vzoj.omnicamp1.com/link/6331b8f8c21f89001ddde147/6331b8de309b2f001a26ce41/632ef173b88981001b484977?signature=a6a10e4b12e788b093f9b3397fd7f5312c970f6306c2cc8e392ca4f10a303298
301 Moved Permanently 0 B URL HTTP/1.1 vzoj.omnicamp1.com/link/6331b8f8c21f89001ddde147/6331b8de309b2f001a26ce41/632ef173b88981001b484977?signature=a6a10e4b12e788b093f9b3397fd7f5312c970f6306c2cc8e392ca4f10a303298
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link/6331b8f8c21f89001ddde147/6331b8de309b2f001a26ce41/632ef173b88981001b484977?signature=a6a10e4b12e788b093f9b3397fd7f5312c970f6306c2cc8e392ca4f10a303298 HTTP/1.1
Host: vzoj.omnicamp1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Sep 2022 14:37:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 26 Sep 2022 15:37:39 GMT
Location: https://vzoj.omnicamp1.com/link/6331b8f8c21f89001ddde147/6331b8de309b2f001a26ce41/632ef173b88981001b484977?signature=a6a10e4b12e788b093f9b3397fd7f5312c970f6306c2cc8e392ca4f10a303298
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750cbd20ecc90afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 14:15:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: b4Jc_MKqKslGScRQZ7yogxLb47gbklIBpQor6IlbLHmSJEwo1If2gQ==
Age: 1341
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15258
Expires: Mon, 26 Sep 2022 18:51:57 GMT
Date: Mon, 26 Sep 2022 14:37:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1017811d25642601e984edc1676d118d
c177c4f7a897584bf91347fa4990c83d6bfd0321
f35bb3a8c877dd8d3c5920f3c917722f12b157aff398e2ec30fab51fa6caa2ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F35BB3A8C877DD8D3C5920F3C917722F12B157AFF398E2EC30FAB51FA6CAA2EF"
Last-Modified: Mon, 26 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5549
Expires: Mon, 26 Sep 2022 16:10:08 GMT
Date: Mon, 26 Sep 2022 14:37:39 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jeikleIKMLg9RphJEBrtHo0BQLDd3GCJI1kpoHZwCsVkbo+82im6vTBOEGwhZwqqXnGIk5gsCgw=
x-amz-request-id: DW9A28QM1S7YM5GQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 26 Sep 2022 13:48:43 GMT
age: 2936
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash e871e562771758b2d7d2a51fe34f608c
bd9a27ce756ea24301086a03604dfe36b17d24d3
f591deaa09206994f534768fe7b8ec5794f48c6d30ce82655ccee81f73094989
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1426
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:39 GMT
Last-Modified: Mon, 26 Sep 2022 14:13:53 GMT
Server: ECS (amb/6B9F)
X-Cache: HIT
Content-Length: 280
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 14:37:39 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
vzoj.omnicamp1.com/link/6331b8f8c21f89001ddde147/6331b8de309b2f001a26ce41/632ef173b88981001b484977?signature=a6a10e4b12e788b093f9b3397fd7f5312c970f6306c2cc8e392ca4f10a303298
302 Found 0 B URL HTTP/2 vzoj.omnicamp1.com/link/6331b8f8c21f89001ddde147/6331b8de309b2f001a26ce41/632ef173b88981001b484977?signature=a6a10e4b12e788b093f9b3397fd7f5312c970f6306c2cc8e392ca4f10a303298
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link/6331b8f8c21f89001ddde147/6331b8de309b2f001a26ce41/632ef173b88981001b484977?signature=a6a10e4b12e788b093f9b3397fd7f5312c970f6306c2cc8e392ca4f10a303298 HTTP/1.1
Host: vzoj.omnicamp1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Mon, 26 Sep 2022 14:37:39 GMT
content-length: 0
location: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
x-envoy-upstream-service-time: 3
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 750cbd22c9db0b3d-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash e871e562771758b2d7d2a51fe34f608c
bd9a27ce756ea24301086a03604dfe36b17d24d3
f591deaa09206994f534768fe7b8ec5794f48c6d30ce82655ccee81f73094989
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1426
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:39 GMT
Last-Modified: Mon, 26 Sep 2022 14:13:53 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 280
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 26 Sep 2022 14:10:46 GMT
Expires: Mon, 26 Sep 2022 14:30:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -wSPq1j-MonmnOB7ZinYwMoxZonSTZXHswVTdRHg_PHDXx7ijtjKrQ==
Age: 1614
ocsp.digicert.com/
200 OK 471 B IP
Hash 5adb7eb1d103eadeeafac36e663ffdd3
23b784388dd634fa736cd60aed71570661e73d02
5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5237
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:40 GMT
Last-Modified: Mon, 26 Sep 2022 13:10:23 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FYu4J1vyM/liOYnkaYv9cA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DbUHBbgq5BOo7onKhx50a22DExk=
unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
200 OK 29 kB URL HTTP/1.1 unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26641)
Hash 667f526f0ba4589d08051cefa87f6325
51c30e3f73540d5602fbc0cb61b93b78c6ab186c
5a8558b81d31eb43b419b95d38780d64658c2df6a376899a616979febe2441d2
GET /?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:40 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e; path=/
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 29380
Keep-Alive: timeout=2, max=150
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
s3.tradingview.com/tv.js?ver=5.8.5
200 OK 32 kB URL HTTP/2 s3.tradingview.com/tv.js?ver=5.8.5
IP
Hash 3a3652f12c660a9a2700cf2b6ee703d7
b8a2b372862d6b8b3245c5cf041c44c656ef6d88
3a072be44d682112cd574d8bf0f980ddb1be3de73679bf1ccb58fc4b45ca0271
GET /tv.js?ver=5.8.5 HTTP/1.1
Host: s3.tradingview.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 31532
date: Mon, 26 Sep 2022 10:26:25 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 26 Sep 2022 10:26:15 GMT
etag: "3a3652f12c660a9a2700cf2b6ee703d7"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bUZRdwKDz8-ZpMJn6G2SxhGE4y2GPz-5PbAHJTt494exmx4wOURbMA==
age: 15076
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-M5B4TBX
404 Not Found 1.6 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-M5B4TBX
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash a547599b7ca56a9066e258b500d358a8
dd24268dfd3b84e3651aa367d8052cd14cd2a84c
4edd44c9be54fab3d962ac5a115ec0aac23e9eb1f918ee935b757ec8654ae73a
GET /gtm.js?id=GTM-M5B4TBX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
date: Mon, 26 Sep 2022 14:37:40 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-159672247-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-159672247-1
IP
File type ASCII text, with very long lines (1720)
Hash c2e597df7bbffcaab0944f28cb6882c2
abb4ed3fe790c52c3a68137d1a2488e78a45b6bc
910eea166460bde9018201c8f764430ac0fc2460386aebafb2dde64aa6a371e5
GET /gtag/js?id=UA-159672247-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 14:37:40 GMT
expires: Mon, 26 Sep 2022 14:37:40 GMT
cache-control: private, max-age=900
last-modified: Mon, 26 Sep 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42208
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
unitedforprofit.com/wp-content/cache/wpfc-minified/8ktyga6x/8b4l.css
200 OK 58 kB URL HTTP/1.1 unitedforprofit.com/wp-content/cache/wpfc-minified/8ktyga6x/8b4l.css
IP
File type Unicode text, UTF-8 text, with very long lines (65514)
Hash cefe49683962970b7a8854ecc93d220d
809b21b36154c6e16a2e1229d705e5e2bb50b128
5ed8f53d7e63a04f6493b8e517d639bf5259346a3a3f755244b0d7b74234e9e3
GET /wp-content/cache/wpfc-minified/8ktyga6x/8b4l.css HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:40 GMT
Server: Apache
Last-Modified: Mon, 24 Jan 2022 12:55:39 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 58386
Keep-Alive: timeout=2, max=149
Content-Type: text/css
unitedforprofit.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
200 OK 2.4 kB URL HTTP/1.1 unitedforprofit.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
IP
File type ASCII text, with very long lines (6406), with no line terminators
Hash 4c6ce817a39414c5576e8895eb070bb2
dbc722879211a9235a27e0a5388c5c3ee896f4e2
e6dc83fdbabca73596e0fe9f5fd65261a06bbb4b9f8998821bfe1634fa0b35e5
