r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12852
Expires: Sat, 04 Feb 2023 09:46:47 GMT
Date: Sat, 04 Feb 2023 06:12:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5024
Expires: Sat, 04 Feb 2023 07:36:19 GMT
Date: Sat, 04 Feb 2023 06:12:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7d2222d41721947297aaeb5a6e3d0714
04cc1ee417c8bf6338657fd4c2e4e1c1ddfd3065
de0e45969a2ad95e52f7e2fbd0d021d9075dd7b14666c929346efe111f648f7c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3480
Expires: Sat, 04 Feb 2023 07:10:35 GMT
Date: Sat, 04 Feb 2023 06:12:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 05:43:35 GMT
content-type: application/json
age: 1740
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
tracking.thornyfinancepartner.com/campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d
301 Moved Permanently 169 B URL HTTP/1.1 tracking.thornyfinancepartner.com/campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash b51956ed2a6129f43c5d0ecc011cc5a5
c03157aff80067b6b57903d3843b9fd9e07b33ab
1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b
Analyzer Verdict Alert fortinet Phishing
GET /campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d HTTP/1.1
Host: tracking.thornyfinancepartner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.22.0
Date: Sat, 04 Feb 2023 06:12:35 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://tracking.thornyfinancepartner.com/campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9e7H8hL0Ut0ZO6sGCmgSzk4arGMrXYiAnLLzEEvjQf+EhV3tQkL9PhN713JZP7oTvO+U8aqnx/c=
x-amz-request-id: 8BAEDJ0D9CAFJ27E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 05:23:52 GMT
age: 2923
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 06:12:35 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 06:07:19 GMT
age: 316
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 823ac7a26ffa0affdae02d8e9dc7a972
8ef09b52e4ad41cdf247a365d3392db753593d3d
533e65248abcb2da65d7bd4c78d8f23a7e6ad7f95a6b658ea3d35f31cf5bb882
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "533E65248ABCB2DA65D7BD4C78D8F23A7E6AD7F95A6B658EA3D35F31CF5BB882"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 04 Feb 2023 12:12:35 GMT
Date: Sat, 04 Feb 2023 06:12:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17847
Expires: Sat, 04 Feb 2023 11:10:03 GMT
Date: Sat, 04 Feb 2023 06:12:36 GMT
Connection: keep-alive
tracking.thornyfinancepartner.com/campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d
301 Moved Permanently 169 B URL HTTP/1.1 tracking.thornyfinancepartner.com/campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash b51956ed2a6129f43c5d0ecc011cc5a5
c03157aff80067b6b57903d3843b9fd9e07b33ab
1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b
Analyzer Verdict Alert fortinet Phishing
GET /campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d HTTP/1.1
Host: tracking.thornyfinancepartner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.22.0
Date: Sat, 04 Feb 2023 06:12:36 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://www.thornyfinancepartner.com/campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OXhHbrJWUJXLK3/CqvTo0Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5cQO0GNbPXyFRQreoRisA62N7PQ=
www.thornyfinancepartner.com/campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d
301 Moved Permanently 0 B URL HTTP/1.1 www.thornyfinancepartner.com/campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /campaigns/mg736tnpj480b/track-url/ca3021hnrpcfa/04797d538085401216f69d99bebca2e379ac2a1d HTTP/1.1
Host: www.thornyfinancepartner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.22.0
Date: Sat, 04 Feb 2023 06:12:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.33
X-XSS-Protection: 1; mode=block
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Sat, 04 Feb 2023 06:12:36 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: https://engage.freshmarketadvantage.com/aff_c?offer_id=289&aff_id=11&aff_sub=TFP1TCS73&aff_sub2=mhunt@autosprinkleroftx.com&aff_sub3=122&email=mhunt@autosprinkleroftx.com&aff_sub4=2023-02-02 13:00:54&aff_sub5=[POSTURL]
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 41b216c933f34bba3cbf15d612d4b3e1
81de5762aa1c0aca58f118ce1e29d35c90578a72
1f1f539413cc339e2e4e43422f769b0a7ec103d5458c9f5b9efdc3b913771638
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 04 Feb 2023 06:12:37 GMT
Etag: "63dc3c77-1d7"
Server: ECS (dcb/7F39)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: K9LqEOrLvurnUeQOHQceyLs_RWX5Kzq-MG6dzL9wTbDY2mQeMRkqaQ==
engage.freshmarketadvantage.com/aff_c?offer_id=289&aff_id=11&aff_sub=TFP1TCS73&aff_sub2=mhunt@autosprinkleroftx.com&aff_sub3=122&email=mhunt@autosprinkleroftx.com&aff_sub4=2023-02-02%2013:00:54&aff_sub5=[POSTURL]
302 Found 440 B URL HTTP/1.1 engage.freshmarketadvantage.com/aff_c?offer_id=289&aff_id=11&aff_sub=TFP1TCS73&aff_sub2=mhunt@autosprinkleroftx.com&aff_sub3=122&email=mhunt@autosprinkleroftx.com&aff_sub4=2023-02-02%2013:00:54&aff_sub5=[POSTURL]
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (306)
Hash f623b30ce55e6b9488596b921d155722
b41ddf1aa9830b0b28b2f9b8eec3abf9406b2ef7
cb8fa8e3fce58c9a0434e2d40f927a5a2a6e6cdef013ff5fb829c1d9196da01a
GET /aff_c?offer_id=289&aff_id=11&aff_sub=TFP1TCS73&aff_sub2=mhunt@autosprinkleroftx.com&aff_sub3=122&email=mhunt@autosprinkleroftx.com&aff_sub4=2023-02-02%2013:00:54&aff_sub5=[POSTURL] HTTP/1.1
Host: engage.freshmarketadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 04 Feb 2023 06:12:37 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 440
