email.franchisedirect.com/Prod/link-tracker?redirectUrl=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&sig=3xdB8e6J4pnNd8YNaMuk2BQtsg3xZRbEsZ9B7zrxCaDe&iat=1667571426&a=%7C%7C649518235%7C%7C&account=https://barges.us&email=gyRMXpx+KJbHl+Xq5LNC5w/oAQY7wIKwevAKcx2CvIo=
104.17.202.31 0 B URL email.franchisedirect.com/Prod/link-tracker?redirectUrl=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&sig=3xdB8e6J4pnNd8YNaMuk2BQtsg3xZRbEsZ9B7zrxCaDe&iat=1667571426&a=%7C%7C649518235%7C%7C&account=https://barges.us&email=gyRMXpx+KJbHl+Xq5LNC5w/oAQY7wIKwevAKcx2CvIo=
IP 104.17.202.31:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing IRS
GET /Prod/link-tracker?redirectUrl=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&sig=3xdB8e6J4pnNd8YNaMuk2BQtsg3xZRbEsZ9B7zrxCaDe&iat=1667571426&a=%7C%7C649518235%7C%7C&account=https://barges.us&email=gyRMXpx+KJbHl+Xq5LNC5w/oAQY7wIKwevAKcx2CvIo= HTTP/1.1
Host: email.franchisedirect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 05 Dec 2023 01:18:01 GMT
content-type: application/octet-stream
content-length: 0
location: https://selligenttier.naylorcampaigns.com/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTYyNDExMiZtZXNzYWdlaWQ9NjI0MTEyJmRhdGFiYXNlaWQ9NjI0MTEyJnNlcmlhbD0xNjgyODQwNyZlbWFpbGlkPVRpbUBFbGV2YXRlZGNnLmNvbSZ1c2VyaWQ9MjExMTg2JnRhcmdldGlkPSZtbj0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&9999&&&https://bafkreifykw6uoao3balsh2ed5z5xzy2jqhwvdfd3x5nmfoyvxbm5yfvit4.ipfs.w3s.link/?dHYvdGZoc2JjQW1me3tqc2h0FRJjNUnY2_O-yZs61ofhTbPgwZwhFMUNIyGJO7-K8K-OcCQ-IEZDl8vDdGbsFRJjNUnY2_O-yZs61ofhTbPgwZwhFMUNIyGJO7-K8K-OcCQ-IEZDl8vDdGbs3330180b865847a4d75e7540bd8d718af41cd1b2#dHYvdGZoc2JjQW1me3tqc2h0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 830873ecad560b61-OSL
X-Firefox-Spdy: h2
ocsp.netsolssl.com/
104.18.38.233 472 B IP 104.18.38.233:0
Hash cf992d78adca4fac2c686c094a6f0cc7
216c7da6b2d7da394ea3d89207d2a584c7307c03
855bfbc5cb31f5675a11cd8e2b6b25cef49a6f3619d670ce6a8e0baaec1697ec
POST / HTTP/1.1
Host: ocsp.netsolssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 01:18:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 04 Dec 2023 17:19:40 GMT
Expires: Mon, 11 Dec 2023 17:19:39 GMT
Etag: "216c7da6b2d7da394ea3d89207d2a584c7307c03"
Cache-Control: max-age=576892,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 830873efa83256af-OSL
selligenttier.naylorcampaigns.com/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTYyNDExMiZtZXNzYWdlaWQ9NjI0MTEyJmRhdGFiYXNlaWQ9NjI0MTEyJnNlcmlhbD0xNjgyODQwNyZlbWFpbGlkPVRpbUBFbGV2YXRlZGNnLmNvbSZ1c2VyaWQ9MjExMTg2JnRhcmdldGlkPSZtbj0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&9999&&&https://bafkreifykw6uoao3balsh2ed5z5xzy2jqhwvdfd3x5nmfoyvxbm5yfvit4.ipfs.w3s.link/?dHYvdGZoc2JjQW1me3tqc2h0FRJjNUnY2_O-yZs61ofhTbPgwZwhFMUNIyGJO7-K8K-OcCQ-IEZDl8vDdGbsFRJjNUnY2_O-yZs61ofhTbPgwZwhFMUNIyGJO7-K8K-OcCQ-IEZDl8vDdGbs3330180b865847a4d75e7540bd8d718af41cd1b2
144.202.229.149 1.9 kB URL selligenttier.naylorcampaigns.com/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTYyNDExMiZtZXNzYWdlaWQ9NjI0MTEyJmRhdGFiYXNlaWQ9NjI0MTEyJnNlcmlhbD0xNjgyODQwNyZlbWFpbGlkPVRpbUBFbGV2YXRlZGNnLmNvbSZ1c2VyaWQ9MjExMTg2JnRhcmdldGlkPSZtbj0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&9999&&&https://bafkreifykw6uoao3balsh2ed5z5xzy2jqhwvdfd3x5nmfoyvxbm5yfvit4.ipfs.w3s.link/?dHYvdGZoc2JjQW1me3tqc2h0FRJjNUnY2_O-yZs61ofhTbPgwZwhFMUNIyGJO7-K8K-OcCQ-IEZDl8vDdGbsFRJjNUnY2_O-yZs61ofhTbPgwZwhFMUNIyGJO7-K8K-OcCQ-IEZDl8vDdGbs3330180b865847a4d75e7540bd8d718af41cd1b2
