ufaasia365.com/
200 OK 15 kB IP
ASN #20803 LLC Siberian Telecommunications Company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (741), with CRLF line terminators
Hash 3c179bd6fcb62de461fde885ad6dbb37
178787241d0e25a8d8bb4ae878010df2b120ac28
3f25d0fdbcb02548940df9faec01bf468baee010455fcfeab590481f0bdb83db
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET / HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11569
Expires: Sun, 04 Dec 2022 12:53:25 GMT
Date: Sun, 04 Dec 2022 09:40:36 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 67e9370f1bf3e4946a01f346eeae8966
aaab391d1134302d718de7a0d5edbedf884633e6
27a8654fb14db88d4b2bb3b45c1b197fc498cd94143d4a68687742fa48a41358
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1716
Cache-Control: max-age=91152
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:36 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 10:59:48 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11218
Expires: Sun, 04 Dec 2022 12:47:34 GMT
Date: Sun, 04 Dec 2022 09:40:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 09:18:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1332
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1hzmru5bgBoSuhp3q3PoFgOc/gQhlb3FzypOUaAxrS0v4G83246iI2AEE3DX5falYCHefjaqCm4=
x-amz-request-id: 7VE0QG53JAACBFE9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 08:47:29 GMT
age: 3187
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 09:40:36 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/flickity/flickity.min.css?package=Rbfcu
200 OK 655 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/flickity/flickity.min.css?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (1697)
Hash 483c2dc0c5aa59425eca7703a34be959
4270aea588e68ca11b6da0623a365fd2959d1526
fc1720d2fd3bea207ef2b083aa03190462eb01ae92a0800ef798d9af15969fe1
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/flickity/flickity.min.css?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: text/css
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-705"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 265d03943a645462854e9444dabeb800
a44ef995093ddc5f334a63999d71c65a1d2b6643
0d4102a2c52171ae32d1b2157118ceef7e18220bc02fbac9ce327a6a99a171df
GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ufaasia365.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 27990
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "63091225-6d56"
last-modified: Fri, 26 Aug 2022 18:34:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 980556
expires: Fri, 24 Nov 2023 09:40:36 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sOYktRR4ScashsHzeMsM2GVqTqzMoq2wlU1Oa5wDmSq%2Fb6oxx2aAOR7uhTI13nF75%2FbkuKFNrwGYzIxlhJpLofn%2B5PmxokFtxOc9YKPNurYJPEkqEOC9a%2Bo0FEyndxWAwwbNuBtX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 774394dfcb79b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/jquery.mmenu/extensions/pagedim/jquery.mmenu.pagedim.css?package=Rbfcu
200 OK 167 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/jquery.mmenu/extensions/pagedim/jquery.mmenu.pagedim.css?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (465), with no line terminators
Hash dc0a13b7e3e6adb969411cc04b17a3da
c363aca2acf5f1df66be4c5937fbd082d1fef384
335925830f9fed1ce33e105b4900689fed46d6ba290a73ec391330c765e4b627
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/jquery.mmenu/extensions/pagedim/jquery.mmenu.pagedim.css?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: text/css
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-1d1"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/css/fuse.base.min.css?ver=0.974&package=Rbfcu
200 OK 9.8 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/css/fuse.base.min.css?ver=0.974&package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (44145)
Hash bd7b99af94b1feb991cdc1679aaafabc
3664edb3fa42597496a741b9fa68f8adf0509379
ba3e7bd89b554c88c98dcaea1e43ccdefee7b18618e659d7b7eb9bbd6302d7d1
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/css/fuse.base.min.css?ver=0.974&package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: text/css
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-ac72"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/css/fuse.min.css?ver=0.982&package=Rbfcu
200 OK 16 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/css/fuse.min.css?ver=0.982&package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 212f8e86028f5ea9767c4f8f101bac38
01fcab6b0fc6e32c2b3ae58dada1f0259a442351
635903e993301190fcec52c02503d1056874f991a292b8504667398c84db6651
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/css/fuse.min.css?ver=0.982&package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: text/css
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-189a4"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ufaasia365.com/ScriptResource.axd?d=okuX3IVIBwfJlfEQK32K3gli2JibkeGJSmQ-4DHAPDIA4Dv27pbCohNg0Um3AE4xO9stfXPmQsnj3HV4MfUj1rqPgk8L4hGDf9kVXjVxgv1ke4cMb1TqdqBEg18_NFGRNhJPxQIrSn7uh7nR31XbqV46TN3Xgw2tYVUXqPNUKlq0HVfRhXLZaCHy7HWRZidu0&t=a366992
200 OK 31 kB URL HTTP/1.1 ufaasia365.com/ScriptResource.axd?d=okuX3IVIBwfJlfEQK32K3gli2JibkeGJSmQ-4DHAPDIA4Dv27pbCohNg0Um3AE4xO9stfXPmQsnj3HV4MfUj1rqPgk8L4hGDf9kVXjVxgv1ke4cMb1TqdqBEg18_NFGRNhJPxQIrSn7uh7nR31XbqV46TN3Xgw2tYVUXqPNUKlq0HVfRhXLZaCHy7HWRZidu0&t=a366992
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (65451)
Hash afc5d07cd09f82e0b39ed2d05f6f16f5
41f2b25919d6493209e8ec1cd79ee006d1e1baa2
75fa5b5e9a01bb1488649ba9f0751bcdee5815038557bd17716ca8af5f24c030
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /ScriptResource.axd?d=okuX3IVIBwfJlfEQK32K3gli2JibkeGJSmQ-4DHAPDIA4Dv27pbCohNg0Um3AE4xO9stfXPmQsnj3HV4MfUj1rqPgk8L4hGDf9kVXjVxgv1ke4cMb1TqdqBEg18_NFGRNhJPxQIrSn7uh7nR31XbqV46TN3Xgw2tYVUXqPNUKlq0HVfRhXLZaCHy7HWRZidu0&t=a366992 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
ETag: W/"15d84-5ecb14cf45200"
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/css/global-print.min.css?ver=0.977&package=Rbfcu
200 OK 999 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/css/global-print.min.css?ver=0.977&package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (3773)
Hash 7874b6aa68ea16281ffae815f6890069
cfc1719dc715eac198ff71b4a3696b3d2e83b501
f4438fb465eaa74b9bccffc1055cf9fd7accbd6ab8456033ec479c457d8c0664
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/css/global-print.min.css?ver=0.977&package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: text/css
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-ebe"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/ScriptResource.axd?d=EydukmxBmDstn7gSYzQESMmNbxGB2ekkTqvgz-RovLAW8eaJapUAAzVI8Z0-Legbflcpgk9LKENXAtWKDLR-8gcAjTbQk1FKu6LKBUlJGfo0RHwZKRhatkvOneXb3Dk2Lc2M9zfH2HOz_BswsrJ8J2icJv-dhJK7Lk4FpuqIPq4hQT-5zENhujT36xwisn_T0&t=a366992
200 OK 31 kB URL HTTP/1.1 ufaasia365.com/ScriptResource.axd?d=EydukmxBmDstn7gSYzQESMmNbxGB2ekkTqvgz-RovLAW8eaJapUAAzVI8Z0-Legbflcpgk9LKENXAtWKDLR-8gcAjTbQk1FKu6LKBUlJGfo0RHwZKRhatkvOneXb3Dk2Lc2M9zfH2HOz_BswsrJ8J2icJv-dhJK7Lk4FpuqIPq4hQT-5zENhujT36xwisn_T0&t=a366992
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (65451)
Hash afc5d07cd09f82e0b39ed2d05f6f16f5
41f2b25919d6493209e8ec1cd79ee006d1e1baa2
75fa5b5e9a01bb1488649ba9f0751bcdee5815038557bd17716ca8af5f24c030
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /ScriptResource.axd?d=EydukmxBmDstn7gSYzQESMmNbxGB2ekkTqvgz-RovLAW8eaJapUAAzVI8Z0-Legbflcpgk9LKENXAtWKDLR-8gcAjTbQk1FKu6LKBUlJGfo0RHwZKRhatkvOneXb3Dk2Lc2M9zfH2HOz_BswsrJ8J2icJv-dhJK7Lk4FpuqIPq4hQT-5zENhujT36xwisn_T0&t=a366992 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
ETag: W/"15d84-5ecb14cf45200"
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/flickity/flickity.pkgd.min.js?package=Rbfcu&v=MjEyNjEyNjEwOA%3d%3d
200 OK 14 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/flickity/flickity.pkgd.min.js?package=Rbfcu&v=MjEyNjEyNjEwOA%3d%3d
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (53821)
Hash 17d39c37f2d3d578eb84030477909c3d
dd562f02284fcf51ddc1423bc4b10db61eb86fe4
b035c9d0b64f38c78da59848785f4e91088e3db3d7abe43a8b872b8b4648f852
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/flickity/flickity.pkgd.min.js?package=Rbfcu&v=MjEyNjEyNjEwOA%3d%3d HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: application/javascript
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-d32f"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/flickity-bg-lazyload/bg-lazyload.js?package=Rbfcu&v=MjEzNjYwNDAyMw%3d%3d
200 OK 1.1 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/flickity-bg-lazyload/bg-lazyload.js?package=Rbfcu&v=MjEzNjYwNDAyMw%3d%3d
IP
ASN #20803 LLC Siberian Telecommunications Company
Hash c281f3197ac38cf7cabc0bf2f3e9aea6
b102f6643b6547694b81a7e0553c2e36f08d6388
4e73e8c6a74ab6ca14b492c527d289a060dfd8ae805516b88d03f3318f39cbdd
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/flickity-bg-lazyload/bg-lazyload.js?package=Rbfcu&v=MjEzNjYwNDAyMw%3d%3d HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: application/javascript
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-ba5"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/rates.min.js?ver=0.1008&package=Rbfcu&v=NTgzODE4OTQ1
200 OK 4.3 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/rates.min.js?ver=0.1008&package=Rbfcu&v=NTgzODE4OTQ1
IP
ASN #20803 LLC Siberian Telecommunications Company
File type HTML document, ASCII text, with very long lines (11786), with no line terminators
Hash ee9b753be9c1ee3a00b8269cc9e6ca1d
b78d7c46aac6c36e8ac98a2c78924cee0a16ed2e
36b320e9abd9304f72dfb7ffa2976cf877067961c5a15729c1788e7a827a2530
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/rates.min.js?ver=0.1008&package=Rbfcu&v=NTgzODE4OTQ1 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: application/javascript
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-2e0a"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/spin.min.js?package=Rbfcu&v=NTgzODE4OTQ1
200 OK 2.0 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/spin.min.js?package=Rbfcu&v=NTgzODE4OTQ1
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (4226), with no line terminators
Hash d03d3927d149084e56b8951cb828b270
cb772d438d4331cfe954b918e1c665eb4c9de914
4cf9f32412b8102a40df30df13f096ce9d772519c705afb59e1c0874e18c0010
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/spin.min.js?package=Rbfcu&v=NTgzODE4OTQ1 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: application/javascript
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-1082"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/common.min.js?ver=0.1006&package=Rbfcu&v=NTgzODI1MzU1
200 OK 3.3 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/common.min.js?ver=0.1006&package=Rbfcu&v=NTgzODI1MzU1
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (9287), with no line terminators
Hash fc9667f349948b2ed3a60fe6c1f6d063
da10ada6d710387ad43983a37a6524febd716cbd
f98712abb7b0b4d37f2e17a6913f2a1729335f7aa6a6c06fc941429a612b31b7
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/common.min.js?ver=0.1006&package=Rbfcu&v=NTgzODI1MzU1 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: application/javascript