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Fri, 30 Jul 2021 08:02:24 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 2398
Keep-Alive: timeout=2, max=150
Content-Type: application/javascript
unitedforprofit.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.0 kB URL HTTP/1.1 unitedforprofit.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
File type Unicode text, UTF-8 text, with very long lines (16323)
Hash 69c4e8dea18bf3114e7630d1debe1ae2
71f8fc1ebf286356133d170f98afed7341c8de68
371f5b10b62e31fb871e46eb0a39c2599515e616d9c4a7edb50864f0e6ee9799
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Fri, 30 Jul 2021 08:02:24 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 6031
Keep-Alive: timeout=2, max=150
Content-Type: application/javascript
unitedforprofit.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.4
200 OK 3.3 kB URL HTTP/1.1 unitedforprofit.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.4
IP
File type HTML document, ASCII text, with very long lines (9720), with no line terminators
Hash 4ac0d5ab8d83806d59c4e1f7bf0a855a
81153a2f5e3a21febe9ede53c9f0073da3e14829
605fd4e7f4d3fbb5505bb81e3f72c685b6ef411c27cde2f7bab2787c3d870b10
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.4 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Mon, 24 Jan 2022 12:50:58 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 3286
Keep-Alive: timeout=2, max=150
Content-Type: application/javascript
unitedforprofit.com/wp-content/themes/jnews/assets/dist/frontend.min.js?ver=1.0.0
200 OK 76 kB URL HTTP/1.1 unitedforprofit.com/wp-content/themes/jnews/assets/dist/frontend.min.js?ver=1.0.0
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash f16a8dfa0fabf42ddf8d9108e8b551dc
cbb1e6eb52d7f323e4c01391ed828356e0801089
9503e879d8de53342814d575afb6bf827f27cd275be2e0496b0385700e1810ab
GET /wp-content/themes/jnews/assets/dist/frontend.min.js?ver=1.0.0 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 14:00:28 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=148
Transfer-Encoding: chunked
Content-Type: application/javascript
unitedforprofit.com/wp-content/plugins/jnews-split/assets/js/jquery.split.js
200 OK 2.8 kB URL HTTP/1.1 unitedforprofit.com/wp-content/plugins/jnews-split/assets/js/jquery.split.js
IP
Hash 362cfc47e13ac0ffd26d6e0e9a66aa86
317a86f30fcc7eb6f299850b42b02eb4b3c0aba8
91d46da76fe7bbf5c78e70135fb2109eee694c9f1a7116d493693aa2a0aecf95
GET /wp-content/plugins/jnews-split/assets/js/jquery.split.js HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 14:18:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 2812
Keep-Alive: timeout=2, max=149
Content-Type: application/javascript
unitedforprofit.com/wp-content/cache/wpfc-minified/8kwg0q8p/dmrae.js
200 OK 39 kB URL HTTP/1.1 unitedforprofit.com/wp-content/cache/wpfc-minified/8kwg0q8p/dmrae.js
IP
File type ASCII text, with very long lines (65358)
Hash 326aeb8f3ac47f83cef9b607c9fa2b70
6b2d6e9111ca619dea167ddec1a5fe78759c27bf
ff0c6200f243bbe52b6923e3d5777179ed86df4ac92ff483eba2e785714e0552
GET /wp-content/cache/wpfc-minified/8kwg0q8p/dmrae.js HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:40 GMT
Server: Apache
Last-Modified: Sun, 09 Jan 2022 12:43:26 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 38727
Keep-Alive: timeout=2, max=150
Content-Type: application/javascript
unitedforprofit.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=5.8.5
200 OK 475 B URL HTTP/1.1 unitedforprofit.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=5.8.5
IP
File type HTML document, ASCII text, with very long lines (906), with no line terminators
Hash c7aa8936938be0b65781455878aa2085
0066e0c5ed75b3ccd5bb01db5f373d995c217a29
a764eb4204428f671190ad2bc84bcbd86cd9a6bfd05a7ded46bceb651503c508
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=5.8.5 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Thu, 04 Feb 2021 04:21:46 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 475
Keep-Alive: timeout=2, max=147
Content-Type: application/javascript
unitedforprofit.com/wp-includes/js/hoverIntent.min.js?ver=1.10.1
200 OK 699 B URL HTTP/1.1 unitedforprofit.com/wp-includes/js/hoverIntent.min.js?ver=1.10.1
IP
File type ASCII text, with very long lines (1445)
Hash d4fb3c010c6ee553cce3f088f8a08efa
fb88c62c4b2ca26b83fdbbb3b736d1f4f388ac21
938e8545469033c8696d12060d17b9c1225662c3158061b7f345b4e416c417f2
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.1 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Fri, 30 Jul 2021 08:02:24 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 699
Keep-Alive: timeout=2, max=148
Content-Type: application/javascript
unitedforprofit.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16
200 OK 39 kB URL HTTP/1.1 unitedforprofit.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16
IP
File type ASCII text, with very long lines (65266)
Hash 4cdaad83ca56a59ee7352b981c2f6db5
4cba1a66bde2345f35c94cacc40749e7aaa30d79
e1aab11a4a9f355af8664139d9151aaf59a6a7d58791aeceda7e611eb049b215
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Mon, 21 Dec 2020 09:35:16 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 38657
Keep-Alive: timeout=2, max=149
Content-Type: application/javascript
unitedforprofit.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 1.8 kB URL HTTP/1.1 unitedforprofit.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
File type ASCII text, with very long lines (5477)
Hash 951ae46ca55ec7b0e401e2074bdf8b54
64bbbdc28a351b26cab9c230e134ca8eb4d4f83e
fd5d4c623e9d68551114b2a1303584b6792e592e864d4416145904fe8b9edd91
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Fri, 06 Nov 2020 06:17:57 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 1834
Keep-Alive: timeout=2, max=148
Content-Type: application/javascript
unitedforprofit.com/wp-content/plugins/jnews-social-share/assets/js/plugin.js
200 OK 1.3 kB URL HTTP/1.1 unitedforprofit.com/wp-content/plugins/jnews-social-share/assets/js/plugin.js
IP
Hash afb5c80b4e7c33b378bb18cc779d39a6
99169f58b4e4cd6cbb1c589b12cd59635726a7d9
157db9a9c54dd18895fbdd22db969abf8d59eeba656f088291d6c6b210126dee
GET /wp-content/plugins/jnews-social-share/assets/js/plugin.js HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 14:18:05 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 1300
Keep-Alive: timeout=2, max=149
Content-Type: application/javascript
unitedforprofit.com/wp-content/cache/wpfc-minified/2nxtadxf/dmrae.css
200 OK 101 kB URL HTTP/1.1 unitedforprofit.com/wp-content/cache/wpfc-minified/2nxtadxf/dmrae.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 101 kB (100952 bytes)
Hash c9d080700acf08036cf584bcb54b19ac
4952e9e5f0b39fe5bde126978be45bd4df0872f2
4176e8e44201bb7ea150f0b6827aa508b3112303cd40c7e69cbb66a7fb214e67
GET /wp-content/cache/wpfc-minified/2nxtadxf/dmrae.css HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Sun, 09 Jan 2022 12:43:26 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=150
Transfer-Encoding: chunked
Content-Type: text/css
unitedforprofit.com/wp-content/plugins/jnews-weather/assets/js/plugin.js?ver=6.0.0
200 OK 989 B URL HTTP/1.1 unitedforprofit.com/wp-content/plugins/jnews-weather/assets/js/plugin.js?ver=6.0.0
IP
Hash fb7eaffbe58ed67f65211d4374e7f73f
5d8194c5d22eb1b1882bdf0dd7bdd310dcacf700
7f78e3dac7528c7be17564c037d0b751663c6ef6ec641c29bcb82fda47d5ff2e
GET /wp-content/plugins/jnews-weather/assets/js/plugin.js?ver=6.0.0 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 14:18:08 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 989
Keep-Alive: timeout=2, max=146
Content-Type: application/javascript
unitedforprofit.com/wp-includes/js/wp-embed.min.js?ver=5.8.5
200 OK 765 B URL HTTP/1.1 unitedforprofit.com/wp-includes/js/wp-embed.min.js?ver=5.8.5
IP
File type ASCII text, with very long lines (1391)
Hash fe875afb236ee8f0d50040fe58d848d4
e6b1b67093b429c95d5b9db07a7eba39e02cf0e5
328a6a072b91134f2802ae25e070f38ff156ceee2c6ec6a6253ae4b27af73b49