IP 144.202.229.149:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1890), with no line terminators
Hash acf060683887e15b5d1d32d18104f8f5
df4b8f358a58410aa7f7a703dd55a648d98ded08
2f324d2a4e05811782b2d7f9858b79014d1f2953f94e901b994dfe6dec9f6b38
GET /track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTYyNDExMiZtZXNzYWdlaWQ9NjI0MTEyJmRhdGFiYXNlaWQ9NjI0MTEyJnNlcmlhbD0xNjgyODQwNyZlbWFpbGlkPVRpbUBFbGV2YXRlZGNnLmNvbSZ1c2VyaWQ9MjExMTg2JnRhcmdldGlkPSZtbj0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&9999&&&https://bafkreifykw6uoao3balsh2ed5z5xzy2jqhwvdfd3x5nmfoyvxbm5yfvit4.ipfs.w3s.link/?dHYvdGZoc2JjQW1me3tqc2h0FRJjNUnY2_O-yZs61ofhTbPgwZwhFMUNIyGJO7-K8K-OcCQ-IEZDl8vDdGbsFRJjNUnY2_O-yZs61ofhTbPgwZwhFMUNIyGJO7-K8K-OcCQ-IEZDl8vDdGbs3330180b865847a4d75e7540bd8d718af41cd1b2 HTTP/1.1
Host: selligenttier.naylorcampaigns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 01:18:02 GMT
Server:
Cache-Control: no-cache, must-revalidate, max-age=0, no-store
Expires: -1
Pragma: no-cache
Content-Length: 1890
Connection: close
Content-Type: text/html;charset=ascii
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.1/css/all.min.css
104.17.24.14200 OK 10 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.1/css/all.min.css
IP 104.17.24.14:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (57147)
Hash 2a0e11a7655cf7af50d9152727c134ef
136e6626dc83d228b50416249fe05864ab065e40
9a680b90260b5106d79f4075491ab31daafa7429eff686453c40b58357309649
GET /ajax/libs/font-awesome/5.12.1/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkaccountants.com.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:18:05 GMT
content-type: text/css; charset=utf-8
content-length: 10134
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-dff5"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 773301
expires: Sun, 24 Nov 2024 01:18:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wrXpT19VZr7mxJ8n8pwB%2B0ITFwgKxBUgfSdLFdt9%2BwgZ4oMfmY9QBB%2FgNaCTYNfXPj8IR3%2BIpq0MFX%2B%2FEmHeXywZDsF6q5rcApsQlVmMwr3F4GBJAtCqeOMLTplf33oM0FX5LCI7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830874046bf4b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.imgur.com/vQzPbPE.png
151.101.84.193200 OK 74 kB IP 151.101.84.193:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type PNG image data, 1786 x 799, 8-bit/color RGBA, non-interlaced\012- data
Hash 46c84ad77a0c299afebd00d59eadcef9
902989aecf713b652101a721e805840ef79c09ca
262a2ce2e7043610408b9c71725d26d3e6bc922e6df5c26e46c704680eb979f7
GET /vQzPbPE.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkaccountants.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 16 Nov 2023 03:48:08 GMT
etag: "46c84ad77a0c299afebd00d59eadcef9"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: n2zNGgaaaXa6Ib4-0AUnHyfWxgWsx82XdvmAtzPmM6i_OtFxmuFpTg==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 05 Dec 2023 01:18:05 GMT
age: 1125228
x-served-by: cache-iad-kjyo7100025-IAD, cache-bma1679-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 5, 1
x-timer: S1701739086.519635,VS0,VE2
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 73924
X-Firefox-Spdy: h2
i.imgur.com/gyaUztl.jpg
151.101.84.193200 OK 35 kB IP 151.101.84.193:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1039x685, components 3\012- data
Hash 467feffb430e029b107c946e564f66a0
93eaf66f4a8290cd4190730eda35472f6ec888db
687757a544d82490976720cb7cd6b3f2d7df197795e110f6d25770b11ab05449