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://offer.simplyloansusa.com?aid=503475&acid=13&subid=11:TFP1TCS73&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid}
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_289=ENC03321b718f6874778161c75aec7df74d9e6753bb6a735394bd320dad56001f5de70fb3fc39bd0ef79b222396a397876f3401875a8029d6342e65522baca7fb274649e9d4a8895751daccc4e987cdc5aab9828490dfc83f363cdf7c9cab4c76d14619a9a97760a414fba7d5aa276b62ef07e551ea43f5faa47ba8815dd213547b768d80cea0c70c8b65c32b5771ab841d1f874cd6fff7207d7924a0f9a4bde7c30b9c7c831f524152de891e0ebfc0fa0b0f0bcc2e02ff6ed74551e5f0890a37ff160abbeb0c; expires=Sat, 04 Mar 2023 06:12:37 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMDUuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Mon, 29 Dec 2025 16:52:37 GMT; path=/; SameSite=None; Secure
Tracking_id: 1027d9b53c7680f8e61c2cdb995a2c
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: e4588670a3f4e0cbc2780e1ddd03be07
Access-Control-Allow-Headers: Tune-SDK-Version
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2859
Expires: Sat, 04 Feb 2023 07:00:16 GMT
Date: Sat, 04 Feb 2023 06:12:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2859
Expires: Sat, 04 Feb 2023 07:00:16 GMT
Date: Sat, 04 Feb 2023 06:12:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2859
Expires: Sat, 04 Feb 2023 07:00:16 GMT
Date: Sat, 04 Feb 2023 06:12:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b7r7phj8i49RMSuWufxF1L34K9udWa0mJ4dY12izM9ofwAuCFBGEZQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:05 GMT
age: 30272
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0567732b-c9d0-4bac-89d8-3dc6a16e522c.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0567732b-c9d0-4bac-89d8-3dc6a16e522c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 99bf0073acf75f9e04b52a96bf47797b
fa68da2c92fa89ed3dafe9915e064fca022af21f
961b77616486483e5767f214d2417275b9c995614128acab3521b6cd2f8866e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0567732b-c9d0-4bac-89d8-3dc6a16e522c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8267
x-amzn-requestid: 8bf1f9c3-4508-489e-9f45-3ce50df74b0b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEW0HM6IAMFXog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd80f8-2e7c768d54981cf1634830db;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:47:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: slDJVVNZDwjopU0kXbAvAJw4A0I_hGKXbRf9O15sXxmvu0JXe8yuPA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:17:59 GMT
etag: "fa68da2c92fa89ed3dafe9915e064fca022af21f"
content-type: image/jpeg
age: 28478
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65cd12302c9ca5468dbc9a98155970e0
a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1
8463155faca74f13ec4500fed98289d8bfbdc4a989d1cb7580736018eadf1000
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7992
x-amzn-requestid: ba4f95d9-6081-4b34-955c-bbe8e7b2335c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEEjGsdIAMF84w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8083-7666baa66ccdec9b5fec8736;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A3c6sSs_b8KkREPa26a8X9NTEZpHGDjElR9hT-NXwg6dYpeuRNZXfA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
etag: "a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1"
content-type: image/jpeg
age: 28936
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5b4e4f15da3323c73974c3f1cdb5d74
1f14971d0cf979cc34ff191849dc43d86e8ac463
5893d7e5b2fd9de92829b303c42d0c07ff32b3f6b8705b6f5b4a784315c8808e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5174
x-amzn-requestid: 35630c70-3bad-47b4-94bb-09c873632194
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EFAHIAMFQQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-317b1fbb3bee0f377697bf3d;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OD5cy75AkNMwTIvIool2nKbKgr5Jpo1Plm_X_YPr3rdPbg86_V2fdA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 28936
etag: "1f14971d0cf979cc34ff191849dc43d86e8ac463"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: f95a2821-ae89-4ea9-93b2-43e570285df3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEC3FyboAMFe0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8078-7e2177f11d5715d4092cad2c;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dcFgY5x3Ef0J__7wGn3llTjZ9as5nX1H4HErIT3VlKfeQaQTjymW2g==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:33 GMT
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
age: 28924
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62f8fa6a-620a-4d0c-aec7-0863ae11b871.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62f8fa6a-620a-4d0c-aec7-0863ae11b871.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83ac46e378ad452aeb212d709ab70232
7514ed93fd2f256e5aad386fdd0ebc723785291b
e199498691268526a6ecfe58abb88ced8661272cd7ad8270811c84fb15dbb547
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62f8fa6a-620a-4d0c-aec7-0863ae11b871.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14221
x-amzn-requestid: a74ee3d4-6163-4dec-ab62-97279cf52282
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEC3ERhIAMFh1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8078-3e5d4b3d39919497215866df;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3TIbnpwYk9CIeoXeW4T-ouwV7X1y-LgKV7wB4XJwFKSKx248jIJyBQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:08:39 GMT
age: 29038
etag: "7514ed93fd2f256e5aad386fdd0ebc723785291b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4b5e35589fc3a9bb3faea6e86eb8b7ff
3421770faae17ef6aa8439e6d9e5171318209576
015b855f7c7bf7376814a408231cde55c20ed93ecb75f3059152d352ec7d7a79
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103342
Date: Sat, 04 Feb 2023 06:12:37 GMT