GET /wp-includes/js/wp-embed.min.js?ver=5.8.5 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Thu, 04 Feb 2021 04:21:46 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 765
Keep-Alive: timeout=2, max=147
Content-Type: application/javascript
unitedforprofit.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.1
200 OK 5.8 kB URL HTTP/1.1 unitedforprofit.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.1
IP
File type ASCII text, with very long lines (20382)
Hash 83b3e00fb09bae561905cd94ef6e7241
32ae39331d1ccf55eb09a2b53d3cec54178538b1
853e3ab2f9ae7b1d3b330dcbe738e1b2c24d0f7b2db478edce20f694d39021a1
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.1 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 14:17:55 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Connection: keep-alive, Keep-Alive
Content-Length: 5818
Keep-Alive: timeout=2, max=148
Content-Type: application/javascript
unitedforprofit.com/wp-content/uploads/2020/06/Group-64.png
200 OK 5.4 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2020/06/Group-64.png
IP
File type PNG image data, 372 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 230a7a785ef9ef96489ee26ca62f5fba
55263d3d9a419e1821d5fa57c61e8f38410ca028
545d0d5c4da030dfc8a8b027cc41c63066e49ae5a56cfd241606c2af94d557b3
GET /wp-content/uploads/2020/06/Group-64.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 09 Jun 2020 07:41:19 GMT
Accept-Ranges: bytes
Content-Length: 5443
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=148
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3492
Expires: Mon, 26 Sep 2022 15:35:53 GMT
Date: Mon, 26 Sep 2022 14:37:41 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3492
Expires: Mon, 26 Sep 2022 15:35:53 GMT
Date: Mon, 26 Sep 2022 14:37:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 988b0c94c41a21c736b330c3256d0a3c
c16a6f018bd80c6390b7a07f4e6698db7bfd28b0
3034912f83810b3999ffa90f5eeaf0f45773c592cfd3cf2bfb794ea1b150158c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9070
x-amzn-requestid: 2aceb075-d4bc-45b8-8330-5e719c565f77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSKEEdPoAMFsNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca40-3f120e0774b1d58a08898c39;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:08 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: feNiTFDhUx-BfoiybnKj83hCq6CCoiMeOSEHyFs8b7cLIgKvnO1Cdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:04:42 GMT
age: 59579
etag: "c16a6f018bd80c6390b7a07f4e6698db7bfd28b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 968b9c138702fb5994d1d9eab1a697fa
9660bb2d38079182efbd11d7a687bfc7f9d30751
5ba74820ad451747c8ed25529f06b037bebf4c0616a1f2165c9197c1171db7a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11728
x-amzn-requestid: bf60e58f-c4f4-45c7-923b-0d1539f720f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUCGGw7oAMF3wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd40-32043c1b1411544f5d00edc0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:50:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: H4KXhBaRw3SvzBrbl30mV6R_vJ8bXBkyicb8fQiTp6YSBHjE8iFkNQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:49:56 GMT
etag: "9660bb2d38079182efbd11d7a687bfc7f9d30751"
content-type: image/jpeg
age: 56865
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c11e6fef1be62b971bd9daf378bfc95
ef9d756cbcda72cf7ef5029b7d384cd1fbaed633
b8369f83d6dddcd2355b81d8eb200791788165e56881ce21e1a1e9c8bb1bb2ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13584
x-amzn-requestid: 198bd2b4-d4ae-4f19-a500-463aee52b890
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHgFdNoAMFwEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc9-19a1f7d2102820da4b21f18b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yl8BCwdlIePsc4gIX4IYH0L6NHipn_5fBsa9nyYy14w0m49jPUYXBw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:57:51 GMT
age: 59990
etag: "ef9d756cbcda72cf7ef5029b7d384cd1fbaed633"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3492
Expires: Mon, 26 Sep 2022 15:35:53 GMT
Date: Mon, 26 Sep 2022 14:37:41 GMT
Connection: keep-alive
unitedforprofit.com/wp-content/uploads/2022/09/btc-vs-bulls1-460x230-SjqlSb.jpeg
200 OK 16 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/btc-vs-bulls1-460x230-SjqlSb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 460x230, components 3\012- data
Hash 22e236f3c1714fade2ee9cf641e74899
3a95da0c0d00b443d4e5b1ab1babccd23cb40996
b2e9cdf2c4e38e1fc325b3243540729629bd8f6e07bfd7001a362832a26d2aaa
GET /wp-content/uploads/2022/09/btc-vs-bulls1-460x230-SjqlSb.jpeg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 13:40:24 GMT
Accept-Ranges: bytes
Content-Length: 15467
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=145
Content-Type: image/jpeg
unitedforprofit.com/wp-content/themes/jnews/assets/dist/image/preloader.gif
200 OK 4.4 kB URL HTTP/1.1 unitedforprofit.com/wp-content/themes/jnews/assets/dist/image/preloader.gif
IP
File type GIF image data, version 89a, 100 x 75\012- data
Hash c9d5e0caa6894712e1fe34cc559ca47f
fca00e1a8ac564cb5dd327f13b1461ddd84220f4
d64e383dfb28ce7e37cba7ddf8dc33b90802fb1840a887c030f1af0b0047715a
GET /wp-content/themes/jnews/assets/dist/image/preloader.gif HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/wp-content/cache/wpfc-minified/2nxtadxf/dmrae.css
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 14:02:38 GMT
Accept-Ranges: bytes
Content-Length: 4399
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=149
Content-Type: image/gif
unitedforprofit.com/wp-content/uploads/2022/09/army-1708094_1920-460x306-OFrsDm.jpeg
200 OK 9.9 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/army-1708094_1920-460x306-OFrsDm.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x306, components 3\012- data
Hash b0cfc569c1f34e09a9e043e7d9331b32
1383ad674f0b704e71f9be28198715915ced9f92
02640078dedea8594f89c82238a7810633bd7a86985f032953ac99c503b68094
GET /wp-content/uploads/2022/09/army-1708094_1920-460x306-OFrsDm.jpeg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 09:40:49 GMT
Accept-Ranges: bytes
Content-Length: 9904
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=147
Content-Type: image/jpeg
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3492
Expires: Mon, 26 Sep 2022 15:35:53 GMT
Date: Mon, 26 Sep 2022 14:37:41 GMT
Connection: keep-alive
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 414213
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b6b51846ec2b7d856b7dc12e4d720f4
5a69190a9a778a6979e11fafedd43e1031caf8e2
a497c04d1c9d0be88aa9c288423346e83c6a7b296295387b3b7b855c550492a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10927
x-amzn-requestid: a4c6c1b1-3777-4410-bef1-5dd2518af86a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCjSEqfIAMF1kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e14-4cdfc5ea1c42120d4a085752;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:08 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: b3Zf70hsIlHF67m0hhfBtDxu7FeNv0Z7JY7-Iei61XiGbDOqfKoUGQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 04:00:42 GMT
age: 38219
etag: "5a69190a9a778a6979e11fafedd43e1031caf8e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 414213
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 18:14:12 GMT
expires: Mon, 25 Sep 2023 18:14:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 73409
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fe8c4f0c70fb6c1f4259eabedc7015e
85e378d0fff856832a8dd01743516b9476fed8c6
508a1c7d350fcf82d1ece0b99f8557b2f300c7c1148f28c3ae9fece20530e4b6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5157
x-amzn-requestid: b5748f49-693f-4bc3-a850-cb68e770de24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUG9GUHIAMF7pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd5f-5d2aaa212cf1be2506593746;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4h9lb_7egxb2hBbxjcS_cpZ5lDq6Lx-c_WUZyRHdUA0YTwr6kgDuiQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:10:16 GMT