GET /gyaUztl.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkaccountants.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Thu, 16 Nov 2023 05:41:31 GMT
etag: "467feffb430e029b107c946e564f66a0"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: 0g07ZUaJrFnSZJ9qsE4JoLDgAm6_5c_8lxkkciKGnwM7ZWkAj9apqQ==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 05 Dec 2023 01:18:05 GMT
age: 303894
x-served-by: cache-iad-kcgs7200080-IAD, cache-bma1679-BMA
x-cache: Miss from cloudfront, HIT, MISS
x-cache-hits: 21, 0
x-timer: S1701739086.520119,VS0,VE99
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 35062
X-Firefox-Spdy: h2
i.imgur.com/zHZvjaX.png
151.101.84.193200 OK 23 kB IP 151.101.84.193:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type PNG image data, 1000 x 218, 8-bit/color RGBA, non-interlaced\012- data
Hash 90192e05add21d8f73c118a38af5563a
3cdd05e6bdd660cde93bf8bbe2f1fbb50f6c6268
154789683150d7e19e915b1386ccb30634ace8595da1e4d683d463196e8a4ca5
GET /zHZvjaX.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkaccountants.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 16 Nov 2023 05:39:41 GMT
etag: "90192e05add21d8f73c118a38af5563a"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: 7RZel0HofYiUNmRvuMtz4NAK2mJso8O1PVx8iVJVs3qMUc4eUix2uQ==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 05 Dec 2023 01:18:05 GMT
age: 1452886
x-served-by: cache-iad-kcgs7200131-IAD, cache-bma1679-BMA
x-cache: Miss from cloudfront, HIT, MISS
x-cache-hits: 1002, 0
x-timer: S1701739086.519757,VS0,VE113
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 23322
X-Firefox-Spdy: h2
kit.fontawesome.com/b99e675b6e.js
104.18.40.68200 OK 4.4 kB URL GET HTTP/2 kit.fontawesome.com/b99e675b6e.js
IP 104.18.40.68:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File type ASCII text, with very long lines (11461)
Hash cb7f7e5d95513939408e1879b413da53
870a0ab4329bb9a8e511c6613ed563f537dba9c9
ae04f6cafbb3bb6a4d8fed1ff468af34a2a9784570a0ab38285903a8cb2a65fc
GET /b99e675b6e.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkaccountants.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:18:05 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F53FE3NRljTso0kGt_5h
cf-cache-status: HIT
server: cloudflare
cf-ray: 830874044de45690-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
sparkaccountants.com.au/style.css
141.193.213.10404 Not Found 76 kB URL GET HTTP/3 sparkaccountants.com.au/style.css
IP 141.193.213.10:443
ASN #209242 Cloudflare London, LLC
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerLet's Encrypt
Subjectsparkaccountants.com.au
FingerprintA2:51:E4:C8:90:CD:7E:27:C5:0A:03:AA:48:3E:FE:29:2C:8E:FC:3D
ValiditySun, 26 Nov 2023 23:30:04 GMT - Sat, 24 Feb 2024 23:30:03 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /style.css HTTP/1.1
Host: sparkaccountants.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~
Cookie: __cf_bm=GWTHCkHgx_8Yrhz5y8MNEqnFwwluPKst_jz9EhrWEPY-1701739085-0-AfVyoUkYpbXBIyQ3pE/xBAph9Q4CZgQw3hfMaBsHsaTl6UJvObjXz52EkRSV1+gIYztGoW8bQOgMQwB11K6u0Ho=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 05 Dec 2023 01:18:06 GMT
content-type: text/html
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 83087403fbbc5699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/josefinsans/v32/Qw3PZQNVED7rKGKxtqIqX5E-AVSJrOCfjY46_DjQbMZhLw.woff2
216.58.207.227200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/josefinsans/v32/Qw3PZQNVED7rKGKxtqIqX5E-AVSJrOCfjY46_DjQbMZhLw.woff2
IP 216.58.207.227:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 12388, version 1.0\012- data
