GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9535ddec2c7c56af/1750533665376/e0f476c3384ad652c9f1de0715c6f613610918d627624922ec9198ab000c9a7d/EIoFdZxqbRu6qDN
104.18.94.41401 Unauthorized 1 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9535ddec2c7c56af/1750533665376/e0f476c3384ad652c9f1de0715c6f613610918d627624922ec9198ab000c9a7d/EIoFdZxqbRu6qDN
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type very short file (no magic)
Hash ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5
GET /cdn-cgi/challenge-platform/h/g/pat/9535ddec2c7c56af/1750533665376/e0f476c3384ad652c9f1de0715c6f613610918d627624922ec9198ab000c9a7d/EIoFdZxqbRu6qDN HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 401 Unauthorized
date: Sat, 21 Jun 2025 19:21:07 GMT
content-type: text/plain; charset=utf-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g4PR2wzhK1lLJ8d4HFcb2E2EJGNYnYkki7JGYqwAMmn0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIOD0dsM4StZSyfHeBxXG9hNhCRjWJ2JJIuyRmKsADJp9ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIOD0dsM4StZSyfHeBxXG9hNhCRjWJ2JJIuyRmKsADJp9ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApfbVKW9jv_cm7VCxn62oVAVC5hFmu-kZjUyoHVY59NkyKyHKMDjFTQQtwRz5WaCrisTztPUBe5IEqngHq_K6n0LVGgP-vP5_EV8Q63SdqECb9NxgQT_jnGDYKP38YIvPHP47CMaQOOm6F4tfy50OTdVLxmir-nwtG4EsjQpjbWt5h0uKnWtYHo0z3T2TGAaak3xueW6uC1Y9XvXRyQ4VLq2YT2Pj5nG5iT9qz95HGc0b9CcuEADcgyRRUmYpFDKa4E7gznEbKSul9XcN8oNCkL49spyNT1stpPVhL9fnQZz0zdIsTIdKR-iKQoy9HKyPEeNpcQhrSF7DgSPJTnR6xwIDAQAB", max-age=20
priority: u=4,i=?0
server: cloudflare
cf-ray: 9535ddfc187256af-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET th778.help/static/font/nKKU-Go6G5tXcr4-ORWnVaE.woff2
172.67.216.69200 OK 19 kB URL GET th778.help/static/font/nKKU-Go6G5tXcr4-ORWnVaE.woff2
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 19128, version 1.0
Hash 885d32cf40294b2d69b2f58bb27468b7
c1c9db162121048bf585aa8915ad88c2820d17c4
c8545021ffd4b062ea76df6ab092f50a7c0de35d61132769dc7b43afcdb0fc75
GET /static/font/nKKU-Go6G5tXcr4-ORWnVaE.woff2 HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://th778.help/static/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: font/woff2
content-length: 19128
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R0HCbIqNWrw0V6xdIHSLWglPJ%2BrrL11enykiSsPTng0DQXl5N%2FvHBvoJlBHsKN4jKOQunLMtysGPBTaUTaC73%2FNsvk5N62tv72px7%2FVUUAmQ7%2BSvTQIP%2F%2BYZ%2B4hK"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:51 GMT
etag: "671fb443-4ab8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 9535de567b0b56c6-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1675&min_rtt=0&rtt_var=1990&sent=122&recv=150&lost=0&retrans=0&sent_bytes=28322&recv_bytes=10198&delivery_rate=1649728&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=16207&unsent_bytes=0&cid=da3f6df993116bda&ts=529&inflight_dur=57&x=44"
GET th778.help/static/js/flatsome.js
172.67.216.69200 OK 54 kB URL GET th778.help/static/js/flatsome.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (53668), with no line terminators
Hash a279d096c9e7510c9b95bc4784f90048
0acc589b74a6e9c99c4678f7d8e38a6359379934
7046618f6555847e4c8d7fb47584672aab889faf9ceebd6d871074da350615c9
GET /static/js/flatsome.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xTAQb%2FkHqKdx9EcaTMLABcfxc9l5NdlnN8G0iHZZLOkmnf0Qbm4kGY27s2ENmov39Q45SMXVKQOVm%2BnQb66RYyY5Zk3Kt8EgWvmo4JwpmIUgsYQU6bTkBCBJ9Am2"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:37 GMT
vary: Accept-Encoding
etag: "671fb435-d1a4"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
age: 0
cf-cache-status: HIT