age: 59245
etag: "85e378d0fff856832a8dd01743516b9476fed8c6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d02ede0c964f3346fd53ae2950bf2a62
e49306a3713cb724be024a4ddb5e90645718a718
c0e653d89656016c55aca9b198b9191620f1ae9a3c45742a90744bd74c4f9505
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8637
x-amzn-requestid: 07dc23e0-000f-4f6c-8d2b-0e65d88be270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvvEenoAMFr0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-520803124760abc216152d7b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HCJ483GPdpPhC7oYm1GrA02BqqST9sfqfCBSA93rZqaQYl-jezgP5Q==
via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:20:40 GMT
age: 58621
etag: "e49306a3713cb724be024a4ddb5e90645718a718"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
unitedforprofit.com/wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN.png
200 OK 123 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN.png
IP
File type PNG image data, 460 x 258, 8-bit/color RGBA, non-interlaced\012- data
Size 123 kB (123400 bytes)
Hash ede0f0ed428413af8f3b523fcfeb2009
5ec9c8cbcee2b73fa26df1c2fbb6af2a8aeb7b71
10fef912c22c4a124ee5a0365c50ede0427e7fcfd2fdbabfcf1b17376d062eea
GET /wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 13:40:24 GMT
Accept-Ranges: bytes
Content-Length: 123400
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=147
Content-Type: image/png
unitedforprofit.com/wp-content/uploads/2020/03/cover3.jpg
200 OK 154 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2020/03/cover3.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1383x866, components 3\012- data
Size 154 kB (154075 bytes)
Hash b9744d18969f890fcfa01ff0131b5730
d900cd85bf736de759f04bd237a42f724f575049
1cc20a6fe218d9706d9b530ab901b21cd096d3995169183478f6e782e4f37148
GET /wp-content/uploads/2020/03/cover3.jpg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 13:14:44 GMT
Accept-Ranges: bytes
Content-Length: 154075
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=147
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
unitedforprofit.com/wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2
200 OK 77 kB URL HTTP/1.1 unitedforprofit.com/wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2 HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://unitedforprofit.com/wp-content/cache/wpfc-minified/2nxtadxf/dmrae.css
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 14:02:32 GMT
Accept-Ranges: bytes
Content-Length: 77160
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=144
Content-Type: application/font-woff2
unitedforprofit.com/wp-content/themes/jnews/assets/dist/font/jegicon.woff
200 OK 7.1 kB URL HTTP/1.1 unitedforprofit.com/wp-content/themes/jnews/assets/dist/font/jegicon.woff
IP
File type Web Open Font Format, CFF, length 7144, version 1.0\012- data
Hash 80f6e7a7a6eb44255aeb06a2d5b5ea41
4ded570e00c9c96cc3cf18e770903cb60e360ce4
e2d3127da85763e024971c6192f78becbdf85db231b3d088c9f8b3777d444ede
GET /wp-content/themes/jnews/assets/dist/font/jegicon.woff HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://unitedforprofit.com/wp-content/cache/wpfc-minified/2nxtadxf/dmrae.css
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 14:02:33 GMT
Accept-Ranges: bytes
Content-Length: 7144
Cache-Control: max-age=0
Expires: max-age=A10368000, public
Vary: Accept-Encoding,User-Agent
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=148
Content-Type: x-font/woff
ocsp.digicert.com/
200 OK 280 B IP
Hash 1e50f5a3c9cdfa5024001fcf0a584561
d2726b0934e03ec541b8631b1ea02fe45b39b926
91845ac99c549b630d5b0bc5cacd917ee051b9dc0af69d10153e272fdff2e6f6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6400
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:42 GMT
Last-Modified: Mon, 26 Sep 2022 12:51:02 GMT
Server: ECS (amb/6B87)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 1e50f5a3c9cdfa5024001fcf0a584561
d2726b0934e03ec541b8631b1ea02fe45b39b926
91845ac99c549b630d5b0bc5cacd917ee051b9dc0af69d10153e272fdff2e6f6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1640
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:42 GMT
Last-Modified: Mon, 26 Sep 2022 14:10:22 GMT
Server: ECS (amb/6B9F)
X-Cache: HIT
Content-Length: 280
unitedforprofit.com/wp-content/themes/jnews/assets/img/jeg-empty.png
200 OK 70 B URL HTTP/1.1 unitedforprofit.com/wp-content/themes/jnews/assets/img/jeg-empty.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c0ddcc7cc2d334254808ae1d918f9ee7
6ea24d025387ce247fa530f14778ef7ada4683d5
67ebf650147a9122e94ff1b25a78a82e903b92b877821c1479de69f00f59d429
GET /wp-content/themes/jnews/assets/img/jeg-empty.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 14:00:34 GMT
Accept-Ranges: bytes
Content-Length: 70
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=146
Content-Type: image/png
unitedforprofit.com/wp-content/uploads/2022/09/Litecoin-1-460x275-y4ESQn.png
200 OK 240 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/Litecoin-1-460x275-y4ESQn.png
IP
File type PNG image data, 460 x 275, 8-bit/color RGBA, non-interlaced\012- data
Size 240 kB (239693 bytes)
Hash 3ca28a10cfa9a464d9d61f3306d856a7
7e53d9d7aff860c5725a2bf5256834a3884ccd9f
3a09af499174473d3edabc5e27cf9ad9719412720846aa1ed099c0e01189f3f6
GET /wp-content/uploads/2022/09/Litecoin-1-460x275-y4ESQn.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:41 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 07:40:56 GMT
Accept-Ranges: bytes
Content-Length: 239693
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=146
Content-Type: image/png
ocsp.digicert.com/
200 OK 280 B IP
Hash 1e50f5a3c9cdfa5024001fcf0a584561
d2726b0934e03ec541b8631b1ea02fe45b39b926
91845ac99c549b630d5b0bc5cacd917ee051b9dc0af69d10153e272fdff2e6f6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1640
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:42 GMT
Last-Modified: Mon, 26 Sep 2022 14:10:22 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 280
unitedforprofit.com/wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN-350x250.png
200 OK 100 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN-350x250.png
IP
File type PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 100 kB (100202 bytes)
Hash c474b97d4edaedc9ce4b9862ef321e54
1e032d04fedd90a87fe0756774ea30a1f418cf24
91d2a08724aac04ad8a69fae4d507cf491365da136422428ffed50af03bafb1e
GET /wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN-350x250.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 13:40:24 GMT
Accept-Ranges: bytes
Content-Length: 100202
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=146
Content-Type: image/png
unitedforprofit.com/wp-content/uploads/2022/09/btc-vs-bulls1-460x230-SjqlSb-350x230.jpeg
200 OK 13 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/btc-vs-bulls1-460x230-SjqlSb-350x230.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 350x230, components 3\012- data
Hash acd51ec8d6951b10a041b43b4c06a1b1
a28aa7779ca1451cd138d4af3c9902e18399ef85
845123e880cac7ecd43f40f40051695bf8a7fdf18029dbb52f328ad2d3012994
GET /wp-content/uploads/2022/09/btc-vs-bulls1-460x230-SjqlSb-350x230.jpeg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 13:40:24 GMT
Accept-Ranges: bytes
Content-Length: 13246
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=145
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2022/09/army-1708094_1920-460x306-OFrsDm-350x250.jpeg
200 OK 7.5 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/army-1708094_1920-460x306-OFrsDm-350x250.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 350x250, components 3\012- data
Hash 4f026a3e93c780d477de2453e044688a
1db8445efed0c055cb5f88491fc1fcfb90e38892
9589859fc8959d62a0dd1e3748cdeace897ab2f2cff6773ffb884c4c4c180b13