Hash 05110e0dbae56dcfb519fccb407e0f64
74453afb44493489399f67cb047e39c24d11afe5
24a6ddc71f3d94fd9bcd29b7540b49f299a1ca78986464aeb47291fdea955e35
GET /s/josefinsans/v32/Qw3PZQNVED7rKGKxtqIqX5E-AVSJrOCfjY46_DjQbMZhLw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sparkaccountants.com.au
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12388
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:06:42 GMT
expires: Fri, 29 Nov 2024 05:06:42 GMT
cache-control: public, max-age=31536000
age: 418284
last-modified: Thu, 24 Aug 2023 20:50:19 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.1/webfonts/fa-solid-900.woff2
104.17.24.14200 OK 76 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.1/webfonts/fa-solid-900.woff2
IP 104.17.24.14:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 76120, version 330.-16188\012- data
Hash 55eb2a60e8181f0e68b558c991973bf0
af776f52d579da211590e0691d554b88a69dfe61
2c3097237d60f42e800ebe4009c9af144bb19e5581e1c0501c7b259eee7e210c
GET /ajax/libs/font-awesome/5.12.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sparkaccountants.com.au
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:18:06 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 76120
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e60-12958"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1011868
expires: Sun, 24 Nov 2024 01:18:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cbrMLHURJJbz3wYfS7g6Op%2BaARuJyJqNTsdEJxi4tSvNGoszuXvbqgx%2Bc7ipeM42Gw%2F9ESVvf%2BTx%2Bx8LepfK6oHYirnuv7YWyWOSuP1XpNngfJh4xYfCSgtgi3W1Mpo5AYgE1l2j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8308740bfeb656cc-OSL
alt-svc: h3=":443"; ma=86400
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=b99e675b6e
172.64.204.20200 OK 60 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=b99e675b6e
IP 172.64.204.20:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81
ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT
File type ASCII text, with very long lines (60130)
Hash a12ec7ebe75a4d59a5dd6b79e2ba2e16
28f5dcc595ee6d4163481ef64170180502c8629b
fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda
GET /releases/v5.15.4/css/free.min.css?token=b99e675b6e HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sparkaccountants.com.au/
Origin: https://sparkaccountants.com.au
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:18:05 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e991b818a6011632592e8596a2d9592e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR5-P6
x-amz-cf-id: JdlOzzGv1IuIPTFOplG2UipjJSQb8mtrCwOtn3C0nY8lo5QJyFUvIQ==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c9t3XFzUUofk228%2F5lu82MxPbADWbQFGvKVbwP3NWycQm9iuB8OUNYqlBKNbrz4OVO8iA9CQS67ii%2FjmIQO0pr70lfXmkv%2BAfDXW6x0SA6CoBGgRLWgkVxvgQYt4vipR8%2BmXrsx19A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830874062a82775b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Josefin+Sans&display=swap
142.250.74.106200 OK 1.3 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Josefin+Sans&display=swap
IP 142.250.74.106:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1300), with no line terminators
Hash 934264117db89dca6d98640cdc53d195
b0bdefa271a5dcf4d5c73bf76c8dc6d69a106d27
78eb89392322b0043a191c8ac60a436f8d1ca7b9c4da12528a30bac998fb2664
GET /css?family=Josefin+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkaccountants.com.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 01:18:05 GMT