Etag: "63dce803-1d7"
Expires: Sun, 05 Feb 2023 10:54:59 GMT
Last-Modified: Fri, 03 Feb 2023 10:54:59 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PToRxKwOs41MTFg-s56tfKAbU-gTSXqn83-hRS870DNPCNoShVqELw==
offer.simplyloansusa.com/?aid=503475&acid=13&subid=11:TFP1TCS73&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid}
200 OK 429 B URL HTTP/2 offer.simplyloansusa.com/?aid=503475&acid=13&subid=11:TFP1TCS73&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid}
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (699), with CRLF line terminators
Hash f585207e527a891bcdd36ab09077fb58
002920540a3aebbcad836e0dac4ca0e7a883f444
48c34898e324ef6aa2a95713ec3391ef5c6e05720195dccea02a87bea6ad21ce
GET /?aid=503475&acid=13&subid=11:TFP1TCS73&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid} HTTP/1.1
Host: offer.simplyloansusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:37 GMT
content-type: text/html; charset=UTF-8
content-length: 429
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.25
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, accept-encoding, accept-language, host, referer, user-agent
x-powered-by: PHP/7.4.25
refresh: 1; url=https://www.simplyloansusa.com/?rtrcid=503475~faf9bea7~1694336&rtrtid=11:TFP1TCS73&rtrsid=1&xi_rtrtsrc=1&oref=_REF&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=4640&x_psac=4640&xi_oss=on&xi_cfg={"srtr":1,"ertr":1,"psrtr":1,"bcktr":1,"pv":[11,13]}&xi_tft={"rtrcid":"503475~faf9bea7~1694336","xi_tier":"1"}&odata={"aid":"503475","acid":"13","subid":"11:TFP1TCS73","x_offerid":"289","x_clickid":"1027d9b53c7680f8e61c2cdb995a2c","email":"mhunt@autosprinkleroftx.com","fname":"{fname}","lname":"{lname}","xi_resid":"{resid}","xi_oclkid":"{kid}","x_psac":"4640"}
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
offer.simplyloansusa.com/favicon.ico
404 Not Found 196 B URL HTTP/2 offer.simplyloansusa.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /favicon.ico HTTP/1.1
Host: offer.simplyloansusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://offer.simplyloansusa.com/?aid=503475&acid=13&subid=11:TFP1TCS73&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Sat, 04 Feb 2023 06:12:38 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.25
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, accept-encoding, accept-language, host, referer, user-agent
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
200 OK 24 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash 57a992194d8a5b4bbd4ade561fd348bb
bb66f00fe168c6df50af51abdededdfceb15c59f
be95ec6ab71f5fa87401a698cb9566490258fa9012bb0e8467920b0f74163a0a
GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 04 Feb 2023 06:12:39 GMT
age: 124100
x-served-by: cache-fra-eddf8230022-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23938
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.min.js
200 OK 16 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (59810)
Hash 8108023e313947c755d52124247d5b1d
c8b23feb23f42ad26b62b8a07cc96d4aac4df4ee
8475c84832da384a92eddac8c7533dbdc3920cacdd98e4e8966b2a4b24905a42
GET /npm/bootstrap@5.0.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.simplyloansusa.com
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"eab9-PwlPAQv7DAIqUbYneNQ2HRytP9Y"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 04 Feb 2023 06:12:39 GMT
age: 2696627
x-served-by: cache-fra-eddf8230105-FRA, cache-bma1662-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15925
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css
200 OK 11 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css
IP
Hash 9d925d15680cff8c6ea221e68d4da6fc
4feb53c66abd34264a976f4fae5f5819fa2a454a
42afd5d11d0b1f94ab684c456c19e39f1ddfae78f2f14118e9891f68558fc26b
GET /npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"13a7e-T26mnA4DQx/6Ggl6RUU7WzskbYs"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 04 Feb 2023 06:12:39 GMT
age: 2151
x-served-by: cache-fra-eddf8230092-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11403
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/@popperjs/core@2.9.2/dist/umd/popper.min.js
200 OK 6.6 kB URL HTTP/2 cdn.jsdelivr.net/npm/@popperjs/core@2.9.2/dist/umd/popper.min.js
IP
File type ASCII text, with very long lines (18506)
Hash caeab0e17e0858e842ce575b4bf4b661
4edc744f8e25d0413c6dedaa845ba02fd955f989
a6d5109042b98f772acd948711c89a50cd09d8a3c973a21ee19ed771c0af28c8
GET /npm/@popperjs/core@2.9.2/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.simplyloansusa.com
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 2.9.2
x-jsd-version-type: version
etag: W/"48a2-jut79x6Kl4uCoaGYAV8U1z0upZI"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 04 Feb 2023 06:12:39 GMT
age: 2696627
x-served-by: cache-fra-eddf8230105-FRA, cache-bma1662-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6649
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 06:12:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash b114c84e8ebe20b37587130b62e5ed34
e9e65505f253003fbc0a86661f087f69897363ac
d6da4347a4c0cc8c976fccb36c24456953f36dcdcc8100fd0d3376ca559fb33e
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 06:12:39 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "58F326A250DCF0827EA5A6758ED1BAD7E22420AF"
Expires: Sat, 04 Feb 2023 17:00:00 GMT
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 565
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79414181ec640b69-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 06:12:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 4b425e9b9824dbfa056e0dc9ad0f2de3
31b77897825b5044af1e36ad4c75d273a1536564