GET /wp-content/uploads/2022/09/army-1708094_1920-460x306-OFrsDm-350x250.jpeg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 09:40:49 GMT
Accept-Ranges: bytes
Content-Length: 7460
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=147
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2022/09/btc-vs-bulls1-460x230-SjqlSb-360x180.jpeg
200 OK 11 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/btc-vs-bulls1-460x230-SjqlSb-360x180.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 360x180, components 3\012- data
Hash 60d43f6e6c6ed83cc7fce218c2b9ffe7
26d214969ab2345fa18bc5e4ac847cdf2a45ebfb
bebc994d865ec6a234d755262fda5b4f2bfffa8209b54a48a7679a010f82a018
GET /wp-content/uploads/2022/09/btc-vs-bulls1-460x230-SjqlSb-360x180.jpeg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 13:40:24 GMT
Accept-Ranges: bytes
Content-Length: 11224
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=146
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN-120x86.png
200 OK 19 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN-120x86.png
IP
File type PNG image data, 120 x 86, 8-bit/color RGBA, non-interlaced\012- data
Hash 21fe4819f3c8a18baf3a9e7c6b7f460c
21636474721706da6a5045ec92831eba105fc6b0
0da36c10056c30374c2a821787d58a5780c729a93b6591046ea82c8b8bdc208c
GET /wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN-120x86.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 13:40:24 GMT
Accept-Ranges: bytes
Content-Length: 18627
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=145
Content-Type: image/png
unitedforprofit.com/wp-content/uploads/2022/09/Litecoin-1-460x275-y4ESQn-350x250.png
200 OK 161 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/Litecoin-1-460x275-y4ESQn-350x250.png
IP
File type PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 161 kB (160990 bytes)
Hash 430205c047a55bcd83d9b505b9893a4e
609ba8d1d3e3c256830201d53091c8fa3415a674
b26c7482edf4e0b730320353913fafc99b14c36203e1daf8fe5d506fe2ffe653
GET /wp-content/uploads/2022/09/Litecoin-1-460x275-y4ESQn-350x250.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 07:40:56 GMT
Accept-Ranges: bytes
Content-Length: 160990
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=143
Content-Type: image/png
unitedforprofit.com/wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN-360x180.png
200 OK 80 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN-360x180.png
IP
File type PNG image data, 360 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash a19cda8b47e28912bfb62988f756b8d3
2ace3a4031898aa586c15c6061d86ff2dde12ea9
9da92f7a37b16fe2d284788c7cb86e4f60355f250c42fc23a5f2773ef826743d
GET /wp-content/uploads/2022/09/Algorand-1-460x258-rIZ8lN-360x180.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Mon, 26 Sep 2022 13:40:24 GMT
Accept-Ranges: bytes
Content-Length: 80115
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=145
Content-Type: image/png
omniform1.com/forms/signup/v1/static/js/main.js?v=1663331407
200 OK 177 kB URL HTTP/2 omniform1.com/forms/signup/v1/static/js/main.js?v=1663331407
IP
File type ASCII text, with very long lines (32025)
Size 177 kB (176832 bytes)
Hash 996a0f650845936f54284c61a5c63a04
ef2418ea2b07b3d62bc3acbbeea1f1756f202a39
c27fce3dd6e8b9bcfb8c08a095c5b77b6a5339dbbd008eb2770cd9156c182185
GET /forms/signup/v1/static/js/main.js?v=1663331407 HTTP/1.1
Host: omniform1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.omnisrc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 14:37:42 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 16 Sep 2022 12:22:38 GMT
x-envoy-upstream-service-time: 1
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 750cbd330b85fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2
unitedforprofit.com/wp-content/uploads/2020/03/cover39.jpeg
200 OK 105 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2020/03/cover39.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1050x700, components 3\012- data
Size 105 kB (104610 bytes)
Hash 20b4a5e5e8bfbd6e94c2da05151508d0
cf56a004694e219164667a33a705b9c8e87110c1
4bfbe22087c059f86fe173778942100407a44d377492ae630b22f29d263a50ef
GET /wp-content/uploads/2020/03/cover39.jpeg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 13:15:33 GMT
Accept-Ranges: bytes
Content-Length: 104610
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=144
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2020/03/cover36-scaled.jpg
200 OK 285 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2020/03/cover36-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2560x1715, components 3\012- data
Size 285 kB (285431 bytes)
Hash f9676fc59514cba728a989aaa788ee6a
4cc48dd33b6e3078fe724662161735f3f278b527
78acee48a5fb37ccf9cb0daddb49873488b496d76dac81a14345c3d818732772
GET /wp-content/uploads/2020/03/cover36-scaled.jpg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 13:15:26 GMT
Accept-Ranges: bytes
Content-Length: 285431
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=146
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2022/09/traxer-nmGWvgaIY9E-unsplash-460x302-d6cli4-350x250.jpeg
200 OK 24 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/traxer-nmGWvgaIY9E-unsplash-460x302-d6cli4-350x250.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 350x250, components 3\012- data
Hash f5e93c9fd8cd977337d9bf13caa967d5
069c746d4605a13f722d5ea4739d382e6ca47ebd
16c125568e58e3922cbe240d4bb595993b69eec8c68e1ec5d04157455bf02074
GET /wp-content/uploads/2022/09/traxer-nmGWvgaIY9E-unsplash-460x302-d6cli4-350x250.jpeg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Sun, 25 Sep 2022 04:40:25 GMT
Accept-Ranges: bytes
Content-Length: 24327
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=143
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2022/09/traxer-3mUEz2x5H8Y-unsplash-460x306-5iDbHV-350x250.jpeg
200 OK 18 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/traxer-3mUEz2x5H8Y-unsplash-460x306-5iDbHV-350x250.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 350x250, components 3\012- data
Hash 34258085c0fe12f6f894d647ea68b521
b5486251baee53881964b0240e131effb719af88
2dfc2bb35ec0dc48afc822f4e5f8f3c13810f2c365d0073cb2f0c460466ba3be
GET /wp-content/uploads/2022/09/traxer-3mUEz2x5H8Y-unsplash-460x306-5iDbHV-350x250.jpeg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Sun, 25 Sep 2022 01:40:10 GMT
Accept-Ranges: bytes
Content-Length: 18128
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=143
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2020/03/cover27.jpg
200 OK 390 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2020/03/cover27.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=(c) Ojo Images], baseline, precision 8, 1800x1351, components 3\012- data
Size 390 kB (390503 bytes)
Hash 957bcbc6fe8b54b57aa47a6cb233ac25
048444370e5f0f9d8b451ebab880853fec05dd1f
e0580e328fc84eb2f41183b5abef946978af7c3c9664ee4efc39100527e30e65
GET /wp-content/uploads/2020/03/cover27.jpg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 13:15:10 GMT
Accept-Ranges: bytes
Content-Length: 390503
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=142
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2022/09/Quant-460x307-ej14Cr-350x250.png
200 OK 42 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/Quant-460x307-ej14Cr-350x250.png
IP
File type PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 728c295905bbfc0f30f08c6c3af4917f
58428191b956ffb54a881c40fa2f49814b717a92
7796e0abeba89ec4b95866a28010e7c4d1bdf9d69ead9f79a6a9b7c8a038a2f0
GET /wp-content/uploads/2022/09/Quant-460x307-ej14Cr-350x250.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Sat, 24 Sep 2022 23:40:11 GMT
Accept-Ranges: bytes
Content-Length: 42485
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=145
Content-Type: image/png
unitedforprofit.com/wp-content/uploads/2022/09/transamerica-pyramid-ga7adaf85a_1280-460x327-E4I9jR-350x250.jpeg