cf-ray: 9535de580b1f56c6-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1000&min_rtt=0&rtt_var=623&sent=248&recv=191&lost=0&retrans=0&sent_bytes=161814&recv_bytes=12969&delivery_rate=5077805&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22428&unsent_bytes=0&cid=da3f6df993116bda&ts=671&inflight_dur=115&x=44"
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1094521939:1750530369:E1AB0mkmyWMp6aLLeFgdAcKSXOJvhlWfNUGPfizmZfA/9535ddec2c7c56af/WGyzoe8qgOl0QMgKizA_LXegqEgZxaldgS6gXiDE3Zg-1750533664-1.2.1.1-pl1Nv2aLKYIsGWlGbQ2khGgenk3cBcnJcGnY9JLfgVoB955mOthFSiVJLZX7UM4w
104.18.94.41200 OK 30 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1094521939:1750530369:E1AB0mkmyWMp6aLLeFgdAcKSXOJvhlWfNUGPfizmZfA/9535ddec2c7c56af/WGyzoe8qgOl0QMgKizA_LXegqEgZxaldgS6gXiDE3Zg-1750533664-1.2.1.1-pl1Nv2aLKYIsGWlGbQ2khGgenk3cBcnJcGnY9JLfgVoB955mOthFSiVJLZX7UM4w
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type ASCII text, with very long lines (29484), with no line terminators
Hash 59545a1da281861c44af74a2655419a1
48c88d92efe9a8b427abbc6829278ff02c2ebc49
0a3d76a1cd00e36a8fc63256445b94f3ae03707fbc9ec1aa2fcaf921e135c750
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1094521939:1750530369:E1AB0mkmyWMp6aLLeFgdAcKSXOJvhlWfNUGPfizmZfA/9535ddec2c7c56af/WGyzoe8qgOl0QMgKizA_LXegqEgZxaldgS6gXiDE3Zg-1750533664-1.2.1.1-pl1Nv2aLKYIsGWlGbQ2khGgenk3cBcnJcGnY9JLfgVoB955mOthFSiVJLZX7UM4w HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
cf-chl: WGyzoe8qgOl0QMgKizA_LXegqEgZxaldgS6gXiDE3Zg-1750533664-1.2.1.1-pl1Nv2aLKYIsGWlGbQ2khGgenk3cBcnJcGnY9JLfgVoB955mOthFSiVJLZX7UM4w
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 36268
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:12 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: Z/j6eDBP1PZ8xe/odPzcf9TQ4uYgDIBGe23iQvFsDDeza1VZZPwVp+cRHKcqNt9g$QkecHgCsiHi8OCnBUI81/w==
priority: u=3,i=?0
server: cloudflare
cf-ray: 9535de1b5fb156af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
104.16.80.73200 OK 20 kB URL GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
IP 104.16.80.73:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
FingerprintEA:C7:0D:68:3A:45:CB:AD:C5:33:41:B6:DF:F1:60:64:E1:0F:52:6A
ValiditySun, 27 Apr 2025 18:18:02 GMT - Sat, 26 Jul 2025 19:17:55 GMT
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Hash ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://acemortgagebanking.com
DNT: 1
Connection: keep-alive
Referer: https://acemortgagebanking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9535ddec2c7c56af/1750533665382/fInE3VyQiB93TAk
104.18.94.41200 OK 510 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9535ddec2c7c56af/1750533665382/fInE3VyQiB93TAk
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type PNG image data, 67 x 90, 8-bit/color RGBA, non-interlaced
Hash 3cfe5a870da9a510faa4d9d5c0675aeb
b255c5646db85f4d96596c4750df6df15ac96ef5
de048998d03f4216f2c0948813be680827e34c7a09a96c5685e16ff73f5d49a1
GET /cdn-cgi/challenge-platform/h/g/d/9535ddec2c7c56af/1750533665382/fInE3VyQiB93TAk HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:10 GMT
content-type: image/png
content-length: 510
priority: u=4,i=?0
server: cloudflare
cf-ray: 9535de10fb9356af-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET th778.help/static/picture/slotnew2.gif
172.67.216.69200 OK 238 kB URL GET th778.help/static/picture/slotnew2.gif
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type GIF image data, version 89a, 728 x 200
Size 238 kB (238541 bytes)
Hash dc4d6697329a3ec509d5372d822c5eec
3ef7ba590e8749fda82c1f4048460d5cfdd218a0
b1b9202ffca42c2232ac4de0b5c967dfa2d69d02b4fc46ddc1771a99799d4f03
GET /static/picture/slotnew2.gif HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: image/gif
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:34 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"671fb432-3a3cd"