cde86f9caf26a5e99e2119afbe3037508bfe69be2754d10f8dfb4d94aef731e8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6240
Cache-Control: max-age=160363
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 06:12:39 GMT
Etag: "63ddae63-117"
Expires: Mon, 06 Feb 2023 02:45:22 GMT
Last-Modified: Sat, 04 Feb 2023 01:01:23 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
www.simplyloansusa.com/common/template/funnel/es6/v2/a/css/style.css
200 OK 5.6 kB URL HTTP/2 www.simplyloansusa.com/common/template/funnel/es6/v2/a/css/style.css
IP
File type assembler source, ASCII text
Hash bc79a08b43c94f9ab36195af52e0cb3d
963e42c23b64ec36e493899248702e20c8b298e6
41d47ea9b2510036b5f7c64f3624a264b026e665712143a64cd03203fc0bb628
GET /common/template/funnel/es6/v2/a/css/style.css HTTP/1.1
Host: www.simplyloansusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/?rtrcid=503475~faf9bea7~1694336&rtrtid=11:TFP1TCS73&rtrsid=1&xi_rtrtsrc=1&oref=_REF&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=4640&x_psac=4640&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~faf9bea7~1694336%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2213%22,%22subid%22:%2211:TFP1TCS73%22,%22x_offerid%22:%22289%22,%22x_clickid%22:%221027d9b53c7680f8e61c2cdb995a2c%22,%22email%22:%22mhunt@autosprinkleroftx.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%224640%22}
Cookie: SCSSESSIONID=pec97fpejj2bfns32vrdbv4cid
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:39 GMT
content-type: text/css
content-length: 5558
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.33
last-modified: Fri, 03 Feb 2023 08:21:34 GMT
etag: "529d-5f3c75e9c40fc-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
offer.simplyloansusa.com/pxl.php?rxid=503475~faf9bea7~1694336&tdat=11:TFP1TCS73&evt=J1
200 OK 43 B URL HTTP/2 offer.simplyloansusa.com/pxl.php?rxid=503475~faf9bea7~1694336&tdat=11:TFP1TCS73&evt=J1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /pxl.php?rxid=503475~faf9bea7~1694336&tdat=11:TFP1TCS73&evt=J1 HTTP/1.1
Host: offer.simplyloansusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:39 GMT
content-type: image/gif
content-length: 43
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.25
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, accept-encoding, accept-language, host, referer, user-agent
x-powered-by: PHP/7.4.25
vary: User-Agent
X-Firefox-Spdy: h2
www.simplyloansusa.com/?cmd=ExtTAVSEvent&i_tavsid=8666&sugid=14&i_appid=&appSessDataId=815488401&evt=P1
200 OK 43 B URL HTTP/2 www.simplyloansusa.com/?cmd=ExtTAVSEvent&i_tavsid=8666&sugid=14&i_appid=&appSessDataId=815488401&evt=P1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /?cmd=ExtTAVSEvent&i_tavsid=8666&sugid=14&i_appid=&appSessDataId=815488401&evt=P1 HTTP/1.1
Host: www.simplyloansusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/?rtrcid=503475~faf9bea7~1694336&rtrtid=11:TFP1TCS73&rtrsid=1&xi_rtrtsrc=1&oref=_REF&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=4640&x_psac=4640&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~faf9bea7~1694336%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2213%22,%22subid%22:%2211:TFP1TCS73%22,%22x_offerid%22:%22289%22,%22x_clickid%22:%221027d9b53c7680f8e61c2cdb995a2c%22,%22email%22:%22mhunt@autosprinkleroftx.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%224640%22}
Cookie: SCSSESSIONID=pec97fpejj2bfns32vrdbv4cid
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:39 GMT
content-type: image/gif
content-length: 43
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.33
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d561483f5366c7fc2a6547eb2c4ed46a
9d050485461a66b72d65f83d3962918497e2278a
ae8b6b212ba4e5bb61a605651af8cf30726ffa009e2a880a2407032eec4e261a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106594
Date: Sat, 04 Feb 2023 06:12:39 GMT
Etag: "63dcf4b9-1d7"
Expires: Sun, 05 Feb 2023 11:49:13 GMT
Last-Modified: Fri, 03 Feb 2023 11:49:13 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IPddL8s3W8o2xAAVU5AZMCfzTXcU4-AvuOoVxqjJfuaD2GcKtS6hxw==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d561483f5366c7fc2a6547eb2c4ed46a
9d050485461a66b72d65f83d3962918497e2278a
ae8b6b212ba4e5bb61a605651af8cf30726ffa009e2a880a2407032eec4e261a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106594
Date: Sat, 04 Feb 2023 06:12:39 GMT
Etag: "63dcf4b9-1d7"
Expires: Sun, 05 Feb 2023 11:49:13 GMT
Last-Modified: Fri, 03 Feb 2023 11:49:13 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: B1rc3vN0T4_nf75oPUdHfuglzuljfRPnr885xqdKjTkFxiGirqdgLQ==
img.emlasts.com/funnel/v1/webp/check.webp
200 OK 74 kB URL HTTP/2 img.emlasts.com/funnel/v1/webp/check.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ebb5d73a7678aefede14198dff492b31
7f99ad7a3e99012ae6d36a95c4fff42c143b003e
4fb28613368ff4b6a1e2ea76e37ac32c850e8e556a78941fd117bc61b9dded4f
GET /funnel/v1/webp/check.webp HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 73452
date: Fri, 03 Feb 2023 07:17:50 GMT
last-modified: Fri, 10 Jun 2022 17:39:27 GMT
etag: "ebb5d73a7678aefede14198dff492b31"
x-amz-version-id: Ae8AS.ufResXDjOyNN52KK89zjx_wYBz
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NM5hJm6ZHWhoa-Br7IAixapUh1oJOJmqUc0mP69saysYWYLBnovuLA==
age: 82489
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/icon_success.png
200 OK 12 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/icon_success.png
IP
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 646beb0fefb01ebf9006e7722c5b4611
17cb12b9b3ae6322c8dcf28f5e3832910e384525
bcba7e55c4cbbebd3ab071c189c875aebd5999ecd1c7ef835da7fed4e81bb692
GET /epcvip/ac-icons/icon_success.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 11695