200 OK 16 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/transamerica-pyramid-ga7adaf85a_1280-460x327-E4I9jR-350x250.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 350x250, components 3\012- data
Hash b217f923d2dd27487c4eb2dcee43c8e7
d3ff43e408fa8475914d8d24a5e9359bf0ec653d
b9bbc06c14aff96acab8018507b0e3e59e753fc12f0b0c1802ed3886f12a557c
GET /wp-content/uploads/2022/09/transamerica-pyramid-ga7adaf85a_1280-460x327-E4I9jR-350x250.jpeg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Sun, 25 Sep 2022 13:40:21 GMT
Accept-Ranges: bytes
Content-Length: 16402
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=142
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2022/09/Shiba-Inu-1-460x327-Wv5PRS-350x250.png
200 OK 153 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2022/09/Shiba-Inu-1-460x327-Wv5PRS-350x250.png
IP
File type PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 153 kB (153198 bytes)
Hash 62fb73e30d1fb9efd7d5d8edfc18df8f
2cf7a6a39ca41570d24d56d65d0f6b0a60b619a7
ba8e1c211d051c737d5447f8f68fde7176614a8e8c389298d76ba1b56bcd9609
GET /wp-content/uploads/2022/09/Shiba-Inu-1-460x327-Wv5PRS-350x250.png HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Sun, 25 Sep 2022 10:40:56 GMT
Accept-Ranges: bytes
Content-Length: 153198
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=142
Content-Type: image/png
unitedforprofit.com/wp-content/uploads/2020/03/cover21.jpg
200 OK 411 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2020/03/cover21.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1387x921, components 3\012- data
Size 411 kB (410566 bytes)
Hash 63135f0306ba6f6c3c4e7ac33f838656
8caed40ce484d2f7f875a42dacab014bf4cb313a
78d5591d6f1c0dd837350fd989cdc056ebc25775bb69f097a126f0bf54ec7f93
GET /wp-content/uploads/2020/03/cover21.jpg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 13:15:01 GMT
Accept-Ranges: bytes
Content-Length: 410566
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=144
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2020/03/cover47-scaled.jpg
200 OK 392 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2020/03/cover47-scaled.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2560x1664, components 3\012- data
Size 392 kB (391876 bytes)
Hash 191ceaca9026ad38604c4bc5905205b2
3943107b6ea576116892e53661bd11c798f97f60
3c34ad394a8b7834052c2b1442de031255c442ad4ff4334d06fc6eedda8b6d1c
GET /wp-content/uploads/2020/03/cover47-scaled.jpg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:42 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 13:15:47 GMT
Accept-Ranges: bytes
Content-Length: 391876
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=145
Content-Type: image/jpeg
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Mon, 26 Sep 2022 12:41:09 GMT
expires: Mon, 26 Sep 2022 14:41:09 GMT
cache-control: public, max-age=7200
age: 6994
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-2785601.js?sv=6
200 OK 68 kB URL HTTP/2 static.hotjar.com/c/hotjar-2785601.js?sv=6
IP
File type ASCII text, with very long lines (3790)
Hash e97485b85c85988a3968cf66cd636d8d
c4029b05ca5dd9e69d6278ed2b39f4b8cddee432
fc3db4ffade010544efa8d38869e72da02d0f719f1029e71e7c657b3a3e86d4c
GET /c/hotjar-2785601.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Mon, 26 Sep 2022 14:37:43 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/eb8fd60b20fc7929c1883f36973890da
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GmiHo1w6KahiJi4jairZve2T7kVRpLTyC0K0hQv99J2ykprmWe2pIA==
X-Firefox-Spdy: h2
unitedforprofit.com/wp-content/uploads/2020/03/icon.jpg
200 OK 7.4 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2020/03/icon.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 81x81, components 3\012- data
Hash e1097582a0f2845e107af11f9fc2ad51
e575514109182c444ac58ff1db8dbcd598a21b2e
0b61ed644c106a292c5d950c587c51a7992c92b5ed9fefd8e14640b528148837
GET /wp-content/uploads/2020/03/icon.jpg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:43 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 15:25:50 GMT
Accept-Ranges: bytes
Content-Length: 7359
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=143
Content-Type: image/jpeg
unitedforprofit.com/wp-content/uploads/2020/03/icon-75x75.jpg
200 OK 2.7 kB URL HTTP/1.1 unitedforprofit.com/wp-content/uploads/2020/03/icon-75x75.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 75x75, components 3\012- data
Hash 663e7648a19b8557e9fb3baead7e9b4a
cddde7e74d46f4c8f168186b840b26f21088e83b
e15d6e8283eba4f2d754adb98251e0494dabe3c6025d7e8c43d47dad5b2094b8
GET /wp-content/uploads/2020/03/icon-75x75.jpg HTTP/1.1
Host: unitedforprofit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/?&utm_campaign=campaign%3A+PABH20+26.09.2022+%286331b772a4054e0019dd00d3%29&utm_medium=email&utm_source=omnisend&omnisendContactID=632ef173b88981001b484977
Cookie: PHPSESSID=f70aa2aa8b05d63c9e9b15dae4e5b08e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:43 GMT
Server: Apache
Last-Modified: Tue, 03 Mar 2020 15:25:50 GMT
Accept-Ranges: bytes
Content-Length: 2700
Cache-Control: max-age=10368000
Expires: max-age=A10368000, public
Connection: keep-alive, Keep-Alive
Keep-Alive: timeout=2, max=141
Content-Type: image/jpeg
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 1ded4d0cf4c56a6bd937640e201b46d8
a2a87e030da68da53e8ff5d005712530865158ed
0fdab70087c310f41a22c5f41369f9432462da4639d12c38e8e2916c7166e605
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 14:37:43 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Fri, 30 Sep 2022 12:51:07 GMT
ETag: "a2a87e030da68da53e8ff5d005712530865158ed"
Last-Modified: Mon, 26 Sep 2022 12:51:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2135
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750cbd394fda0b4d-OSL
vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Hash f6a9ca04b0687ea3c0d98e8430c8c77b
35503b2deb23091a9a9c6c68d4020dbdf879588e
8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7RCJYr3wShBiaaNfqNG8CScqkDmy8H8G-6XWdDpkbb4TXPighxwwIA==
age: 1660836
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 72 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (593)
Hash 7a68c8644032413981e4ba5bc0d66c4a
2d46ca8055e8577ae7138140e34a6e633434973c
e0573e9a9cbfc3f00a921fa64c50270f5941a1ebb253ab70af2cc0dac45cb0d5
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 72341
date: Mon, 26 Sep 2022 14:37:43 GMT
access-control-allow-origin: *
etag: "632d6d03-11a95"
expires: Mon, 26 Sep 2022 15:37:43 GMT
last-modified: Fri, 23 Sep 2022 11:23:31 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3Aregular%2C500%2C700%2C500%2Cregular&display=swap&ver=1.0.0
200 OK 657 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3Aregular%2C500%2C700%2C500%2Cregular&display=swap&ver=1.0.0
IP
Hash 0648db4865945fd17a942d7098dbbd06
6f19794c9b899c6e6b2b2787d50e8039fef4c488
8d8e7da9cf3f5a8271cbe75a34981a12f8fe356d506d40ad6d56645b265d007a
GET /css?family=Roboto%3Aregular%2C500%2C700%2C500%2Cregular&display=swap&ver=1.0.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Sep 2022 14:37:40 GMT
date: Mon, 26 Sep 2022 14:37:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 463b0eaaa96928a1b096aa42697136cf
aebd124a0542adba6427705ff2e4ff8cd5426db5
95cf12a35535cc9ad11952fe17d7a36735acfab19e8b5cda12066d8d5f695cbb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 14:37:43 GMT
Last-Modified: Mon, 26 Sep 2022 12:55:41 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bWkx-M3pebn-T5pUs95IPTjL7_G5wRZAYuYdfItZ0L8KFHk5oRkdyA==
Age: 6122
ocsp.digicert.com/
200 OK 279 B IP
Hash f54cfcd86039f1b3c988d9f37c89fad2
47732152a55cc65c573d2303027b005b487a2e01
44c3bcff01d03b4114a07f4a1d63f762a772622602827a35dfa6f79436197d91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4595
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:43 GMT
Last-Modified: Mon, 26 Sep 2022 13:21:08 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 279
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 26 Sep 2022 14:37:43 GMT