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-2447"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/dropdown.min.js?ver=0.1001&package=Rbfcu&v=NTgzODI1MzU1
200 OK 802 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/dropdown.min.js?ver=0.1001&package=Rbfcu&v=NTgzODI1MzU1
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (2180), with no line terminators
Hash 67c4188486d905d21d4707a80872de9d
c511beceef123a85e1fdc2a8294c4cf1cc9cda12
9fcf99019cc48c8b36497181874ec52911f48d4c92512d5b6a604c16df15c20c
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/dropdown.min.js?ver=0.1001&package=Rbfcu&v=NTgzODI1MzU1 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: application/javascript
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-884"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 35b9a86a96d04b82fd0a2a833e795563
fc556479ebf4fcfe969d721241acbe48eb5892fe
a5cbc8626b28c9831452c1a664f073a690d511268d8d4a9b2e3b9a5e20acfb01
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155823
Date: Sun, 04 Dec 2022 09:40:36 GMT
Etag: "638c1186-1d7"
Expires: Tue, 06 Dec 2022 04:57:39 GMT
Last-Modified: Sun, 04 Dec 2022 03:18:30 GMT
Server: ECS (dcb/7EA2)
X-Cache: Miss from cloudfront
Via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: qL4Xqk4PbGsrRb6gd5cA3_ohZrQqAe-uEdqOH8p_VQoYPD8_SRZFlw==
Age: 5949
cdn.segmint.net/segmint.min.js
200 OK 16 kB URL HTTP/1.1 cdn.segmint.net/segmint.min.js
IP
File type ASCII text, with very long lines (16133), with no line terminators
Hash d82805b8a81d650b05604a319f83d8e0
6f691d9879b0f6edbf0bfcb805f40aceede45d12
42b6d29b82354983efe7f3c9cdee6d5209b3fe9cafb42564910e8b038df37691
GET /segmint.min.js HTTP/1.1
Host: cdn.segmint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 16133
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 12:51:09 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 03 Dec 2022 11:31:20 GMT
Cache-Control: max-age:900
ETag: "d82805b8a81d650b05604a319f83d8e0"
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VYq3TMg8s_70Gp7lw4GKZRq4Xv3W_7Vb6V-5m3VyAgf3Whgd5hY2WA==
Age: 79756
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/maintenance-banner.min.js?ver=20221105074359&package=Rbfcu&v=NTgzODI1MzU1
200 OK 210 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/maintenance-banner.min.js?ver=20221105074359&package=Rbfcu&v=NTgzODI1MzU1
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (316), with no line terminators
Hash bb4c50ce38c546dfdc8bda5c80d09a46
a94ceaba332f5ef1274ed08fb5991f985335715b
5a662bb6c46a98cbc98d05c884f4699bbd6c84236e92da3891832c872fcd8eef
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/js/maintenance-banner.min.js?ver=20221105074359&package=Rbfcu&v=NTgzODI1MzU1 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: application/javascript
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-13c"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/send.js
200 OK 349 B IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with CRLF line terminators
Hash e132e322679ef3d82e5b19d7400f3493
b34206783fbf2216b7f94fdb11f433c29beaf135
99e33266c6ce923e10536d26adbae00547faab8d95a6f44308d7bdbec6abf3be
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /send.js HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:36 GMT
Content-Type: application/javascript
Last-Modified: Sat, 05 Nov 2022 06:05:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365fd12-343"
Expires: Mon, 05 Dec 2022 09:40:36 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 09:08:58 GMT
cache-control: public,max-age=3600
age: 1899
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/jquery.mmenu/css/jquery.mmenu.css?package=Rbfcu
200 OK 1.7 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/jquery.mmenu/css/jquery.mmenu.css?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (6431)
Hash 2dd1c618e05354e4758aaefe9c2a4825
9f38e2b1a3a3534d9c7048bd4b2cf9ddcb355bd3
6720db6b1496f1aa7740d7b5a39707b450dffe37017f1170da5f3d18e0194354
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/jquery.mmenu/css/jquery.mmenu.css?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: text/css
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-1ebd"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/jquery.mmenu/extensions/themes/jquery.mmenu.themes.css?package=Rbfcu
200 OK 915 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/jquery.mmenu/extensions/themes/jquery.mmenu.themes.css?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type ASCII text, with very long lines (6898), with no line terminators
Hash a47bafa90814288bf800825de806a787
3dff01f1f6489f36c06a6acc6afc080238935976
a0df43a3983b6315c8aa6b53a0187a764fdfe29214f925523aea8440042fdf8a
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/dist/components/jquery.mmenu/extensions/themes/jquery.mmenu.themes.css?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: text/css
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6365e108-1af2"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/ehl.svg?package=Rbfcu
200 OK 372 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/ehl.svg?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (372), with no line terminators
Hash 4010dff22fb4a1c3f84a6cb2689cdb46
49238ec2889e0a9130898b2523a11b9a4122a04a
f53433449e2b3100e1bccac4981b465479615eabee1e45345c64fa1270ab7744
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/ehl.svg?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 372
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-174"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/BluENGinsurlabel-RBFCU-Web-Blue.svg?package=Rbfcu
200 OK 75 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/BluENGinsurlabel-RBFCU-Web-Blue.svg?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Hash c581c09a4b04f30ea42e5a1b913de48f
c00ac94bc6921dcb0f5fcca3e72c1a6d2b1cce36
dbf5aa16ec1d8d83ffb05d4524c1b6ae583b7c3f488a43e3168d9f57eec6eded
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/BluENGinsurlabel-RBFCU-Web-Blue.svg?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 75035
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-1251b"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/Facebook-Square.svg?package=Rbfcu
200 OK 374 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/Facebook-Square.svg?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (374), with no line terminators
Hash 7d210e183c41b01a118a5bff8098e4b0
d51728b1aed9ad6cd2b19be0406867ef389ce471
f1f72cbfb1ccc01eda53795f1698b342ef5c6b4c8c77f78db9de93aaacb15830
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/Facebook-Square.svg?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 374
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-176"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1710
Cache-Control: max-age=86084
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:37 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 09:35:21 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ufaasia365.com/images/default-source/cross-sell-ads/106-21-membersafe-500x115-prim-blue.jpg?sfvrsn=8c67a2a8_6
200 OK 9.3 kB URL HTTP/1.1 ufaasia365.com/images/default-source/cross-sell-ads/106-21-membersafe-500x115-prim-blue.jpg?sfvrsn=8c67a2a8_6
IP
ASN #20803 LLC Siberian Telecommunications Company
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 500x115, components 3\012- data
Hash 3daacd27a0395df8fcfeb4c6a4760fd3
51665566c3977031e5e3d98d60a561045499c7bf
6643ec0eedce5764552d37c144a09a44469ca1507be67cbb8ecccebad905948f
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /images/default-source/cross-sell-ads/106-21-membersafe-500x115-prim-blue.jpg?sfvrsn=8c67a2a8_6 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/jpeg
Content-Length: 9338
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-247a"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data
Hash b20371a6daf29d4a1f2e85dbbf40fb20
0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:42:34 GMT
expires: Thu, 30 Nov 2023 19:42:34 GMT
cache-control: public, max-age=31536000
age: 309483
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 310003
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/Instagram-Square.svg?package=Rbfcu
200 OK 568 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/Instagram-Square.svg?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (568), with no line terminators
Hash 980da26f6cd3c7e00b4422f93e205dbd
d94c4c0221253508f536ca43cfecd7083ec908c0
4023602e4f78ffa656deaf46e28aaaa42d8fad0ecc0af6dd66d1c5c4c0f1fb32
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/Instagram-Square.svg?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 568
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-238"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 309982
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 309982
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/rbfcu-logo.svg?package=Rbfcu
200 OK 5.4 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/rbfcu-logo.svg?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5383), with no line terminators
Hash 2d436455d162d3e00f0ca92055cef754
5b64a30fd987d469bd818fc8ed6a4ed89b873d02
09092e11153b90955b14c6dcad28c3e2902b035f6b12ac85e24a693e5c97c884
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/rbfcu-logo.svg?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 5383
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-1507"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/images/default-source/cross-sell-ads/ret-prg-2022-backtoschool-cs-fin-(1).jpg?sfvrsn=83b6a7a8_0
200 OK 32 kB URL HTTP/1.1 ufaasia365.com/images/default-source/cross-sell-ads/ret-prg-2022-backtoschool-cs-fin-(1).jpg?sfvrsn=83b6a7a8_0
IP
ASN #20803 LLC Siberian Telecommunications Company
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x115, components 3\012- data
Hash 8b8da0bdd3557d3a6b8539407e1ac924
e732e95c69ae39f75d82bdbfe3ff5cb131d02589
1d87f1885a6ae4ba288dcffb2af640882382bb2387a5164f426ecd2e23b41767
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /images/default-source/cross-sell-ads/ret-prg-2022-backtoschool-cs-fin-(1).jpg?sfvrsn=83b6a7a8_0 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/jpeg
Content-Length: 31747
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-7c03"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/search-icon.svg?package=Rbfcu
200 OK 1.2 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/search-icon.svg?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (1232), with no line terminators
Hash 4baa1b63a6f66f27c0bedb610d2038af
b9f9d31d230f33192a3ecc5f0c6c8d2f82ccb2d3
99c2b81d9134dec4bb8ac167fa5f79d29e022add00f018e38fe2b025c862c0e7
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/search-icon.svg?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 1232
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-4d0"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/images/default-source/icons/grad-cap-and-book-1.svg?sfvrsn=d004a2a8_6
200 OK 2.0 kB URL HTTP/1.1 ufaasia365.com/images/default-source/icons/grad-cap-and-book-1.svg?sfvrsn=d004a2a8_6
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with CRLF line terminators
Hash 4315a5ce7125ea6cb6cf8c7bf6ed8e8f
77486e5fd21a831f36474d4a3e8a22e29db0067e