date: Fri, 03 Feb 2023 08:17:29 GMT
last-modified: Thu, 11 Mar 2021 22:01:06 GMT
etag: "646beb0fefb01ebf9006e7722c5b4611"
x-amz-version-id: vue7UWARodNTQ1z3_MZFfQrXOvBUZEpx
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Yzs-RoYa74Ho-Z-O7MKxlwKxfx-lhV56nNI4-qmN9I4Ci-ivW2Nbzg==
age: 78911
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/spinner.gif
200 OK 73 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/spinner.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Hash f05d5e1f77b32a187040b0c3b3b06481
6b0728cb2b735aca08043b2e80e42e4c8e490a6c
7bf6600fc5e0e9ba6e0816783e3346ca53d016c65feac96d24da10ea307e1b08
GET /epcvip/ac-icons/spinner.gif HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 73338
date: Fri, 03 Feb 2023 07:17:51 GMT
last-modified: Thu, 11 Mar 2021 23:55:10 GMT
etag: "f05d5e1f77b32a187040b0c3b3b06481"
x-amz-version-id: MXyLnF3YP.QdPE6INbkqV5vz_1brMawS
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IZfZsWGHFWriZRtyp5mZoPJquRZlyqojVKD6xrA7hlEXGJMtjApFoA==
age: 82489
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d561483f5366c7fc2a6547eb2c4ed46a
9d050485461a66b72d65f83d3962918497e2278a
ae8b6b212ba4e5bb61a605651af8cf30726ffa009e2a880a2407032eec4e261a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106594
Date: Sat, 04 Feb 2023 06:12:39 GMT
Etag: "63dcf4b9-1d7"
Expires: Sun, 05 Feb 2023 11:49:13 GMT
Last-Modified: Fri, 03 Feb 2023 11:49:13 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: o2a0nzYmx94DXM2p6FMTkzGDHvUZz_ggcxQ5JB9vbG5BrxFJ3QTrxA==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d561483f5366c7fc2a6547eb2c4ed46a
9d050485461a66b72d65f83d3962918497e2278a
ae8b6b212ba4e5bb61a605651af8cf30726ffa009e2a880a2407032eec4e261a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106594
Date: Sat, 04 Feb 2023 06:12:39 GMT
Etag: "63dcf4b9-1d7"
Expires: Sun, 05 Feb 2023 11:49:13 GMT
Last-Modified: Fri, 03 Feb 2023 11:49:13 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: L2XS8U9n8UAobfBvxy0slbXpugDIfmizPQx0KqMqFsfJHmeLwk3_jQ==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d561483f5366c7fc2a6547eb2c4ed46a
9d050485461a66b72d65f83d3962918497e2278a
ae8b6b212ba4e5bb61a605651af8cf30726ffa009e2a880a2407032eec4e261a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 04 Feb 2023 06:12:39 GMT
Etag: "63dcf4b9-1d7"
Server: ECS (dcb/7EEF)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hG_T1la_w2HCY-CFvJvHKE5kmGHNi1MFFQBuzVrV_QLF0BqwIrShFA==
img.emlasts.com/funnel/v1/webp/bgd4.webp
200 OK 42 kB URL HTTP/2 img.emlasts.com/funnel/v1/webp/bgd4.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a713334b20b4e9d414089d24e02b758f
90d26dc607619705cd7fe64cd0395c931ccf440b
66bb61600a07a07ca67554d6d40c938cbf895289beb66265a10923a30b737ea8
GET /funnel/v1/webp/bgd4.webp HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 42176
date: Fri, 03 Feb 2023 09:36:34 GMT
last-modified: Thu, 21 Jul 2022 19:18:21 GMT
etag: "a713334b20b4e9d414089d24e02b758f"
x-amz-version-id: TPTvZUBfREQ8O5OXMiJG5h85AR1NCjQI
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vzLFLtYhMM2rnLOkKRYajCIBbxVZrDowePCPwawt84R7KnlLTv9TYA==
age: 74166
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/funnel/v1/webp/common-pic-01.webp
200 OK 57 kB URL HTTP/2 img.emlasts.com/funnel/v1/webp/common-pic-01.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0479caed536331aa160628107fdfd73b
d02bdc2fd813010a80cb5a4a6d8fbb566638eb10
a3e0188340d3dc25e227ce7ff13b90b7596dc2e4bb3495dbeb42baafeb725aa3
GET /funnel/v1/webp/common-pic-01.webp HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 57030
last-modified: Mon, 28 Nov 2022 22:10:38 GMT
x-amz-version-id: BIqhfxMkLuh_jVqmvqseNIDs0m8F8ZoE
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 12:45:13 GMT
etag: "0479caed536331aa160628107fdfd73b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BCBFK1yjLhZOtIbATkT21AgmO7EkZVvy5CRMUQyKYZHcCTnduuNtdw==
age: 62847
cache-control: max-age=31536000
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=045675ec-ff49-47ff-8850-a8e0143537be
200 OK 109 kB URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=045675ec-ff49-47ff-8850-a8e0143537be
IP
File type ASCII text, with very long lines (23416), with no line terminators
Size 109 kB (108747 bytes)
Hash 73c4c097f1e5e7fc81721fb55c2c529e
415b696b928c69cf32828a20a07ee4905473b552
8af430e9b687a7eb74e11d6377da3979bb32e2d3b783e019c5f45b5a387594dd
GET /ekr/snippet.js?key=045675ec-ff49-47ff-8850-a8e0143537be HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:39 GMT
content-type: application/javascript
x-amz-id-2: VYKORFZEK8ncQjbBiiAK6oiTYdRdkzwPfaxRM/jinB20cI8N0LqXAF6x6uRMZJVhRKA1YH5Ltb2qBhbqYLdq5g==
x-amz-request-id: EBZ4ZRD66V3TGNXR
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 52
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DwHhxd4aoGeWH4naasolGSsZhiQWyBGBERged75S4%2BQsBgqizQoxxF1nCjnw0z9vSG0NSJd73Ztf2PlHTp2C075TB1RlKTt7hVjM%2BDkBYmrF%2F8AiCF1raFefBQlXaFXiZdW7Vew%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794141827b4e0b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 06:12:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 06:12:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Hash 60f23230f1a8d5c3b7d25b73f5b5ce23
ed08ada85d017893b9bcb8224e99154c6708f5d2
22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.simplyloansusa.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 18:29:09 GMT
expires: Mon, 29 Jan 2024 18:29:09 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
content-type: font/woff2
age: 474210
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 06:12:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.simplyloansusa.com/?cmd=ExtAutoDetailV2&type=year