access-control-allow-origin: *
etag: "632d6d03-2b"
expires: Mon, 26 Sep 2022 15:37:43 GMT
accept-ranges: bytes
last-modified: Fri, 23 Sep 2022 11:23:31 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/86465927/1?wmode=7&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2804%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A684995795122%3Ahid%3A245391568%3Az%3A0%3Ai%3A20220926143741%3Aet%3A1664203062%3Ac%3A1%3Arn%3A374568450%3Arqn%3A1%3Au%3A1664203062811313494%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A26%2C257%2C123%2C0%2C552%2C0%2C%2C1781%2C5%2C%2C%2C%2C2865%3Ans%3A1664203057444%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664203062%3At%3AUnited%20for%20Profit&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/86465927/1?wmode=7&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2804%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A684995795122%3Ahid%3A245391568%3Az%3A0%3Ai%3A20220926143741%3Aet%3A1664203062%3Ac%3A1%3Arn%3A374568450%3Arqn%3A1%3Au%3A1664203062811313494%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A26%2C257%2C123%2C0%2C552%2C0%2C%2C1781%2C5%2C%2C%2C%2C2865%3Ans%3A1664203057444%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664203062%3At%3AUnited%20for%20Profit&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 4467a13b075b83efdcdce517a2e38f5c
cc3802fbc48adec6d96749948566b7f45babe98d
6a9a34b34cc2716c8de4c6e83617a58ae919f231204546972d82e16ebd1f8eb4
GET /watch/86465927/1?wmode=7&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2804%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A684995795122%3Ahid%3A245391568%3Az%3A0%3Ai%3A20220926143741%3Aet%3A1664203062%3Ac%3A1%3Arn%3A374568450%3Arqn%3A1%3Au%3A1664203062811313494%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A26%2C257%2C123%2C0%2C552%2C0%2C%2C1781%2C5%2C%2C%2C%2C2865%3Ans%3A1664203057444%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664203062%3At%3AUnited%20for%20Profit&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://unitedforprofit.com
Referer: https://unitedforprofit.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Mon, 26 Sep 2022 14:37:43 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://unitedforprofit.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 26-Sep-2022 14:37:43 GMT
last-modified: Mon, 26-Sep-2022 14:37:43 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
forms.soundestlink.com/REST/forms/v1/track/view?brandID=5e8f63de4c7fa47be74d4db6&formType=landingPage&formID=5e95a4fd99f0b73c26c72ca7&source=landingPage&anonymousID=SBI7s4wDcffVa0-20220926143741&sessionID=8qS9dA54hRBTDl-20220926143741&pageTitle=Opt-in%2520form%2520UnitedForProfit&pageURL=https%253A%252F%252Fforms.omnisrc.com%252Fsignup%252Fv1%252F5e8f63de4c7fa47be74d4db6_5e95a4fd99f0b73c26c72ca7.html
200 OK 42 B URL HTTP/2 forms.soundestlink.com/REST/forms/v1/track/view?brandID=5e8f63de4c7fa47be74d4db6&formType=landingPage&formID=5e95a4fd99f0b73c26c72ca7&source=landingPage&anonymousID=SBI7s4wDcffVa0-20220926143741&sessionID=8qS9dA54hRBTDl-20220926143741&pageTitle=Opt-in%2520form%2520UnitedForProfit&pageURL=https%253A%252F%252Fforms.omnisrc.com%252Fsignup%252Fv1%252F5e8f63de4c7fa47be74d4db6_5e95a4fd99f0b73c26c72ca7.html
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /REST/forms/v1/track/view?brandID=5e8f63de4c7fa47be74d4db6&formType=landingPage&formID=5e95a4fd99f0b73c26c72ca7&source=landingPage&anonymousID=SBI7s4wDcffVa0-20220926143741&sessionID=8qS9dA54hRBTDl-20220926143741&pageTitle=Opt-in%2520form%2520UnitedForProfit&pageURL=https%253A%252F%252Fforms.omnisrc.com%252Fsignup%252Fv1%252F5e8f63de4c7fa47be74d4db6_5e95a4fd99f0b73c26c72ca7.html HTTP/1.1
Host: forms.soundestlink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.omnisrc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 14:37:44 GMT
content-type: image/gif
content-length: 42
access-control-allow-methods: GET,OPTIONS
x-envoy-upstream-service-time: 12
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 750cbd3da995b50c-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f54cfcd86039f1b3c988d9f37c89fad2
47732152a55cc65c573d2303027b005b487a2e01
44c3bcff01d03b4114a07f4a1d63f762a772622602827a35dfa6f79436197d91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4596
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 14:37:44 GMT
Last-Modified: Mon, 26 Sep 2022 13:21:08 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 279
ws11.hotjar.com/api/v2/client/ws
101 Switching Protocols 0 B URL HTTP/1.1 ws11.hotjar.com/api/v2/client/ws
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v2/client/ws HTTP/1.1
Host: ws11.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://unitedforprofit.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: v9bRthGQohE+DrgATCactg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 26 Sep 2022 14:37:44 GMT
Content-Type: application/octet-stream
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TqR9qcLeXvxo9WZA06zoilGXB9w=
Sec-WebSocket-Extensions: permessage-deflate
mc.yandex.ru/webvisor/86465927?wmode=0&wv-part=1&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=104704530&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1664203065%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143745%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203065&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/86465927?wmode=0&wv-part=1&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=104704530&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1664203065%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143745%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203065&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/86465927?wmode=0&wv-part=1&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=104704530&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1664203065%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143745%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203065&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 256699
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 26 Sep 2022 14:37:47 GMT
access-control-allow-origin: https://unitedforprofit.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 26-Sep-2022 14:37:47 GMT
last-modified: Mon, 26-Sep-2022 14:37:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/86465927?wmode=0&wv-part=1&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=535191312&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1664203066%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143745%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203066&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/86465927?wmode=0&wv-part=1&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=535191312&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1664203066%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143745%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203066&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/86465927?wmode=0&wv-part=1&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=535191312&wv-type=3&browser-info=gdpr%3A14%3Aet%3A1664203066%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143745%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203066&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 26 Sep 2022 14:37:47 GMT
access-control-allow-origin: https://unitedforprofit.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 26-Sep-2022 14:37:47 GMT