329f42ac288faa0ff7618997935313d569415d120b42a9d4be3ebc43c67240fc
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /images/default-source/icons/grad-cap-and-book-1.svg?sfvrsn=d004a2a8_6 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 1981
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-7bd"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/images/default-source/icons/rbfcu19-graphic-icons-blue-2019_get-paid-early-(1).svg?sfvrsn=295a0a8_4
200 OK 9.1 kB URL HTTP/1.1 ufaasia365.com/images/default-source/icons/rbfcu19-graphic-icons-blue-2019_get-paid-early-(1).svg?sfvrsn=295a0a8_4
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 2e445cb442240a043d8d7bc8862b8604
33bdfef18c1e43dea174e541b4af21258fcc5b6c
2e6e79c9c5eb00ca294efea2a76eb5974e13d53dc95cb735f6b2b7ab1e7fe428
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /images/default-source/icons/rbfcu19-graphic-icons-blue-2019_get-paid-early-(1).svg?sfvrsn=295a0a8_4 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 9121
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-23a1"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/images/default-source/icons/homepage-icons_auto.svg?sfvrsn=9628aaa8_4
200 OK 3.0 kB URL HTTP/1.1 ufaasia365.com/images/default-source/icons/homepage-icons_auto.svg?sfvrsn=9628aaa8_4
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash ff0c189baa303d7f222ae00dfabe28cb
4f48bb813d96da846666654e4e593a7d96443c45
ff77734f7e7408725d2f1ad6cad198329e7447273dbb9ecbb4f17302e879fdee
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /images/default-source/icons/homepage-icons_auto.svg?sfvrsn=9628aaa8_4 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 3012
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-bc4"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7C87Aio3DtObGtpmnGSUWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aq0UOJiDq0sOLe2XD9SuDki9WuU=
ufaasia365.com/images/default-source/icons/mastercard.svg?sfvrsn=b22aaa8_4
200 OK 2.3 kB URL HTTP/1.1 ufaasia365.com/images/default-source/icons/mastercard.svg?sfvrsn=b22aaa8_4
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 6a735e21432c868b70d6d03d02f02365
ed6977bec0940db3f0759cddcd9924ab69b9e492
f9886775d0ff32c2f2f9f409202ca31525acf54e68922bd618fa8c2d72e3d8b3
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /images/default-source/icons/mastercard.svg?sfvrsn=b22aaa8_4 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 2335
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-91f"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/images/default-source/icons/fha-va.svg?sfvrsn=a22aaa8_8
200 OK 1.0 kB URL HTTP/1.1 ufaasia365.com/images/default-source/icons/fha-va.svg?sfvrsn=a22aaa8_8
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 21b458448109c942c3dab4066eac3492
e3e10913609d8b110840c06843ae0ce02e18695e
946f137440056e21aa7187ca7cb1cc93e9d6501dbc0bddd57ae0fceb6abde085
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /images/default-source/icons/fha-va.svg?sfvrsn=a22aaa8_8 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 1046
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-416"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 0fa0fcbee72980e311f77902356246e3
e7dd914c5ba25e42dc0619664c2ba248e79d8939
de46ce9d7c70c78f414421d4d781a4b0404cb5674c4331c5ea560a21cdd2e2a1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6572
Cache-Control: max-age=149299
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:37 GMT
Etag: "638bf59c-1d7"
Expires: Tue, 06 Dec 2022 03:08:56 GMT
Last-Modified: Sun, 04 Dec 2022 01:19:24 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/Twitter-Square.svg?package=Rbfcu
200 OK 613 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/Twitter-Square.svg?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (613), with no line terminators
Hash 1d1a0c0f0f534ee4b33abf8df3d04ab0
97e6a1c4c628265b4ea13db05e9656c0cdc4cdb0
ca4a3531049529998b53eec342ba1e1991a9524cec0b0a7227c171d5cdbbe411
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/Twitter-Square.svg?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 613
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-265"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/YouTube-Square.svg?package=Rbfcu
200 OK 615 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/YouTube-Square.svg?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (615), with no line terminators
Hash b478a683a509708937d511c5953f62c4
bc221ca379149f626b19fb6fe87483c52cfb4a85
8f8600b477459f4ff35ed0b8124476d5327bc0c28c3ef725fad774e2ccea82fe
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/YouTube-Square.svg?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 615
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-267"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/LinkedIn-Square.svg?package=Rbfcu
200 OK 609 B URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/LinkedIn-Square.svg?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (609), with no line terminators
Hash b7ff0351b57955533d63f64fd7001a78
bc43d1382a3eacb40347769b0426b6157e91bc9c
77fd1b391f16bb5c0c6ed98c746b8a6b5a6ca7c57dcc18fcb2a59ec8506c326e
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend/assets/images/_icons/LinkedIn-Square.svg?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/svg+xml
Content-Length: 609
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-261"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend.Identity/assets/images/_icons/app-store-badge.gif?package=Rbfcu
200 OK 12 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend.Identity/assets/images/_icons/app-store-badge.gif?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type GIF image data, version 89a, 564 x 168\012- data
Hash 1b15a8c12aacad64cbc61172043d564f
d6896cb3c942d0a236af18e7ccc49f06654a220c
ba793b27cc193098d7c2ecafea44bc85edf7e5d4c496a5340d7177a514c93308
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Identity/assets/images/_icons/app-store-badge.gif?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/gif
Content-Length: 11545
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-2d19"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 60f45ca7d57920388067d981e8a5bee2
f614e5031170cd5c8ecb9cc39bbdf691fcdc4035
253cae7dbe41b6548813aa10e60033affaa4ff53da0c25693a9132802c7ac089
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=108501
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:37 GMT
Etag: "638b6fea-1d7"
Expires: Mon, 05 Dec 2022 15:48:58 GMT
Last-Modified: Sat, 03 Dec 2022 15:48:58 GMT
Server: nginx
Content-Length: 471
cdn.segmint.net/94eff061-4bff-4bfd-a84b-212c13bf2872.json
200 OK 0 B URL HTTP/1.1 cdn.segmint.net/94eff061-4bff-4bfd-a84b-212c13bf2872.json
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /94eff061-4bff-4bfd-a84b-212c13bf2872.json HTTP/1.1
Host: cdn.segmint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: http://ufaasia365.com/
Origin: http://ufaasia365.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 0
Connection: keep-alive
Date: Sun, 04 Dec 2022 09:40:38 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: PUT, POST, DELETE, GET
Access-Control-Allow-Headers: content-type
Access-Control-Max-Age: 3000
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aQ_JRk8UXApp46pmWCYPnQOX9WRWD1gzM0fF0AGONagYRK-A30nlvQ==
ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend.Identity/assets/images/_icons/google-play-badge.gif?package=Rbfcu
200 OK 12 kB URL HTTP/1.1 ufaasia365.com/Frontend-Assembly/Telerik.Sitefinity.Frontend.Identity/assets/images/_icons/google-play-badge.gif?package=Rbfcu
IP
ASN #20803 LLC Siberian Telecommunications Company
File type GIF image data, version 89a, 564 x 168\012- data
Hash c653a4bc270ef7fc90f160a457ab8fda
5e1a1b991eb5cebfab00b2db193c67c3cf6d0b95
8e58577776c0b06f255775498eb2e749d616aa9bf2d2356de5beb24cf18c4fed
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
fortinet Phishing
GET /Frontend-Assembly/Telerik.Sitefinity.Frontend.Identity/assets/images/_icons/google-play-badge.gif?package=Rbfcu HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/gif
Content-Length: 11454
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-2cbe"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
cdn.segmint.net/94eff061-4bff-4bfd-a84b-212c13bf2872.json
200 OK 313 B URL HTTP/1.1 cdn.segmint.net/94eff061-4bff-4bfd-a84b-212c13bf2872.json
IP
File type JSON data\012- , ASCII text, with very long lines (313), with no line terminators
Hash e9341da2a008ff5042fcc20411c0b8ea
8a1e1f5893d5b916b812b37dd8614a2dd1c0ca1e
613e256f21a37f0a76c644a7b9ab31b40d0ffb3994ab811c0455209cfe7570c1
GET /94eff061-4bff-4bfd-a84b-212c13bf2872.json HTTP/1.1
Host: cdn.segmint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 313
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: PUT, POST, DELETE, GET
Access-Control-Max-Age: 3000
Last-Modified: Tue, 10 Dec 2019 20:12:20 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 09:36:59 GMT
Cache-Control: max-age=900
ETag: "e9341da2a008ff5042fcc20411c0b8ea"
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 98cfQdmndJ_nmMJNvWgOjyigSj5w6prj7985JloErc12N1bCnRvijg==
Age: 218
ufaasia365.com/images/default-source/hero/113-19-iwwd-smith-rotating-hero.jpg?sfvrsn=4ef2d6a8_6
200 OK 304 kB URL HTTP/1.1 ufaasia365.com/images/default-source/hero/113-19-iwwd-smith-rotating-hero.jpg?sfvrsn=4ef2d6a8_6
IP
ASN #20803 LLC Siberian Telecommunications Company
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=laflor], baseline, precision 8, 1500x900, components 3\012- data
Size 304 kB (303908 bytes)
Hash ea3c7d059d9e69f7a32fd3d81d068087
869cd59df9e58e2f3bd79e4832d0aba1c3305b5b
9f404c40adfccb18108d1d09adcd69e2f7252fc3b86a8fd3074e6595f773aa52
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /images/default-source/hero/113-19-iwwd-smith-rotating-hero.jpg?sfvrsn=4ef2d6a8_6 HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:37 GMT
Content-Type: image/jpeg
Content-Length: 303908
Last-Modified: Sat, 05 Nov 2022 04:05:28 GMT
Connection: keep-alive
ETag: "6365e108-4a324"
Expires: Mon, 05 Dec 2022 09:40:37 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
www.rbfcu.org/rate/products/PREMCC/minAnnualRate?allDepositAccRequested=true
403 Forbidden 0 B URL HTTP/1.1 www.rbfcu.org/rate/products/PREMCC/minAnnualRate?allDepositAccRequested=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rate/products/PREMCC/minAnnualRate?allDepositAccRequested=true HTTP/1.1
Host: www.rbfcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Content-Language: en-US
Content-Length: 0
Set-Cookie: ADRUM_BTa=R:22|g:65a052a3-c145-45e1-8eea-9f91def4c3a0; Expires=Sun, 04-Dec-22 09:41:07 GMT; Path=/; Secure
ADRUM_BTa=R:22|g:65a052a3-c145-45e1-8eea-9f91def4c3a0|n:rbfcu-pov_34981aaf-4970-4644-b5e1-273015dc6634; Expires=Sun, 04-Dec-22 09:41:07 GMT; Path=/; Secure
SameSite=None; Expires=Sun, 04-Dec-22 09:41:07 GMT; Path=/; Secure
PersistanceCookie=!zMER1zD/klHfBHXhrnwYohVdbB9C89Gk3Y75P9ZwKMJ6bKeVPpJEjydljO45bsbI5+ieYviw4q9lkmE=; path=/; Httponly; Secure
Connection: Close
Date: Sun, 04 Dec 2022 09:40:36 GMT
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache="set-cookie, set-cookie2"
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