date: Tue, 05 Dec 2023 01:18:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Josefin+Sans&display=swap
142.250.74.106200 OK 1.3 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Josefin+Sans&display=swap
IP 142.250.74.106:443
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1300), with no line terminators
Hash 934264117db89dca6d98640cdc53d195
b0bdefa271a5dcf4d5c73bf76c8dc6d69a106d27
78eb89392322b0043a191c8ac60a436f8d1ca7b9c4da12528a30bac998fb2664
GET /css?family=Josefin+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkaccountants.com.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 01:18:05 GMT
date: Tue, 05 Dec 2023 01:18:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sparkaccountants.com.au/favicon.ico
141.193.213.10200 OK 0 B URL GET HTTP/3 sparkaccountants.com.au/favicon.ico
IP 141.193.213.10:443
ASN #209242 Cloudflare London, LLC
Requested by https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~#c2dyaXp6ZWxAYmFyZ2VzLnVz
Certificate IssuerLet's Encrypt
Subjectsparkaccountants.com.au
FingerprintA2:51:E4:C8:90:CD:7E:27:C5:0A:03:AA:48:3E:FE:29:2C:8E:FC:3D
ValiditySun, 26 Nov 2023 23:30:04 GMT - Sat, 24 Feb 2024 23:30:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sparkaccountants.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~
Cookie: __cf_bm=GWTHCkHgx_8Yrhz5y8MNEqnFwwluPKst_jz9EhrWEPY-1701739085-0-AfVyoUkYpbXBIyQ3pE/xBAph9Q4CZgQw3hfMaBsHsaTl6UJvObjXz52EkRSV1+gIYztGoW8bQOgMQwB11K6u0Ho=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:18:05 GMT
content-type: image/x-icon
content-length: 0
last-modified: Fri, 01 Dec 2023 15:19:20 GMT
etag: "6569f978-0"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 72275
accept-ranges: bytes
server: cloudflare
cf-ray: 830874072d115699-OSL
alt-svc: h3=":443"; ma=86400
sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~
141.193.213.10200 OK 8.2 kB URL User Request GET HTTP/2 sparkaccountants.com.au/?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~
IP 141.193.213.10:443
ASN #209242 Cloudflare London, LLC
Certificate IssuerLet's Encrypt
Subjectsparkaccountants.com.au
FingerprintA2:51:E4:C8:90:CD:7E:27:C5:0A:03:AA:48:3E:FE:29:2C:8E:FC:3D
ValiditySun, 26 Nov 2023 23:30:04 GMT - Sat, 24 Feb 2024 23:30:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8636), with no line terminators
Hash 53c194decb2afb64a0f969e28b2f98c0
80cd85abcdebae45134b2cae2d21a4b2c652c1ed
0900da2da7c267a06ab0e77c135f5c1f205056bde9be5ca36c81519316a4af57
GET /?4:lQ7-Dts[jm8W_jSeM;Y%27ETFZ!;A06_owi~ORw28h1Pq5=;OeiKReTP!bdi:-iL5t2w:4DZ)R-@Yyoq5Cm&kLxfNsdAL1:KTJ*qAgqmtn&Xl8Txe)(rKd2oFZjt1IMoypR+,r_9vrb;+(6lj&wPB1_=DrM8,F)he:N+_.m89GZAK$$rFD!eO_+YvD6((~ HTTP/1.1
Host: sparkaccountants.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafkreifykw6uoao3balsh2ed5z5xzy2jqhwvdfd3x5nmfoyvxbm5yfvit4.ipfs.w3s.link/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:18:05 GMT
content-type: text/html
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding,Cookie
last-modified: Mon, 27 Nov 2023 00:25:52 GMT
etag: W/"6563e210-200e"
x-cacheable: SHORT
cache-control: max-age=600, must-revalidate
x-cache: MISS
x-cache-group: normal
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=GWTHCkHgx_8Yrhz5y8MNEqnFwwluPKst_jz9EhrWEPY-1701739085-0-AfVyoUkYpbXBIyQ3pE/xBAph9Q4CZgQw3hfMaBsHsaTl6UJvObjXz52EkRSV1+gIYztGoW8bQOgMQwB11K6u0Ho=; path=/; expires=Tue, 05-Dec-23 01:48:05 GMT; domain=.sparkaccountants.com.au; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 830873fb0d62b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2