"636fe170-809"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-includes/js/comment-reply.min.js?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Wed, 21 Sep 2022 05:18:39 GMT
vary: Accept-Encoding
etag: W/"632a9eaf-ba5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/blog-designer/public/css/designer_css.css?ver=1.0 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Sat, 12 Nov 2022 18:10:14 GMT
vary: Accept-Encoding
etag: W/"636fe186-14afe"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.17.3 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 02 May 2022 05:52:19 GMT
vary: Accept-Encoding
etag: W/"626f7193-42cce"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Thu, 18 Mar 2021 19:37:16 GMT
vary: Accept-Encoding
etag: W/"6053abec-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Thu, 18 Mar 2021 19:37:16 GMT
vary: Accept-Encoding
etag: W/"6053abec-15fd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/cpi/js/circular-progress.min.js?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Wed, 20 Oct 2021 13:41:35 GMT
vary: Accept-Encoding
etag: W/"61701c8f-67d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /css2?family=Inter%3Awght%40300%3B400%3B500%3B600%3B700&display=swap&ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Nov 2022 22:35:16 GMT
date: Sat, 12 Nov 2022 22:35:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/Divi/style.css?ver=a69e83bcec29e31a4290adf8c745517d HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Mon, 02 May 2022 05:52:19 GMT
vary: Accept-Encoding
etag: W/"626f7193-158"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/uploads/2021/11/logo-white.svg HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Mon, 22 Nov 2021 07:11:11 GMT
vary: Accept-Encoding
etag: W/"619b428f-4b4"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/themify-popup/assets/scripts.min.js?ver=1.3.5 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:16 GMT
last-modified: Tue, 06 Sep 2022 13:42:15 GMT
vary: Accept-Encoding
etag: W/"63174e37-16cf"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/Divi/style-static.min.css?ver=4.17.3 HTTP/1.1 
Host: www.cpicapital.ca
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.cpicapital.ca/preferred-returns-in-real-estate-private-equity-syndications-explained/?utm_medium=email&_hsmi=211690024&_hsenc=p2ANqtz-_VbZGN2y2EqyhcSIKa2ySP5qyC1y2M5Lze27GCLEe4e9fIj-W9vkdBHKTmQTpIkoYKXujSMVNakU36bbyMgB0EBO7x0g&utm_content=211690024&utm_source=hs_email
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         45.76.242.218
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sat, 12 Nov 2022 22:35:15 GMT
last-modified: Mon, 02 May 2022 05:52:18 GMT
vary: Accept-Encoding
etag: W/"626f7192-c8315"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /embed/v3/form/8021107/c49bd9eb-0f6c-4f94-a750-8d9ed884dce0/json?hs_static_app=forms-embed&hs_static_app_version=1.2310&X-HubSpot-Static-App-Info=forms-embed-1.2310 HTTP/1.1 
Host: forms.hsforms.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cpicapital.ca
Connection: keep-alive
Referer: https://www.cpicapital.ca/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.16.89.5
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
date: Sat, 12 Nov 2022 22:35:17 GMT
x-trace: 2BB806B201748831750B1FE9DB03CCB2F402AFA396000000000000000000
x-origin-hublet: na1
vary: origin
x-hubspot-correlation-id: 1208fca7-ff43-4501-9f40-a63802c11c5e
access-control-allow-origin: https://www.cpicapital.ca
access-control-allow-methods: OPTIONS, GET
access-control-allow-headers: *
access-control-allow-credentials: false
access-control-max-age: 180
access-control-expose-headers: X-Origin-Hublet
cache-control: max-age=0, no-cache, no-store
x-robots-tag: none
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7692bd668f3a0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---