serverID: LS2
Strict-Transport-Security: max-age=31536000
Via: 1.1 dca1-bit13027
ufaasia365.com/favicon-16x16.png
404 Not Found 189 B URL HTTP/1.1 ufaasia365.com/favicon-16x16.png
IP
ASN #20803 LLC Siberian Telecommunications Company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1a7c01d46c619b06d4c6b5f8d4f6cc8a
8d56c74e1bc1e77213e8d65baf3f3200d9b1a0f8
abe2e988cac4defcbecde0705580b962750e7ff0e0af13bba2f3a8648b79ac5f
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /favicon-16x16.png HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 404 Not Found
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:38 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
ufaasia365.com/apple-touch-icon.png
404 Not Found 189 B URL HTTP/1.1 ufaasia365.com/apple-touch-icon.png
IP
ASN #20803 LLC Siberian Telecommunications Company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a60804e8235942756aea094c2b9de7c4
e81db83478fb40e1685898f4e92980023842125c
310f8482609cbf6b93b3c350a68912748c7af326991f1345fb80efd6a76e2421
Analyzer Verdict Alert urlquery phishing Phishing - RBFCU
urlquery phishing Phishing - RBFCU
GET /apple-touch-icon.png HTTP/1.1
Host: ufaasia365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ufaasia365.com/
HTTP/1.1 404 Not Found
Server: nginx/1.20.2
Date: Sun, 04 Dec 2022 09:40:38 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11782
Expires: Sun, 04 Dec 2022 12:57:00 GMT
Date: Sun, 04 Dec 2022 09:40:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11782
Expires: Sun, 04 Dec 2022 12:57:00 GMT
Date: Sun, 04 Dec 2022 09:40:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11782
Expires: Sun, 04 Dec 2022 12:57:00 GMT
Date: Sun, 04 Dec 2022 09:40:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85837b29-ffdd-4915-a6ab-8d0721427d1b.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85837b29-ffdd-4915-a6ab-8d0721427d1b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 591104ff3c76193fe3c24fbbbb332f7d
aa134912d4f5ddfb371c45d9975506246af68400
af0cbb5c37c901019c1e684fe9a019bb7a2fb8359909ab831b7ff86cbc3d0fec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85837b29-ffdd-4915-a6ab-8d0721427d1b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9356
x-amzn-requestid: 11f22578-a356-4f74-99bf-6d8462e25fdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ckdKGG8RIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b4240-5c5fa5332d60db084c8d3bb6;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 12:34:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LHI_AR5lwe0vmuK0mOQapt3YQW0WE7BLN-PSn4pVMBTWoYbv4IV9ow==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 04:19:12 GMT
age: 19286
etag: "aa134912d4f5ddfb371c45d9975506246af68400"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kRs3oBWnSs5asyPdvz6kkooy7pqm2Yr8R_2x8EXCVn3dBz_aEJurRQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 07:26:41 GMT
age: 8037
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe8e3477-9245-4318-82d9-b30607246872.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe8e3477-9245-4318-82d9-b30607246872.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89e5fc40e9e626a035abde2964ba0959
e800712e4f8d9589670d8ee3a744ac0aedf7b6e3
64a41309871b71682370e2b2f3735ac70039802fff4e1e46013f5aa1f15b4084
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe8e3477-9245-4318-82d9-b30607246872.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6901
x-amzn-requestid: 5dd4545b-c48a-4fa2-8aa5-c7d0a5efeafe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsByFqCoAMF4CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc071-6b96e54876cde366748564d6;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Yy5pEWjBXne3kPQxZCLQdqdamtqa4udO00I6ro3bMUDTybHTZY_DgA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:53:43 GMT
age: 42415
etag: "e800712e4f8d9589670d8ee3a744ac0aedf7b6e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 42997
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a6e7b32ac999cf3c899a234c621fa91a
fc5d4f3163ebb9faf85968cbb1d194e8e68418be
f12db3aed126006fee00649aba0b3eaae900de200b85b9523866a90b5494f18e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8989
x-amzn-requestid: abce0b01-f70c-42ad-b242-5a24735fe4c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltl4Gk2oAMFSWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc2f2-1cccffff5199dffe70264a95;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:43:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PFl7VUrzRkMFNnTiIw_cbGCyrEFn43eUSlZfT0nUhUmjjyXT7JfjMA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:50:01 GMT
age: 42637
etag: "fc5d4f3163ebb9faf85968cbb1d194e8e68418be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:52:38 GMT
age: 42480
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.rbfcu.org/rate/products/CASHCC/minAnnualRate?allDepositAccRequested=true
403 Forbidden 0 B URL HTTP/1.1 www.rbfcu.org/rate/products/CASHCC/minAnnualRate?allDepositAccRequested=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rate/products/CASHCC/minAnnualRate?allDepositAccRequested=true HTTP/1.1
Host: www.rbfcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Content-Language: en-US
Content-Length: 0
Set-Cookie: ADRUM_BTa=R:22|g:5fb98767-cde7-49ac-9edd-1b801c44986a; Expires=Sun, 04-Dec-22 09:41:08 GMT; Path=/; Secure
ADRUM_BTa=R:22|g:5fb98767-cde7-49ac-9edd-1b801c44986a|n:rbfcu-pov_34981aaf-4970-4644-b5e1-273015dc6634; Expires=Sun, 04-Dec-22 09:41:08 GMT; Path=/; Secure
SameSite=None; Expires=Sun, 04-Dec-22 09:41:08 GMT; Path=/; Secure
PersistanceCookie=!z3JmB5Z03Jq5p0JJ3apogWNvWjLRGzBXQoOz2/k6Muop/7keeOGWSOEFVviO2JWhuVBw5ybuN3qEopE=; path=/; Httponly; Secure
Connection: Close
Date: Sun, 04 Dec 2022 09:40:38 GMT
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache="set-cookie, set-cookie2"
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
serverID: LS2
Strict-Transport-Security: max-age=31536000
Via: 1.1 dca1-bit6002
www.rbfcu.org/rate/products/PREMCC/maxAnnualRate?allDepositAccRequested=true
403 Forbidden 0 B URL HTTP/1.1 www.rbfcu.org/rate/products/PREMCC/maxAnnualRate?allDepositAccRequested=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rate/products/PREMCC/maxAnnualRate?allDepositAccRequested=true HTTP/1.1
Host: www.rbfcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Content-Language: en-US
Content-Length: 0
Set-Cookie: ADRUM_BTa=R:22|g:6a450e5a-0bda-426e-9fd3-00650816e427; Expires=Sun, 04-Dec-22 09:41:08 GMT; Path=/; Secure
ADRUM_BTa=R:22|g:6a450e5a-0bda-426e-9fd3-00650816e427|n:rbfcu-pov_34981aaf-4970-4644-b5e1-273015dc6634; Expires=Sun, 04-Dec-22 09:41:08 GMT; Path=/; Secure
SameSite=None; Expires=Sun, 04-Dec-22 09:41:08 GMT; Path=/; Secure
PersistanceCookie=!zVjL0Xaf+BWUY6MfAlrt/gAymWxGa64woCv9GDj1OoXvi1pbxrlfHlKKxdUyon7OEVxc49vS6i8CKuE=; path=/; Httponly; Secure
Connection: Close
Date: Sun, 04 Dec 2022 09:40:38 GMT
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache="set-cookie, set-cookie2"
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
serverID: LA4
Strict-Transport-Security: max-age=31536000
Via: 1.1 dca1-bit7011
www.rbfcu.org/rate/products/CASHCC/maxAnnualRate?allDepositAccRequested=true
403 Forbidden 0 B URL HTTP/1.1 www.rbfcu.org/rate/products/CASHCC/maxAnnualRate?allDepositAccRequested=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rate/products/CASHCC/maxAnnualRate?allDepositAccRequested=true HTTP/1.1
Host: www.rbfcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Content-Language: en-US
Content-Length: 0
Set-Cookie: ADRUM_BTa=R:22|g:4119ac28-fcc7-4f58-9544-c50f55f5f31c; Expires=Sun, 04-Dec-22 09:41:09 GMT; Path=/; Secure
ADRUM_BTa=R:22|g:4119ac28-fcc7-4f58-9544-c50f55f5f31c|n:rbfcu-pov_34981aaf-4970-4644-b5e1-273015dc6634; Expires=Sun, 04-Dec-22 09:41:09 GMT; Path=/; Secure
SameSite=None; Expires=Sun, 04-Dec-22 09:41:09 GMT; Path=/; Secure
PersistanceCookie=!yRx20xWhZ0CLRpThrnwYohVdbB9C8/A72Q+8NfoN8WsszG3k0FxYLIGahPaIc2V2NV6YfdZGS0Ld848=; path=/; Httponly; Secure
Connection: Close
Date: Sun, 04 Dec 2022 09:40:39 GMT
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache="set-cookie, set-cookie2"
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
serverID: LA4
Strict-Transport-Security: max-age=31536000
Via: 1.1 dca1-bit13027
www.rbfcu.org/rate/products/BSMC/minAnnualRate?allDepositAccRequested=true
403 Forbidden 0 B URL HTTP/1.1 www.rbfcu.org/rate/products/BSMC/minAnnualRate?allDepositAccRequested=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rate/products/BSMC/minAnnualRate?allDepositAccRequested=true HTTP/1.1
Host: www.rbfcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Content-Language: en-US
Content-Length: 0
Set-Cookie: ADRUM_BTa=R:22|g:1d3fa378-858a-4005-92e9-0a3f2ce40cd4; Expires=Sun, 04-Dec-22 09:41:09 GMT; Path=/; Secure
ADRUM_BTa=R:22|g:1d3fa378-858a-4005-92e9-0a3f2ce40cd4|n:rbfcu-pov_34981aaf-4970-4644-b5e1-273015dc6634; Expires=Sun, 04-Dec-22 09:41:09 GMT; Path=/; Secure
SameSite=None; Expires=Sun, 04-Dec-22 09:41:09 GMT; Path=/; Secure
PersistanceCookie=!meW7M9L4ONkOKxvhrnwYohVdbB9C83HxrX94E6XVcG7rXqyAJofUZ1fVZcEHegrXcVMgeZe5c1vr0o8=; path=/; Httponly; Secure
Connection: Close
Date: Sun, 04 Dec 2022 09:40:39 GMT
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache="set-cookie, set-cookie2"
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
serverID: LS4
Strict-Transport-Security: max-age=31536000
Via: 1.1 dca1-bit13027
www.rbfcu.org/rate/products/BSMC/maxAnnualRate?allDepositAccRequested=true
403 Forbidden 0 B URL HTTP/1.1 www.rbfcu.org/rate/products/BSMC/maxAnnualRate?allDepositAccRequested=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rate/products/BSMC/maxAnnualRate?allDepositAccRequested=true HTTP/1.1
Host: www.rbfcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Content-Language: en-US
Content-Length: 0
Set-Cookie: ADRUM_BTa=R:22|g:e6bcafc6-920f-486b-91a5-2113efb49c5d; Expires=Sun, 04-Dec-22 09:41:10 GMT; Path=/; Secure
ADRUM_BTa=R:22|g:e6bcafc6-920f-486b-91a5-2113efb49c5d|n:rbfcu-pov_34981aaf-4970-4644-b5e1-273015dc6634; Expires=Sun, 04-Dec-22 09:41:10 GMT; Path=/; Secure
SameSite=None; Expires=Sun, 04-Dec-22 09:41:10 GMT; Path=/; Secure
PersistanceCookie=!QmESjpvY/ZLVbNQfAlrt/gAymWxGa+MQcadMoR7yzhIuaFnYn4JDG+m1G5bKrTYLRW4TRBVQ+K4ltH0=; path=/; Httponly; Secure
Connection: Close
Date: Sun, 04 Dec 2022 09:40:39 GMT
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache="set-cookie, set-cookie2"
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
serverID: LA4
Strict-Transport-Security: max-age=31536000
Via: 1.1 dca1-bit7011
connect.segmint.net/event
204 No Content 0 B URL HTTP/1.1 connect.segmint.net/event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: connect.segmint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ufaasia365.com/
Origin: http://ufaasia365.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Auth-Username, X-Auth-Password, X-Auth-New-Password, Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD
Access-Control-Allow-Origin: http://ufaasia365.com
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Content-Length: 0
Date: Sun, 04 Dec 2022 09:40:41 GMT
Expires: 0
P3P: CP="This is not a P3P policy! See https://www.segmint.com/privacy.aspx for more info."