200 OK 211 B URL HTTP/2 www.simplyloansusa.com/?cmd=ExtAutoDetailV2&type=year
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash af543c5d09ef44b806f7222e3587d8f5
8fc80363c092da45f8f4add906b8f2333f6fc463
190f6dc7661644b284d8a6cb6363efe3c3943a76aa7975e44da07e0390a50aac
GET /?cmd=ExtAutoDetailV2&type=year HTTP/1.1
Host: www.simplyloansusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/?rtrcid=503475~faf9bea7~1694336&rtrtid=11:TFP1TCS73&rtrsid=1&xi_rtrtsrc=1&oref=_REF&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=4640&x_psac=4640&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~faf9bea7~1694336%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2213%22,%22subid%22:%2211:TFP1TCS73%22,%22x_offerid%22:%22289%22,%22x_clickid%22:%221027d9b53c7680f8e61c2cdb995a2c%22,%22email%22:%22mhunt@autosprinkleroftx.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%224640%22}
Cookie: SCSSESSIONID=pec97fpejj2bfns32vrdbv4cid
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:40 GMT
content-type: application/json
content-length: 211
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.33
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f81d73d79a960ae3ecb6195330707135
585fa9a29c4eb1fec33b62d9b0b25dbf9c13930c
7fc3b6f9a89fc7a94abe8ab44248cea75eb8f74b1ecfbf5bf13c221cd4f4033f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 04 Feb 2023 06:12:40 GMT
Last-Modified: Sat, 04 Feb 2023 05:00:28 GMT
Server: ECS (dcb/7F17)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wHyPOCHM8mTjjhv7WSfLk3zXiwHOael4GZ7M0fshH_eJbPc-W5LdUA==
Age: 4333
d0.awsstatic.com/logos/powered-by-aws.png
200 OK 3.6 kB URL HTTP/2 d0.awsstatic.com/logos/powered-by-aws.png
IP
File type PNG image data, 200 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a9502bac0d3b4fcc567041432c8cf51
2f7ea4fa2819b682de2280b0722f732e46ebcdeb
e794fa14354931946566471329dc7cecee7d319c8d4a15d062902d5c918d8d93
GET /logos/powered-by-aws.png HTTP/1.1
Host: d0.awsstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 3596
date: Fri, 03 Feb 2023 08:00:05 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 03 Oct 2017 21:31:58 GMT
etag: "7a9502bac0d3b4fcc567041432c8cf51"
x-amz-meta-sha1: 2f7ea4fa2819b682de2280b0722f732e46ebcdeb
x-amz-version-id: jmgMMqOjefld5QsFU0bcVSfyc2Ms4HGY
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: etyV3XGl1LkyS7kIBfrB6cYR96eTgyxFPK24a4arLTjpUGO6tfSoGA==
age: 79956
X-Firefox-Spdy: h2
img.emlasts.com/funnel/v1/webp/logo-simplyloansusa.webp
200 OK 28 kB URL HTTP/2 img.emlasts.com/funnel/v1/webp/logo-simplyloansusa.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8de2f1c052ad818e7134863682da715b
10cfc01ade8c793c2b1ed8fe452c53ef49b9d0fd
f9ceb35cc358e52b110a7b0a5982bbfb150dd5867d10654fd215f90095603d8f
GET /funnel/v1/webp/logo-simplyloansusa.webp HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 27812
last-modified: Thu, 03 Nov 2022 21:16:34 GMT
x-amz-version-id: XPjjcJhxZ1P48RYcfp6xvSJlmB1WdiPl
accept-ranges: bytes
server: AmazonS3
date: Sat, 04 Feb 2023 06:12:41 GMT
etag: "8de2f1c052ad818e7134863682da715b"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LQOB3Eopjf1PQEuODhQxwY7_jsFdWT5MzYqrUEnBe89Knxp9NeICVg==
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/funnel/v1/webp/common-pic-02.webp
200 OK 68 kB URL HTTP/2 img.emlasts.com/funnel/v1/webp/common-pic-02.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ba45dbdbdb3188c1c844dfb4d4acc3d8
42f682a266f5c027a9f2dd6f9be1eb3dd371127c
8add9d8c52fd765056532ba24fb6277f6277d64c7f703e45d1293256272d0ca9
GET /funnel/v1/webp/common-pic-02.webp HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 68162
date: Sat, 04 Feb 2023 06:12:41 GMT
last-modified: Mon, 28 Nov 2022 22:10:38 GMT
etag: "ba45dbdbdb3188c1c844dfb4d4acc3d8"
x-amz-version-id: SAlEJi4UNcIuEit_uGi4EBEfSdFL2y2R
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: w94k0m6Zyn9pPOOQB4lC90WelldlPB6vwgqqP7ElMgOUpMgTw5bpVA==
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 003d0cad9800dfd5002430a200452057
57fbca8ea7203577debc42f672118949af4dd770
d92167e5e681df996abaf337a114cf32b15edeec4d00dc68807509616efc4649
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3345
Cache-Control: max-age=87585
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 06:12:40 GMT
Etag: "63dc9d68-117"
Expires: Sun, 05 Feb 2023 06:32:25 GMT
Last-Modified: Fri, 03 Feb 2023 05:36:40 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
img.emlasts.com/funnel/logos/simplyloansusa/logo.webp
200 OK 28 kB URL HTTP/2 img.emlasts.com/funnel/logos/simplyloansusa/logo.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8de2f1c052ad818e7134863682da715b
10cfc01ade8c793c2b1ed8fe452c53ef49b9d0fd
f9ceb35cc358e52b110a7b0a5982bbfb150dd5867d10654fd215f90095603d8f
GET /funnel/logos/simplyloansusa/logo.webp HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 27812
date: Sat, 04 Feb 2023 06:12:41 GMT
last-modified: Thu, 03 Nov 2022 20:58:28 GMT
etag: "8de2f1c052ad818e7134863682da715b"
x-amz-version-id: PdpHJPWq06nVZ9YLyzS5lFCRpIk6Wfpr
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _57Q8qnlycasDwczieF-7OaA820dNbajdIj9cbfzNsVdF6lh8813yA==
cache-control: max-age=31536000
X-Firefox-Spdy: h2
www.simplyloansusa.com/favicon.ico
200 OK 15 kB URL HTTP/2 www.simplyloansusa.com/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 6e76d859e72893b6e9de02f777c199d5
a636e80251bf3cb64e9a0cbd8a70d9a1cd1b11c0
f8bc2662f3b45f4640cf68fd3a28d38c4e8d197f770dfe36a338e8b1c23b58dc
GET /favicon.ico HTTP/1.1