last-modified: Mon, 26-Sep-2022 14:37:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/86465927?wmode=0&wv-part=2&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=263973532&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1664203066%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143746%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203066&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/86465927?wmode=0&wv-part=2&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=263973532&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1664203066%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143746%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203066&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/86465927?wmode=0&wv-part=2&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=263973532&wv-type=3&browser-info=bt%3A1%3Agdpr%3A14%3Aet%3A1664203066%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143746%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203066&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 805
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 26 Sep 2022 14:37:48 GMT
access-control-allow-origin: https://unitedforprofit.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 26-Sep-2022 14:37:48 GMT
last-modified: Mon, 26-Sep-2022 14:37:48 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/86465927?wv-check=45515&wv-type=0&wmode=0&wv-part=1&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=227890576&browser-info=gdpr%3A14%3Aet%3A1664203067%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143746%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203067&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/86465927?wv-check=45515&wv-type=0&wmode=0&wv-part=1&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=227890576&browser-info=gdpr%3A14%3Aet%3A1664203067%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143746%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203067&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/86465927?wv-check=45515&wv-type=0&wmode=0&wv-part=1&wv-hit=245391568&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&rn=227890576&browser-info=gdpr%3A14%3Aet%3A1664203067%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20220926143746%3Au%3A1664203062811313494%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664203067&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 26 Sep 2022 14:37:48 GMT
access-control-allow-origin: https://unitedforprofit.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 26-Sep-2022 14:37:48 GMT
last-modified: Mon, 26-Sep-2022 14:37:48 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
omniform1.com/forms/signup/v1/static/js/libraries.js?v=1663331407
200 OK 0 B URL HTTP/2 omniform1.com/forms/signup/v1/static/js/libraries.js?v=1663331407
IP
GET /forms/signup/v1/static/js/libraries.js?v=1663331407 HTTP/1.1
Host: omniform1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.omnisrc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 14:37:42 GMT
content-type: text/javascript; charset=utf-8
last-modified: Mon, 13 Feb 2017 21:44:07 GMT
x-envoy-upstream-service-time: 1
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 750cbd32fb6ffab4-OSL
content-encoding: br
X-Firefox-Spdy: h2
mc.yandex.ru/watch/86465927?wmode=7&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2804%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A684995795122%3Ahid%3A245391568%3Az%3A0%3Ai%3A20220926143741%3Aet%3A1664203062%3Ac%3A1%3Arn%3A374568450%3Arqn%3A1%3Au%3A1664203062811313494%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A26%2C257%2C123%2C0%2C552%2C0%2C%2C1781%2C5%2C%2C%2C%2C2865%3Ans%3A1664203057444%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664203062%3At%3AUnited%20for%20Profit&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/86465927?wmode=7&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2804%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A684995795122%3Ahid%3A245391568%3Az%3A0%3Ai%3A20220926143741%3Aet%3A1664203062%3Ac%3A1%3Arn%3A374568450%3Arqn%3A1%3Au%3A1664203062811313494%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A26%2C257%2C123%2C0%2C552%2C0%2C%2C1781%2C5%2C%2C%2C%2C2865%3Ans%3A1664203057444%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664203062%3At%3AUnited%20for%20Profit&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/86465927?wmode=7&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2804%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A684995795122%3Ahid%3A245391568%3Az%3A0%3Ai%3A20220926143741%3Aet%3A1664203062%3Ac%3A1%3Arn%3A374568450%3Arqn%3A1%3Au%3A1664203062811313494%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A26%2C257%2C123%2C0%2C552%2C0%2C%2C1781%2C5%2C%2C%2C%2C2865%3Ans%3A1664203057444%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664203062%3At%3AUnited%20for%20Profit&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/86465927/1?wmode=7&page-url=https%3A%2F%2Funitedforprofit.com%2F%3F%26utm_campaign%3Dcampaign%253A%2BPABH20%2B26.09.2022%2B%25286331b772a4054e0019dd00d3%2529%26utm_medium%3Demail%26utm_source%3Domnisend%26omnisendContactID%3D632ef173b88981001b484977&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2804%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A684995795122%3Ahid%3A245391568%3Az%3A0%3Ai%3A20220926143741%3Aet%3A1664203062%3Ac%3A1%3Arn%3A374568450%3Arqn%3A1%3Au%3A1664203062811313494%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A26%2C257%2C123%2C0%2C552%2C0%2C%2C1781%2C5%2C%2C%2C%2C2865%3Ans%3A1664203057444%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664203062%3At%3AUnited%20for%20Profit&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Mon, 26 Sep 2022 14:37:43 GMT
access-control-allow-origin: https://unitedforprofit.com
set-cookie: yandexuid=6956354511664203063; Expires=Tue, 26-Sep-2023 14:37:43 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6956354511664203063; Expires=Tue, 26-Sep-2023 14:37:43 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2426330871664203063; Path=/; SameSite=None; Secure
i=6nY7DVvVZvT5eJ3CzkzAisa7YrlK/vUXY1m6gY+5LWcm0sVkBk3m/XT4BE/mS7lay/u1o9itPwgse/YpmZR30szMTkA=; Expires=Thu, 23-Sep-2032 14:37:42 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1695739063.yrts.1664203063#1695739063.yrtsi.1664203063; Expires=Tue, 26-Sep-2023 14:37:43 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 26-Sep-2022 14:37:43 GMT
last-modified: Mon, 26-Sep-2022 14:37:43 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ws11.hotjar.com/api/v2/sites/2785601/recordings/content
200 OK 0 B URL HTTP/2 ws11.hotjar.com/api/v2/sites/2785601/recordings/content
IP
POST /api/v2/sites/2785601/recordings/content HTTP/1.1
Host: ws11.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 442211
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 14:37:44 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
forms.omnisrc.com/signup/v1/5e8f63de4c7fa47be74d4db6_5e95a4fd99f0b73c26c72ca7.html
200 OK 0 B URL HTTP/2 forms.omnisrc.com/signup/v1/5e8f63de4c7fa47be74d4db6_5e95a4fd99f0b73c26c72ca7.html
IP
Analyzer Verdict Alert fortinet Phishing
GET /signup/v1/5e8f63de4c7fa47be74d4db6_5e95a4fd99f0b73c26c72ca7.html HTTP/1.1
Host: forms.omnisrc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://unitedforprofit.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 14:37:41 GMT
content-type: text/html; charset=utf-8
cache-control: max-age:49, public
expires: Tue, 25 Oct 2022 13:18:49 GMT
last-modified: Sun, 25 Sep 2022 13:18:49 GMT
x-envoy-upstream-service-time: 82
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 80462
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 750cbd2fa8bb0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/2785601/visit-data?sv=6
200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/2785601/visit-data?sv=6
IP
POST /api/v2/client/sites/2785601/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 112
Origin: https://unitedforprofit.com
Connection: keep-alive
Referer: https://unitedforprofit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 14:37:43 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
104.18.18.227
93.184.220.29
34.117.237.239
104.18.2.176
54.246.176.35
23.36.77.32
87.250.250.119