Pragma: no-cache
Server: openresty
Connection: keep-alive
connect.segmint.net/iframe/doughnut/en177X7n8q
200 OK 307 B URL HTTP/1.1 connect.segmint.net/iframe/doughnut/en177X7n8q
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 02ce68b22ad3e3b9ab80edd3f7f209e5
20dd9c9d8a9f23067154f513332560d00674b14c
5b6becaa46584413df86abc343905be57af433ac05353cf66898a3c1f6c953d2
GET /iframe/doughnut/en177X7n8q HTTP/1.1
Host: connect.segmint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ufaasia365.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Content-Language: en-US
Content-Type: text/html;charset=UTF-8
Date: Sun, 04 Dec 2022 09:40:41 GMT
Expires: 0
P3P: CP="This is not a P3P policy! See https://www.segmint.com/privacy.aspx for more info."
Pragma: no-cache
Server: openresty
Set-Cookie: SegmintId=f32431a6d82c418887b68d0448323157;Path=/;SameSite=None;Secure;Domain=.segmint.net;Expires=Tue, 03-Dec-2024 09:40:41 GMT;HttpOnly
Vary: Accept-Encoding
X-Application-Context: offer-delivery:prod:7074
X-B3-Sampled: 1
X-B3-SpanId: f1c53ea6f095e730
X-B3-TraceId: f1c53ea6f095e730
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 307
Connection: keep-alive
connect.segmint.net/event
200 OK 0 B URL HTTP/1.1 connect.segmint.net/event
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event HTTP/1.1
Host: connect.segmint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 118
Origin: http://ufaasia365.com
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://ufaasia365.com
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/plain;charset=UTF-8
Date: Sun, 04 Dec 2022 09:40:42 GMT
Expires: 0
P3P: CP="This is not a P3P policy! See https://www.segmint.com/privacy.aspx for more info."
Pragma: no-cache
Server: openresty
Set-Cookie: SegmintId=56e16b9ab86f422486c379b2e6ce4739;Path=/;SameSite=None;Secure;Domain=.segmint.net;Expires=Fri, 03-Dec-2027 09:40:42 GMT;HttpOnly
X-Application-Context: site-event-receiver-service:prod:7084
Content-Length: 0
Connection: keep-alive
tag.simpli.fi/sifitag/ec0a3730-0bdd-0139-387d-06abc14c0bc6
200 OK 3.1 kB URL HTTP/2 tag.simpli.fi/sifitag/ec0a3730-0bdd-0139-387d-06abc14c0bc6
IP
File type ASCII text, with very long lines (3100)
Hash 3a865bd258edb6bd09f29f99c2cc75d9
61ff2543330d9280b58e4c56c45e1a420293dac4
173dd338673eb7e21df3c0ff3a86e0f1f752bf33468b01d1d89d09ac39e64132
GET /sifitag/ec0a3730-0bdd-0139-387d-06abc14c0bc6 HTTP/1.1
Host: tag.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 3101
set-cookie: suid=F5473F97EE7A4C44AF84FC73593B9580; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=F5473F97EE7A4C44AF84FC73593B9580; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
x-request-id: Fy2NtEHOg9aUBJo7T1Di
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=0, private, must-revalidate, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache, no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT, Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
um.simpli.fi/segmint
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /segmint HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://maprtb.segmint.net/rtb/simpli-fi/cookie-mapper?simpli-fi-id=3E9FA3AA6AED473CAAD9E6D3E827B572
set-cookie: suid=3E9FA3AA6AED473CAAD9E6D3E827B572; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=3E9FA3AA6AED473CAAD9E6D3E827B572; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
www.rbfcu.org/rate/products?id=PRI&id=VEHICLE&id=HOMEEQUITY&id=PREMCC&id=CER&callback=rateProductCallback
200 OK 2.3 kB URL HTTP/1.1 www.rbfcu.org/rate/products?id=PRI&id=VEHICLE&id=HOMEEQUITY&id=PREMCC&id=CER&callback=rateProductCallback
IP
File type ASCII text, with very long lines (12985), with no line terminators
Hash e74a2b7fcc868307be2f8d25337a606b
d67f29ee9474dd627f2757a21c0c5939a3d1ca87
d75f5fd922c3be43a207a3c7fde2efe46dc2ba5a83da810a082360fc0dded57b
GET /rate/products?id=PRI&id=VEHICLE&id=HOMEEQUITY&id=PREMCC&id=CER&callback=rateProductCallback HTTP/1.1
Host: www.rbfcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Xet-Cookie:
Age: 21007
Date: Sun, 04 Dec 2022 03:50:37 GMT
Content-Length: 2321
Connection: Keep-Alive
Via: NS-CACHE-10.0: 111, 1.1 dca1-bit13027
ETag: "KXOONOEJKMZMSXR"
ADRUM_0: g:da49ad57-c938-41bc-9af5-4ea079cd3cbf
ADRUM_1: n:rbfcu-pov_34981aaf-4970-4644-b5e1-273015dc6634
ADRUM_2: i:1453612
ADRUM_3: e:360
Content-Type: application/javascript
Content-Language: en-US
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
serverID: LS3
Strict-Transport-Security: max-age=31536000
Set-Cookie: PersistanceCookie=!fi/XUzvHcKlXS1XhrnwYohVdbB9C88xnkCPBWZDcqjwj0Oov4KW8QMjT0MXYeHXzubYUdMihdJC+VSw=; path=/; Httponly; Secure
Vary: Accept-Encoding
Content-Encoding: gzip
maprtb.segmint.net/rtb/simpli-fi/cookie-mapper?simpli-fi-id=3E9FA3AA6AED473CAAD9E6D3E827B572
200 OK 43 B URL HTTP/1.1 maprtb.segmint.net/rtb/simpli-fi/cookie-mapper?simpli-fi-id=3E9FA3AA6AED473CAAD9E6D3E827B572
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /rtb/simpli-fi/cookie-mapper?simpli-fi-id=3E9FA3AA6AED473CAAD9E6D3E827B572 HTTP/1.1
Host: maprtb.segmint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Cookie: SegmintId=56e16b9ab86f422486c379b2e6ce4739
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif; charset=UTF-8
Date: Sun, 04 Dec 2022 09:40:42 GMT
Expires: 0
Pragma: no-cache
Server: openresty
X-Application-Context: cookie-mapper:prod:7077
X-B3-Sampled: 1
X-B3-SpanId: 2f66a812abd55e09
X-B3-TraceId: 2f66a812abd55e09
Content-Length: 43
Connection: keep-alive
um.simpli.fi/triplelift
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /triplelift HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://eb2.3lift.com/xuid?mid=7969&xuid=61F4DF093F01454FADAD2249F63FDD5E&dongle=yf3
set-cookie: suid=61F4DF093F01454FADAD2249F63FDD5E; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=61F4DF093F01454FADAD2249F63FDD5E; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/telaria_p
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /telaria_p HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://simplifi.partners.tremorhub.com/sync?UISF=FD91BEFB798B4CB5A4C5D759D6C0843A
set-cookie: suid=FD91BEFB798B4CB5A4C5D759D6C0843A; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=FD91BEFB798B4CB5A4C5D759D6C0843A; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/tapad
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /tapad HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=CAEA482F59824A308A6896971CA9D9C1
set-cookie: suid=CAEA482F59824A308A6896971CA9D9C1; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=CAEA482F59824A308A6896971CA9D9C1; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/ad_advisor
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ad_advisor HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=2EBE25F9E37A4035B2F7B4EADA850690
set-cookie: suid=2EBE25F9E37A4035B2F7B4EADA850690; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=2EBE25F9E37A4035B2F7B4EADA850690; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/intentiq
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /intentiq HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=6849790C43B342BEAA01E9D9B1F1B775
set-cookie: suid=6849790C43B342BEAA01E9D9B1F1B775; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=6849790C43B342BEAA01E9D9B1F1B775; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/pubmatic
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pubmatic HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=5F68810B20224FF99810C8989F8B0515; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=5F68810B20224FF99810C8989F8B0515; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/freewheel
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /freewheel HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=F50236FE03154EC6BE61B200E35DE1CA; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=F50236FE03154EC6BE61B200E35DE1CA; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/dtnx
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /dtnx HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://fei.pro-market.net/engine?du=24;csync=495B4CA03CC54EC6871C94CD17897750;mimetype=img;
set-cookie: suid=495B4CA03CC54EC6871C94CD17897750; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=495B4CA03CC54EC6871C94CD17897750; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/exelatem
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /exelatem HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://loadm.exelator.com/load/?p=204&g=2191&simid=D12DAC585E8E4DAC90D44C8247F634B5&j=0
set-cookie: suid=D12DAC585E8E4DAC90D44C8247F634B5; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=D12DAC585E8E4DAC90D44C8247F634B5; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/yahoo
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /yahoo HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=BAD5EAF081BE42CEBE635955847760E2; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=BAD5EAF081BE42CEBE635955847760E2; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 02467b98cd91b8c1337eba24f2c09496
8c8e51c8df836dce7cace8394e0e09d1165f89f7
9a9f52dc223141c310b9f33f53f8bdc63b9bb7b53b1cb3b62544fa62ca45860b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
um.simpli.fi/beachfront
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /beachfront HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://sync.bfmio.com/sync?pid=141&uid=684C9683E9F84614A5A00D51525F68AD
set-cookie: suid=684C9683E9F84614A5A00D51525F68AD; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=684C9683E9F84614A5A00D51525F68AD; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/bluekai
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /bluekai HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://stags.bluekai.com/site/29931?id=B646A09DFD3D42EBA169618FAE2E06E6
set-cookie: suid=B646A09DFD3D42EBA169618FAE2E06E6; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=B646A09DFD3D42EBA169618FAE2E06E6; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/crwdcntrl
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /crwdcntrl HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=89265FD8764D438894E720F2BF4428CB
set-cookie: suid=89265FD8764D438894E720F2BF4428CB; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=89265FD8764D438894E720F2BF4428CB; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/lj_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /lj_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://ce.lijit.com/merge?pid=2&3pid=7D7D2E2F344D4540B3B7E9510C37F3FE