Host: www.simplyloansusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/?rtrcid=503475~faf9bea7~1694336&rtrtid=11:TFP1TCS73&rtrsid=1&xi_rtrtsrc=1&oref=_REF&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=4640&x_psac=4640&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~faf9bea7~1694336%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2213%22,%22subid%22:%2211:TFP1TCS73%22,%22x_offerid%22:%22289%22,%22x_clickid%22:%221027d9b53c7680f8e61c2cdb995a2c%22,%22email%22:%22mhunt@autosprinkleroftx.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%224640%22}
Cookie: SCSSESSIONID=pec97fpejj2bfns32vrdbv4cid
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:40 GMT
content-type: image/vnd.microsoft.icon
content-length: 15086
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.33
last-modified: Fri, 03 Feb 2023 10:05:46 GMT
etag: "3aee-5f3c8d34139d9"
accept-ranges: bytes
vary: User-Agent
X-Firefox-Spdy: h2
img.emlasts.com/funnel/libraries/js/pristine.min.js
200 OK 0 B URL HTTP/2 img.emlasts.com/funnel/libraries/js/pristine.min.js
IP
GET /funnel/libraries/js/pristine.min.js HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 18:47:10 GMT
x-amz-version-id: J5QCYjC1ei5A0Nh3BhbrwjvskUbWJLMV
server: AmazonS3
content-encoding: br
date: Sat, 04 Feb 2023 04:55:43 GMT
etag: W/"9e1f88a7ec60bb9aa76559823ee1126c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JSZ7N-aXD5IFLpp5wxItublFakXOU53rhDirKKA0DW_GKgu2Wzbxzw==
age: 11598
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/funnel/libraries/js/imask.min.js
200 OK 0 B URL HTTP/2 img.emlasts.com/funnel/libraries/js/imask.min.js
IP
GET /funnel/libraries/js/imask.min.js HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 18:41:31 GMT
x-amz-version-id: EMhLOC7DTzh1_CR3EuZ2tc4o78UWosao
server: AmazonS3
content-encoding: gzip
date: Sat, 04 Feb 2023 04:55:43 GMT
etag: W/"680c9be627e6452fb708801a21861cd7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4ofpqYEf8_KLF0mkCLShQr20tXBRIALs6xIhllpqn-_vJK5Q9owGJw==
age: 6621
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/045675ec-ff49-47ff-8850-a8e0143537be
200 OK 0 B URL HTTP/2 ekr.zdassets.com/compose/045675ec-ff49-47ff-8850-a8e0143537be
IP
GET /compose/045675ec-ff49-47ff-8850-a8e0143537be HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.simplyloansusa.com
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:40 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"812387712e7b43ba30ed73d6b5e489f8"
x-request-id: 794141867bb50b02-STL, 794141867bb50b02-STL
x-runtime: 0.002121
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uX9PYgiZdARkh6D9NErU9VoVg33wD3MHkLbFUX%2BUNtHVvY4mZveDv7qNbK%2FO8MpXVuoR%2FJHXhHtd6h%2Bf3apDwRusUUXYphUTnTaTGdfwDtEIt3Ji7ReDxCHs0BoKJhlKI4s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794141867bb50b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.simplyloansusa.com/common/template/funnel/es6/v2/a/js/scripts.js
200 OK 0 B URL HTTP/2 www.simplyloansusa.com/common/template/funnel/es6/v2/a/js/scripts.js
IP
GET /common/template/funnel/es6/v2/a/js/scripts.js HTTP/1.1
Host: www.simplyloansusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/?rtrcid=503475~faf9bea7~1694336&rtrtid=11:TFP1TCS73&rtrsid=1&xi_rtrtsrc=1&oref=_REF&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=4640&x_psac=4640&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~faf9bea7~1694336%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2213%22,%22subid%22:%2211:TFP1TCS73%22,%22x_offerid%22:%22289%22,%22x_clickid%22:%221027d9b53c7680f8e61c2cdb995a2c%22,%22email%22:%22mhunt@autosprinkleroftx.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%224640%22}
Cookie: SCSSESSIONID=pec97fpejj2bfns32vrdbv4cid
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:39 GMT
content-type: application/javascript
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.33
last-modified: Thu, 02 Feb 2023 08:20:47 GMT
etag: "11df8-5f3b33df36f4d-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
img.emlasts.com/funnel/libraries/js/axios.min.js
200 OK 0 B URL HTTP/2 img.emlasts.com/funnel/libraries/js/axios.min.js
IP
GET /funnel/libraries/js/axios.min.js HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 03 Feb 2023 07:17:49 GMT
last-modified: Fri, 10 Jun 2022 18:46:01 GMT
etag: W/"b73d3171d52de3b38a570bc2748bcf96"
x-amz-version-id: szW7ki1aRNzVhcwk_RdIU7Duz757rXuQ
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Rdlj6DYUwGReRTQ6DwgGdtVYfw3O07lFG1qXm5p3XhGUzRTR6Tj0Ew==
age: 82491
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/funnel/libraries/js/noSleep.min.js
200 OK 0 B URL HTTP/2 img.emlasts.com/funnel/libraries/js/noSleep.min.js
IP
GET /funnel/libraries/js/noSleep.min.js HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 03 Feb 2023 07:17:49 GMT
last-modified: Fri, 10 Jun 2022 18:49:03 GMT
etag: W/"19c1506fe0859fd64781bc6ac192eb18"
x-amz-version-id: uVfZ22IZTafO7yDpHMJ3RvqctBkqCjOv
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mgPN98V5uiPxzpdohOVEgrymT8BXO4dfPwwJ5XM3GFXdq4mo7kpxdg==
age: 82491
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/funnel/libraries/css/autoComplete.002.min.css
200 OK 0 B URL HTTP/2 img.emlasts.com/funnel/libraries/css/autoComplete.002.min.css
IP
GET /funnel/libraries/css/autoComplete.002.min.css HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Fri, 03 Feb 2023 06:23:40 GMT
last-modified: Fri, 17 Jun 2022 17:46:51 GMT
etag: W/"32f5d54e6d75c33ba413ca2392ca4faf"
x-amz-version-id: tLG5R_O8MwRFjkK3uQ_e.N8YN5u9myNW
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5hWt75OJtqC1vhZerTKRFUWUw3BI_4AuJhrIRi8dpS8NpyfgmN7FPQ==
age: 85740
cache-control: max-age=31536000
X-Firefox-Spdy: h2