set-cookie: suid=7D7D2E2F344D4540B3B7E9510C37F3FE; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=7D7D2E2F344D4540B3B7E9510C37F3FE; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/liveramp_match
302 Found 142 B URL HTTP/2 um.simpli.fi/liveramp_match
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /liveramp_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://idsync.rlcdn.com/419566.gif?partner_uid=E65CBEE4EB60480687E08E9C673C0377
set-cookie: suid=E65CBEE4EB60480687E08E9C673C0377; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=E65CBEE4EB60480687E08E9C673C0377; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/spotx_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /spotx_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://sync.search.spotxchange.com/partner?adv_id=7797&uid=062DA6314E0A43F791E8171B552211BA
set-cookie: suid=062DA6314E0A43F791E8171B552211BA; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=062DA6314E0A43F791E8171B552211BA; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/an
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /an HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://ib.adnxs.com/setuid?entity=66&code=748B14EF816645DEAFF59BD4C542C06A
set-cookie: suid=748B14EF816645DEAFF59BD4C542C06A; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=748B14EF816645DEAFF59BD4C542C06A; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/rb_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rb_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=6E9D33E17B754F499E22E39D0AFD7CA8&expires=365
set-cookie: suid=6E9D33E17B754F499E22E39D0AFD7CA8; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=6E9D33E17B754F499E22E39D0AFD7CA8; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
um.simpli.fi/ox_match
302 Found 142 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ox_match HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 142
location: https://us-u.openx.net/w/1.0/sd?id=537072966&val=63FDBC33A5E7483D908A516FC549E880
set-cookie: suid=63FDBC33A5E7483D908A516FC549E880; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=63FDBC33A5E7483D908A516FC549E880; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=simplifi&google_cm&google_sc
302 Found 296 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=simplifi&google_cm&google_sc
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 0103dd025950e32d5eb84f8e72ddb997
9ddb94b670f62f21ddee3157f2ad97d122bf8248
ad325fee7bf9ae842aa1ea62cadbd134bf6590eaa84413165b1b7c6f4e5afd0d
GET /pixel?google_nid=simplifi&google_cm&google_sc HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_cm=&google_sc=&google_tc=
date: Sun, 04 Dec 2022 09:40:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 296
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 04-Dec-2022 09:55:42 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion/1026675585/?random=1670146842751&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON
302 Found 42 B URL HTTP/2 www.googleadservices.com/pagead/conversion/1026675585/?random=1670146842751&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/conversion/1026675585/?random=1670146842751&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 04 Dec 2022 09:40:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=GmuMY-2nNs7k6wTvk6noAg&sscte=1&crd=
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=6849790C43B342BEAA01E9D9B1F1B775
403 Forbidden 986 B URL HTTP/2 sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=6849790C43B342BEAA01E9D9B1F1B775
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 81a3c5dae15ea31f32472f0dd80991e0
ee6176aa6534597f84582810f378df01efcbc4fe
5327858dab2cf85098158c0b52411870115dae882c1364f5b295ed680791a104
GET /profiles_engine/ProfilesEngineServlet?at=20&dpi=2124307461&pcid=6849790C43B342BEAA01E9D9B1F1B775 HTTP/1.1
Host: sync.intentiq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: CloudFront
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: text/html
content-length: 986
x-cache: Error from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I846NLXOxjD0E5HpYjW-idOOhNpf5rI52wkYj1r6ksmaXXNb7Dklsw==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 12d9a9db796a7c3bf58b13d220478c36
20bcf507e049b4cc47081508ce28921d252f8a5e
9b024c34dc0f9064757a276a4ca1111b1c954419c508a156c3a8944d534a11e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 296
Cache-Control: max-age=153045
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:42 GMT
Etag: "638c1cc7-1d7"
Expires: Tue, 06 Dec 2022 04:11:27 GMT
Last-Modified: Sun, 04 Dec 2022 04:06:31 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
cm.g.doubleclick.net/pixel?google_nid=simplifi&google_cm=&google_sc=&google_tc=
302 Found 248 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=simplifi&google_cm=&google_sc=&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 90f3317c598426fe1c249b0cc4845475
72856fffdc53e9e630c38bbd9b4fe04afb72015a
2d722b67473e8cf5282435d3608e9a9fe2092279aceaf9d88d4b89fecac69c8b
GET /pixel?google_nid=simplifi&google_cm=&google_sc=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://um.simpli.fi/g_match?id=&google_error=3
date: Sun, 04 Dec 2022 09:40:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 248
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=CAEA482F59824A308A6896971CA9D9C1
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive?partner_id=2305&partner_device_id=CAEA482F59824A308A6896971CA9D9C1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive?partner_id=2305&partner_device_id=CAEA482F59824A308A6896971CA9D9C1 HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 09:40:42 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1670146842958;Expires=Thu, 02 Feb 2023 09:40:42 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=1a4ca605-72b6-4d37-9266-a4a19b8d66b5;Expires=Thu, 02 Feb 2023 09:40:42 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=CAEA482F59824A308A6896971CA9D9C1
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
um.simpli.fi/g_match?id=&google_error=3
204 No Content 0 B URL HTTP/2 um.simpli.fi/g_match?id=&google_error=3
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g_match?id=&google_error=3 HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 04 Dec 2022 09:40:42 GMT
set-cookie: suid=6399B2376AC546CD8DB770EC0672D7DC; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=6399B2376AC546CD8DB770EC0672D7DC; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
expires: Sat, 03 Dec 2022 09:40:42 GMT
cache-control: no-cache
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a2365b2356f35547e7a8a0eeac1a5e71
f070192cf1ad964c90dd00bdf6b04fa598618d61
50415514239bdc4345cb6f75e5aba42fe0f093aaf21de22276aaeceab84c0450
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=CAEA482F59824A308A6896971CA9D9C1
200 OK 95 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive/check?partner_id=2305&partner_device_id=CAEA482F59824A308A6896971CA9D9C1
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 71a50dbba44c78128b221b7df7bb51f1
0ec63b140374ba704a58fa0c743cb357683313dd
3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517
GET /idsync/ex/receive/check?partner_id=2305&partner_device_id=CAEA482F59824A308A6896971CA9D9C1 HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:43 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1670146843007;Expires=Thu, 02 Feb 2023 09:40:43 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=ccd6545a-c4ae-4386-9264-98d83f9f1923;Expires=Thu, 02 Feb 2023 09:40:43 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_3WAY_SYNCS=;Expires=Thu, 02 Feb 2023 09:40:43 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
content-type: image/png
content-length: 95
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash a61c25da0f593fcc685902b0ad889b51
e826c5bc5060e84b82d779639903796e6ce43d09
388d6e76134527e9c6f99288e03f9b550b0d001a2bc97ee30ac2be4bb0fab09a
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 09:40:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 22:10:18 GMT
Expires: Sat, 10 Dec 2022 22:10:17 GMT
Etag: "e826c5bc5060e84b82d779639903796e6ce43d09"
Cache-Control: max-age=603503,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 748
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77439508fcf5b4fd-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 12d9a9db796a7c3bf58b13d220478c36
20bcf507e049b4cc47081508ce28921d252f8a5e
9b024c34dc0f9064757a276a4ca1111b1c954419c508a156c3a8944d534a11e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 297
Cache-Control: max-age=153045
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Etag: "638c1cc7-1d7"
Expires: Tue, 06 Dec 2022 04:11:28 GMT
Last-Modified: Sun, 04 Dec 2022 04:06:31 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 25b6359c83340f619ebf9a7bf75be58e
1afc9e9ed1c1c57c8fd6b934489244a25612778a
3e95976d851c18179fa4bff928c3809735d71c27d131359ff839013421aa266c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100145
Date: Sun, 04 Dec 2022 09:40:43 GMT
Etag: "638b488c-1d7"
Expires: Mon, 05 Dec 2022 13:29:48 GMT
Last-Modified: Sat, 03 Dec 2022 13:01:00 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: wnZyF2Qki0d0Way8t1MKh2xvSK3OkUre63yFNtfSBMapCrGertu32Q==
Age: 1728
ocsp.digicert.com/
200 OK 727 B IP
Hash 5fb333840ee6a4cbed1cc07b4c1d6ccf
8933670471f3042ea2957218d5abdd4d546f8303
d60461ff4beb9347c9e40c56a4313ffa1027c56edda01a104ddc1d34a98ebaf6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6069
Cache-Control: max-age=167474
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Etag: "638c3e98-2d7"
Expires: Tue, 06 Dec 2022 08:11:57 GMT
Last-Modified: Sun, 04 Dec 2022 06:30:48 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 727
ocsp.sectigo.com/
200 OK 471 B IP
Hash a97c490a5f57669e4779f159c4dc7c2e
a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc
440bae73a0f989f36ec69b72d2cd21fab3637efc498af4a5e77d74a55ea7fca7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 09:40:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 01:42:53 GMT
Expires: Sun, 11 Dec 2022 01:42:52 GMT
Etag: "a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc"
Cache-Control: max-age=575528,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77439508fce7b51e-OSL
status.geotrust.com/
200 OK 471 B IP
Hash a6274672c555604d72b1292b4648c3e0
d8c4fa29092153ecf3408e05e051c56ab8fd63c2
007d72b18139f05a87fd896bdfbce956ad5ea3571724eb7d1fcfa5d88a62bc05
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1239
Cache-Control: max-age=106484
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Etag: "638b6338-1d7"
Expires: Mon, 05 Dec 2022 15:15:27 GMT
Last-Modified: Sat, 03 Dec 2022 14:54:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
fei.pro-market.net/engine?du=24;csync=495B4CA03CC54EC6871C94CD17897750;mimetype=img;
302 Found 0 B URL HTTP/2 fei.pro-market.net/engine?du=24;csync=495B4CA03CC54EC6871C94CD17897750;mimetype=img;
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /engine?du=24;csync=495B4CA03CC54EC6871C94CD17897750;mimetype=img; HTTP/1.1
Host: fei.pro-market.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Apache-Coyote/1.1
p3p: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC"
anserver: gapp-eu-5.c.datonics-gcp-01.internal
set-cookie: anProfile="1+1+1f=1+1g=2+1j=57:1+rs=s+rt=5B5A2A9A+s2=(rmd1jv)"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None;
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: Mon, 1 Jan 1990 0:0:0 GMT
access-control-allow-origin: *
location: https://fei.pro-market.net/engine?du=24;csync=495B4CA03CC54EC6871C94CD17897750;mimetype=img;sr
content-type: image/gif
content-length: 0
date: Sun, 04 Dec 2022 09:40:42 GMT
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
eb2.3lift.com/xuid?mid=7969&xuid=61F4DF093F01454FADAD2249F63FDD5E&dongle=yf3
200 OK 37 B URL HTTP/2 eb2.3lift.com/xuid?mid=7969&xuid=61F4DF093F01454FADAD2249F63FDD5E&dongle=yf3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /xuid?mid=7969&xuid=61F4DF093F01454FADAD2249F63FDD5E&dongle=yf3 HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:43 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ib.adnxs.com/setuid?entity=66&code=748B14EF816645DEAFF59BD4C542C06A
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=66&code=748B14EF816645DEAFF59BD4C542C06A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=66&code=748B14EF816645DEAFF59BD4C542C06A HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 04 Dec 2022 09:40:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D66%26code%3D748B14EF816645DEAFF59BD4C542C06A
AN-X-Request-Uuid: dc86a4fc-27e0-439d-b854-daf2034dcbba
Set-Cookie: uuid2=3657107833846727357; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 04-Mar-2023 09:40:43 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
googleads.g.doubleclick.net/pagead/viewthroughconversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=GmuMY-2nNs7k6wTvk6noAg&sscte=1&crd=
302 Found 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=GmuMY-2nNs7k6wTvk6noAg&sscte=1&crd=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=GmuMY-2nNs7k6wTvk6noAg&sscte=1&crd= HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 04 Dec 2022 09:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/pagead/1p-conversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=GmuMY-2nNs7k6wTvk6noAg&random=1008002320
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 04-Dec-2022 09:55:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ed2f6748fa146ef8fc76c54623ba070a
3409ef5efb2dbd5b040e492546b37fce069932f4
bdc52df0f850c1970751ceb0469dcbed35002262d356fbed6911dbbc31b4cf5c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5869
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Last-Modified: Sun, 04 Dec 2022 08:02:55 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
idsync.rlcdn.com/419566.gif?partner_uid=E65CBEE4EB60480687E08E9C673C0377
451 Unavailable For Legal Reasons 0 B URL HTTP/2 idsync.rlcdn.com/419566.gif?partner_uid=E65CBEE4EB60480687E08E9C673C0377
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /419566.gif?partner_uid=E65CBEE4EB60480687E08E9C673C0377 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 451 Unavailable For Legal Reasons
date: Sun, 04 Dec 2022 09:40:43 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
us-u.openx.net/w/1.0/sd?id=537072966&val=63FDBC33A5E7483D908A516FC549E880
200 OK 43 B URL HTTP/2 us-u.openx.net/w/1.0/sd?id=537072966&val=63FDBC33A5E7483D908A516FC549E880
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /w/1.0/sd?id=537072966&val=63FDBC33A5E7483D908A516FC549E880 HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 04 Dec 2022 09:40:43 GMT
content-type: image/gif
content-length: 43
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fei.pro-market.net/engine?du=24;csync=495B4CA03CC54EC6871C94CD17897750;mimetype=img;sr
200 OK 43 B URL HTTP/2 fei.pro-market.net/engine?du=24;csync=495B4CA03CC54EC6871C94CD17897750;mimetype=img;sr
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 968c3ad2c1183fee0bf0dd479f7904b7
1d770800ecb05eb9133f9b51620c9e4349656859
3331a0486cb3e8a75c8c2fdf02bf80fd8fe2b811dfe5c7b4aa892d38bfcf604a
GET /engine?du=24;csync=495B4CA03CC54EC6871C94CD17897750;mimetype=img;sr HTTP/1.1
Host: fei.pro-market.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Apache-Coyote/1.1
p3p: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC"
anserver: gapp-eu-4.c.datonics-gcp-01.internal
set-cookie: anProfile="0+1+1f=1+1g=2+1j=57:1+rs=s+rt=5B5A2A9A+s2=(rmd1jv)"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None;
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: Mon, 1 Jan 1990 0:0:0 GMT
access-control-allow-origin: *
content-type: image/gif
content-length: 43
date: Sun, 04 Dec 2022 09:40:42 GMT
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D66%26code%3D748B14EF816645DEAFF59BD4C542C06A
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D66%26code%3D748B14EF816645DEAFF59BD4C542C06A
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D66%26code%3D748B14EF816645DEAFF59BD4C542C06A HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Dec 2022 09:40:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 9cc0a3bc-11ac-4042-84a0-cf81ad79cd75
Set-Cookie: anj=dTM7k!M4.FE:2jUF']wIg2GU'h2Xl/!]tbPl1N!7On*M$=BXI'dXG3Gjbpy]gks$XeV[Eah1*4eeTlL_e8u[Mg^diE`Bk:`/X%W#.wL4W1Qw1ckK)mY; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 04-Mar-2023 09:40:43 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
status.geotrust.com/
200 OK 471 B IP
Hash a6274672c555604d72b1292b4648c3e0
d8c4fa29092153ecf3408e05e051c56ab8fd63c2
007d72b18139f05a87fd896bdfbce956ad5ea3571724eb7d1fcfa5d88a62bc05
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1762
Cache-Control: max-age=107007
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Etag: "638b6338-1d7"
Expires: Mon, 05 Dec 2022 15:24:10 GMT
Last-Modified: Sat, 03 Dec 2022 14:54:48 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 9880f7ae3ef4a61637cba95d4141ea37
32f3bb936d201e68ffc6dda505828068869fe512
271109727a502a013abae4f6bd2fb871a2ccbfd83b0980bc2a1a99255959bdd8
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Dec 2022 09:40:43 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Dec 2022 21:01:56 GMT
Expires: Sun, 04 Dec 2022 21:01:56 GMT
ETag: "32f3bb936d201e68ffc6dda505828068869fe512"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
loadm.exelator.com/load/?p=204&g=2191&simid=D12DAC585E8E4DAC90D44C8247F634B5&j=0
204 No Content 0 B URL HTTP/2 loadm.exelator.com/load/?p=204&g=2191&simid=D12DAC585E8E4DAC90D44C8247F634B5&j=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /load/?p=204&g=2191&simid=D12DAC585E8E4DAC90D44C8247F634B5&j=0 HTTP/1.1
Host: loadm.exelator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Dec 2022 09:40:43 GMT
cache-control: no-cache
x-powered-by: Undertow/1
access-control-allow-credentials: true
p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA, policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA
X-Firefox-Spdy: h2
stags.bluekai.com/site/29931?id=B646A09DFD3D42EBA169618FAE2E06E6
200 OK 62 B URL HTTP/2 stags.bluekai.com/site/29931?id=B646A09DFD3D42EBA169618FAE2E06E6
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3f386f5061436a0338a64e0910db495d
599fe4a552c991a2b3ce5a1660732bf7b21fb901
0af3aae90b7de9fdceee2ab421378ea2f54c74be81ef43fc6c1790a032755d80
GET /site/29931?id=B646A09DFD3D42EBA169618FAE2E06E6 HTTP/1.1
Host: stags.bluekai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 62
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Sun, 04 Dec 2022 09:40:43 GMT
set-cookie: bku=blx99O+gMs1esIzX; Path=/; Domain=.bluekai.com; Expires=Sun, 04 Jun 2023 09:40:43 GMT; Secure; SameSite=None
bkpa=KJy9nyexd02pSUHknp/8mE1hwtkAwD/tBejO1ekWHAxpHex0HDJO1ER8BMWTHAaa1ADyBADt9y9gs9Fc; Path=/; Domain=.bluekai.com; Expires=Sun, 04 Jun 2023 09:40:43 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c9e0bb25e8c28e8b10038806b0a7190
9fa6097aeb8eacde8ba7c9ab80a7a7d2405ae2bc
f4864000960be2f888ed7d2467f74130231fed6f56ad48ff15861f5769e95a58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 744520b70d0eae35ac40ece84669ca6c
139a011cb51181708e1fc7bb759debd204bfcf57
31fa10ca032ba89fa8990871d7123213bf7296486ca73c17733aa0b3ea5ed362
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1591
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Last-Modified: Sun, 04 Dec 2022 09:14:12 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash a97c490a5f57669e4779f159c4dc7c2e
a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc
440bae73a0f989f36ec69b72d2cd21fab3637efc498af4a5e77d74a55ea7fca7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 09:40:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 01:42:53 GMT
Expires: Sun, 11 Dec 2022 01:42:52 GMT
Etag: "a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc"
Cache-Control: max-age=575528,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77439509fdf9b51e-OSL
www.google.com/pagead/1p-conversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=GmuMY-2nNs7k6wTvk6noAg&random=1008002320
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-conversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=GmuMY-2nNs7k6wTvk6noAg&random=1008002320
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=GmuMY-2nNs7k6wTvk6noAg&random=1008002320 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 04 Dec 2022 09:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=GmuMY-2nNs7k6wTvk6noAg&random=1008002320&ipr=y&prhg=0
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ce.lijit.com/merge?pid=2&3pid=7D7D2E2F344D4540B3B7E9510C37F3FE
204 No Content 0 B URL HTTP/1.1 ce.lijit.com/merge?pid=2&3pid=7D7D2E2F344D4540B3B7E9510C37F3FE
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge?pid=2&3pid=7D7D2E2F344D4540B3B7E9510C37F3FE HTTP/1.1
Host: ce.lijit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Sun, 04 Dec 2022 09:40:43 GMT
X-MERGE: GDPR Optout true
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
Expires: Fri, 20 Mar 2009 00:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