www.simplyloansusa.com/?rtrcid=503475~faf9bea7~1694336&rtrtid=11:TFP1TCS73&rtrsid=1&xi_rtrtsrc=1&oref=_REF&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=4640&x_psac=4640&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~faf9bea7~1694336%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2213%22,%22subid%22:%2211:TFP1TCS73%22,%22x_offerid%22:%22289%22,%22x_clickid%22:%221027d9b53c7680f8e61c2cdb995a2c%22,%22email%22:%22mhunt@autosprinkleroftx.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%224640%22}
200 OK 0 B URL HTTP/2 www.simplyloansusa.com/?rtrcid=503475~faf9bea7~1694336&rtrtid=11:TFP1TCS73&rtrsid=1&xi_rtrtsrc=1&oref=_REF&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=4640&x_psac=4640&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~faf9bea7~1694336%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2213%22,%22subid%22:%2211:TFP1TCS73%22,%22x_offerid%22:%22289%22,%22x_clickid%22:%221027d9b53c7680f8e61c2cdb995a2c%22,%22email%22:%22mhunt@autosprinkleroftx.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%224640%22}
IP
GET /?rtrcid=503475~faf9bea7~1694336&rtrtid=11:TFP1TCS73&rtrsid=1&xi_rtrtsrc=1&oref=_REF&x_offerid=289&x_clickid=1027d9b53c7680f8e61c2cdb995a2c&email=mhunt@autosprinkleroftx.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=4640&x_psac=4640&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~faf9bea7~1694336%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2213%22,%22subid%22:%2211:TFP1TCS73%22,%22x_offerid%22:%22289%22,%22x_clickid%22:%221027d9b53c7680f8e61c2cdb995a2c%22,%22email%22:%22mhunt@autosprinkleroftx.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%224640%22} HTTP/1.1
Host: www.simplyloansusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://offer.simplyloansusa.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:39 GMT
content-type: text/html; charset=UTF-8
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.33
x-powered-by: PHP/7.4.33
set-cookie: SCSSESSIONID=pec97fpejj2bfns32vrdbv4cid; expires=Sat, 04-Feb-2023 14:12:38 GMT; Max-Age=28800; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Playfair+Display:wght@400;600&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Playfair+Display:wght@400;600&display=swap
IP
GET /css2?family=Playfair+Display:wght@400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 Feb 2023 06:12:39 GMT
date: Sat, 04 Feb 2023 06:12:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img.emlasts.com/funnel/libraries/js/autoComplete.min.js
200 OK 0 B URL HTTP/2 img.emlasts.com/funnel/libraries/js/autoComplete.min.js
IP
GET /funnel/libraries/js/autoComplete.min.js HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 03 Feb 2023 08:50:25 GMT
last-modified: Fri, 10 Jun 2022 18:37:39 GMT
etag: W/"8cf89f858680e9f15ea344fc34b3598a"
x-amz-version-id: iozx1Ht.qSoHw5VAAdXGFICXLMxoX4De
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j1IyH_jUqEEkUfxDE1QnvbhizFgiAsTVJMOqoXSqBt6rECJljQsv_g==
age: 76935
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/funnel/libraries/js/lazysizes.min.js
200 OK 0 B URL HTTP/2 img.emlasts.com/funnel/libraries/js/lazysizes.min.js
IP
GET /funnel/libraries/js/lazysizes.min.js HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 10 Jun 2022 18:50:25 GMT
x-amz-version-id: _XyDVi2C1T1jeKCo3leiY2cge1W56By.
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 07:02:58 GMT
etag: W/"424ddad32a36f02c2303bd977a40e7fb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PoV1s12vOJIW7eusMwCztW3QGL3sii9p0qTrYr61tRQkH0WjmzsdRA==
age: 83382
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/funnel/libraries/css/animate.min.css
200 OK 0 B URL HTTP/2 img.emlasts.com/funnel/libraries/css/animate.min.css
IP
GET /funnel/libraries/css/animate.min.css HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Fri, 03 Feb 2023 08:59:02 GMT
last-modified: Fri, 10 Jun 2022 18:52:33 GMT
etag: W/"c0be8e53226ac34833fd9b5dbc01ebc5"
x-amz-version-id: vsEtx_AibWcp2yeZileDNlgkkZAPtcev
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -ZVXqpujmFNxZ_8l2PUv2N71TF8xJYinoq6IbmI9jF4x3nNesOWTZg==
age: 76417
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/funnel/libraries/js/moment.min.js
200 OK 0 B URL HTTP/2 img.emlasts.com/funnel/libraries/js/moment.min.js
IP
GET /funnel/libraries/js/moment.min.js HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.simplyloansusa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 03 Feb 2023 07:40:32 GMT
last-modified: Fri, 10 Jun 2022 18:45:09 GMT
etag: W/"5c158b940513c7dc2ebd901455e9b63d"
x-amz-version-id: J0bdFFt_yJ_GGl4sSIUUlacOCp6mdw3Y
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SE5lPgJpjQ59n6LVL-fWdQ6w575i3TUsDVVqHrqJYXxGNq1jL_zjYQ==
age: 81128
cache-control: max-age=31536000
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js
IP
GET /web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 06:12:40 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: ndff87uIS/sesGzUKeSADcGds13tZiq25CUrjWZEdXa2jMUAkmL2pmb5JKzj+ohOz6faFpkS9ww=
x-amz-request-id: MJRJ9ZGS34G4N411
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:09:01 GMT
etag: W/"5c97db2a2d29c595e26430d1c8358d6a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:09:00 GMT
x-amz-version-id: 1cCOlxhNqu17ys_QySYbf1YbpGnPAUXV
cf-cache-status: HIT
age: 260988
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oJFbC0FdD4iRQg3vMn0mqv0%2BAbrFQqDTxLE5vJYphE%2Fg9gFchq72fs4EhmVSu5Q8tHMIOuLwv9N5hXv0zkR5KZYihq%2F8woASUKspQAKtQ635D9DaJOtRI5Q3d5nV7v4i%2BaiP3%2BU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794141898da50b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
154.53.62.178
23.33.119.27
99.80.78.167
104.18.20.226
93.184.220.29