X-Sovrn-Pod: ad_ap1ams1
pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=6E9D33E17B754F499E22E39D0AFD7CA8&expires=365
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=6E9D33E17B754F499E22E39D0AFD7CA8&expires=365
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=6286&nid=2132&put=6E9D33E17B754F499E22E39D0AFD7CA8&expires=365 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 7c5d24517ee193cc868994bc18883d1d
Content-Type: image/gif
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ef9a731c70c2eb068523852a8ab6ad08
095576edecfea76c108060e4c0ff4d1e9046b05c
85a0adfe6e0cf1db92dacb71a4b7c92f6febcc7428414a970b283246fa269326
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115302
Date: Sun, 04 Dec 2022 09:40:43 GMT
Etag: "638b84f4-1d7"
Expires: Mon, 05 Dec 2022 17:42:25 GMT
Last-Modified: Sat, 03 Dec 2022 17:18:44 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: 9-7WZG6HzhO_eYIfWG5qmLtGa7CxujqCdhRmdtVEp9iC3xKo5wzJgQ==
Age: 1421
status.geotrust.com/
200 OK 471 B IP
Hash 5de61369c0082229e4b697abe5fed620
76fff06483173541f116a7bf8814544280562b62
ff438b449b60fc11f3388522f8b499aedf7085da643639d3cbeac1d5c6d7d27a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1722
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Last-Modified: Sun, 04 Dec 2022 09:12:01 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ed1905788781e21fddfadbc6e2c81f8b
044863294a2f2e4e79ca468e40b4657a3fe25457
a72dfe1662a88aa1e966ae22e10f9e52924faaf4fc116210e65a42696d40d301
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115305
Date: Sun, 04 Dec 2022 09:40:43 GMT
Etag: "638b83ae-1d7"
Expires: Mon, 05 Dec 2022 17:42:28 GMT
Last-Modified: Sat, 03 Dec 2022 17:13:18 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 b4b5a8fc69875a192be2508de7e5a5e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: YsWw0WRqwMkn2OpbDtu0NFtf0tp8wm5BsyEG_7TVVWyfRCd3bz-bpA==
Age: 1750
sync.search.spotxchange.com/partner?adv_id=7797&uid=062DA6314E0A43F791E8171B552211BA
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7797&uid=062DA6314E0A43F791E8171B552211BA
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7797&uid=062DA6314E0A43F791E8171B552211BA HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 04 Dec 2022 09:40:43 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=b8ae0da7-73b7-11ed-9c8b-182a6e990406; expires=Sun, 01-Jan-2023 09:40:43 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7797&uid=062DA6314E0A43F791E8171B552211BA&__user_check__=1&sync_id=b8ae0de0-73b7-11ed-9c8b-182a6e990406
X-fe: 133
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
d.agkn.com/pixel/10751/?che=1670146843101&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D217023104355000959479
302 Found 0 B URL HTTP/1.1 d.agkn.com/pixel/10751/?che=1670146843101&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D217023104355000959479
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/10751/?che=1670146843101&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D217023104355000959479 HTTP/1.1
Host: d.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache, must-revalidate
Date: Sun, 04 Dec 2022 09:40:43 GMT
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://um.simpli.fi/aa_px?sk=217023104355000959479
P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: Apache-Coyote/1.1
Set-Cookie: ab=0001%3ASszaeyPmeBNRN4KHo7EwQYYVWavzEIrk;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
u=C|0AAArHyebKx8nmwAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
Content-Length: 0
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 663979bbd831a40bec8611cfac8d77af
aa43c96676a33100f244e6772e37adc2b6f89b76
60c21027da288e857f546b531dd226d81206bfa85a35985b0e1587a68dec4d5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sync.bfmio.com/sync?pid=141&uid=684C9683E9F84614A5A00D51525F68AD
204 0 B URL HTTP/1.1 sync.bfmio.com/sync?pid=141&uid=684C9683E9F84614A5A00D51525F68AD
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?pid=141&uid=684C9683E9F84614A5A00D51525F68AD HTTP/1.1
Host: sync.bfmio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204
Date: Sun, 04 Dec 2022 09:40:42 GMT
Set-Cookie: __141_cid=684C9683E9F84614A5A00D51525F68AD; Domain=.bfmio.com; Expires=Mon, 04-Dec-2023 09:40:43 GMT; Path=/
__io_cid=f0b8ab6018cf83abae51594783ab48f33209c3af; Domain=.bfmio.com; Expires=Mon, 04-Dec-2023 09:40:43 GMT; Path=/
Connection: keep-alive
sync.search.spotxchange.com/partner?adv_id=7797&uid=062DA6314E0A43F791E8171B552211BA&__user_check__=1&sync_id=b8ae0de0-73b7-11ed-9c8b-182a6e990406
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7797&uid=062DA6314E0A43F791E8171B552211BA&__user_check__=1&sync_id=b8ae0de0-73b7-11ed-9c8b-182a6e990406
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7797&uid=062DA6314E0A43F791E8171B552211BA&__user_check__=1&sync_id=b8ae0de0-73b7-11ed-9c8b-182a6e990406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 09:40:43 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=b8b7a353-73b7-11ed-8bd5-129210fe0306; expires=Sun, 01-Jan-2023 09:40:43 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 98
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
um.simpli.fi/aa_px?sk=217023104355000959479
302 Found 142 B URL HTTP/2 um.simpli.fi/aa_px?sk=217023104355000959479
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /aa_px?sk=217023104355000959479 HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 09:40:43 GMT
content-type: text/html
content-length: 142
set-cookie: suid=93CE7B6ABDB541709722C29BC2B68D38; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:43 GMT; SameSite=none; Secure;
suid_legacy=93CE7B6ABDB541709722C29BC2B68D38; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:43 GMT; Secure;
location: /empty.gif
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=GmuMY-2nNs7k6wTvk6noAg&random=1008002320&ipr=y&prhg=0
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-conversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=GmuMY-2nNs7k6wTvk6noAg&random=1008002320&ipr=y&prhg=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/1026675585/?random=772431504&cv=7&fst=1670146842751&fmt=3&value=0&label=eGG0CO2U2AIQgafH6QM&guid=ON&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=GmuMY-2nNs7k6wTvk6noAg&random=1008002320&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 04 Dec 2022 09:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 663979bbd831a40bec8611cfac8d77af
aa43c96676a33100f244e6772e37adc2b6f89b76
60c21027da288e857f546b531dd226d81206bfa85a35985b0e1587a68dec4d5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 09:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
um.simpli.fi/empty.gif
200 OK 43 B IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /empty.gif HTTP/1.1
Host: um.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
set-cookie: suid=AE6822FB1B1E4E7BA0EDA145557FB485; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:43 GMT; SameSite=none; Secure;
suid_legacy=AE6822FB1B1E4E7BA0EDA145557FB485; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:43 GMT; Secure;
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2
bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=89265FD8764D438894E720F2BF4428CB
404 Not Found 49 B URL HTTP/2 bcp.crwdcntrl.net/map/c=7625/tp=SIMP/tpid=89265FD8764D438894E720F2BF4428CB
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 56398e76be6355ad5999b262208a17c9
a1fdee122b95748d81cee426d717c05b5174fe96
2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
GET /map/c=7625/tp=SIMP/tpid=89265FD8764D438894E720F2BF4428CB HTTP/1.1
Host: bcp.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Sun, 04 Dec 2022 09:40:44 GMT
content-type: image/gif
content-length: 49
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.8.24
access-control-allow-origin: *
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato|Open+Sans|Roboto:300,300i,400,400i,500,500i,700,700i,900,900i&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato|Open+Sans|Roboto:300,300i,400,400i,500,500i,700,700i,900,900i&display=swap
IP
GET /css?family=Lato|Open+Sans|Roboto:300,300i,400,400i,500,500i,700,700i,900,900i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ufaasia365.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 09:40:36 GMT
date: Sun, 04 Dec 2022 09:40:36 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=2EBE25F9E37A4035B2F7B4EADA850690
302 Found 0 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9201915418&sifi_uid=2EBE25F9E37A4035B2F7B4EADA850690
IP
GET /adscores/g.pixel?sid=9201915418&sifi_uid=2EBE25F9E37A4035B2F7B4EADA850690 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 09:40:43 GMT
location: https://d.agkn.com/pixel/10751/?che=1670146843101&ip=91.90.42.154&l1=https%3A%2F%2Fum.simpli.fi%2Faa_px%3Fsk%3D217023104355000959479
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
set-cookie: ab=0001%3Asu6NZoyj4%2BEW3Bg7oWa69485oaiwox7y; Path=/; Domain=.agkn.com; Expires=Mon, 04-Dec-2023 09:40:43 GMT; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
simplifi.partners.tremorhub.com/sync?UISF=FD91BEFB798B4CB5A4C5D759D6C0843A
200 OK 0 B URL HTTP/2 simplifi.partners.tremorhub.com/sync?UISF=FD91BEFB798B4CB5A4C5D759D6C0843A
IP
GET /sync?UISF=FD91BEFB798B4CB5A4C5D759D6C0843A HTTP/1.1
Host: simplifi.partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://connect.segmint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:43 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
i.simpli.fi/p?cid=283320&cb=sifi_att_27612299117._hp
200 OK 0 B URL HTTP/2 i.simpli.fi/p?cid=283320&cb=sifi_att_27612299117._hp
IP
GET /p?cid=283320&cb=sifi_att_27612299117._hp HTTP/1.1
Host: i.simpli.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.segmint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 09:40:42 GMT
content-type: application/javascript; charset=UTF-8
set-cookie: suid=CD0960C7567A4E6A8A2B27BE8AF1FB87; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; SameSite=none; Secure;
suid_legacy=CD0960C7567A4E6A8A2B27BE8AF1FB87; Path=/; domain=simpli.fi; Expires=Tue, 05-Dec-23 09:40:42 GMT; Secure;
uid_syncd=true; path=/; expires=Sun, 11 Dec 2022 09:40:42 GMT; domain=.simpli.fi; secure
uid_syncd_secure=true; path=/; expires=Sun, 11 Dec 2022 09:40:42 GMT; domain=.simpli.fi; samesite=none; secure
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache, no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT, Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
80.66.65.162
72.251.249.14
169.50.137.179
104.18.32.68
93.184.220.29
184.24.45.23
3.248.85.122
52.58.215.26