expires: Fri, 18 Jul 2025 06:32:29 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: gzip
age: 305331
cf-cache-status: HIT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GYIOENG%2Fb03gEn%2F9%2B71dpa0bzk%2BRy7i82LStolBvEcPOgoqIXRWvxx6yPcfzvZA9pnRqBV3hKR%2Bpm0hABjmKO%2BGSyMb1ZT5c"}]}
cf-ray: 9535de54de3f56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/js/flatsome.js
172.67.216.69200 OK 54 kB URL GET th778.help/static/js/flatsome.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (53668), with no line terminators
Hash a279d096c9e7510c9b95bc4784f90048
0acc589b74a6e9c99c4678f7d8e38a6359379934
7046618f6555847e4c8d7fb47584672aab889faf9ceebd6d871074da350615c9
GET /static/js/flatsome.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: application/javascript
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:37 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: "671fb435-d1a4"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9QxNrCqhveTItmchJwOzMP4HUdgpgm9bD5k03j8ZNA6a97dsSD5AUg2Hgpctwk%2Fb48kKDd18tDkKsyrRc%2BYX9tavwGm9xMLq"}]}
cf-ray: 9535de54ee5556bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/image/photo_2024-10-10_20-12-35-354x1024.jpg
172.67.216.69200 OK 106 kB URL GET th778.help/static/image/photo_2024-10-10_20-12-35-354x1024.jpg
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 354x1024, components 3
Size 106 kB (106234 bytes)
Hash 02876bf8ce45abafa5a5972f861db284
43f6274c80cceda5de57c6b3ab9b9b75ecede42d
ae130f188afdfa9d84f22256fa8b74bafe5fdedd2b5d82b8ffeee48e701fad8a
GET /static/image/photo_2024-10-10_20-12-35-354x1024.jpg HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: image/jpeg
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B1pu39IRlEa8kv1nt3DFhlg8YGmVC6UY%2BDeegypXYjpWoYpp4dH6HwbIp8sb8UmV%2FmH%2F87m46lVZFEP2nLt1O6QByEQdHjqhYgljYDsVUl08xVDXglCQFgDLicoq"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:46 GMT
vary: Accept-Encoding
etag: W/"671fb43e-19efa"
expires: Mon, 21 Jul 2025 19:21:21 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
cf-ray: 9535de56ab1156c6-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=510&min_rtt=0&rtt_var=300&sent=176&recv=169&lost=0&retrans=0&sent_bytes=91840&recv_bytes=11056&delivery_rate=5077805&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22428&unsent_bytes=0&cid=da3f6df993116bda&ts=548&inflight_dur=75&x=44"
GET th778.help/static/css/style.css
172.67.216.69200 OK 618 B URL GET th778.help/static/css/style.css
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
Hash 1c74556f53afd486f98a4b683f6480f0
71c4be4d77f8a20afc891ca45a0b942cebbd4f47
2efc8505f56fc39183c6f64fe78bb8aedf3312ec447d634d4ce0e557a18f652c
GET /static/css/style.css HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: text/css
content-encoding: br
last-modified: Mon, 28 Oct 2024 15:56:56 GMT
etag: W/"671fb448-26a"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qEhNFP7RfRYnJPkFhppMOrP99g0KTzLAlMLOCMEI0qH35tYd%2BD52lpp4CNxTqT%2BuaeLu%2F6J52bmmAh47P6IfnPc3WRX%2FF1MelEbpqzEB2bd0fGfhIRTCI%2BstQluS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9535de54ce2256bd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=623&min_rtt=397&rtt_var=94&sent=775&recv=239&lost=0&retrans=0&sent_bytes=1019151&recv_bytes=2694&delivery_rate=114886227&cwnd=244&unsent_bytes=0&cid=bac37870eb57b512&ts=444&x=0"
X-Firefox-Spdy: h2
GET th778.help/static/js/flatsome-live-search.js
172.67.216.69200 OK 16 kB URL GET th778.help/static/js/flatsome-live-search.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (13072)
Hash fe28432f39d383868c62b57694cca31d
9a4f0059402dc74350bf6451477903840b9553a5
4c1f3df3646c27bf2afe2e6ebe2a6fc0e3d3cc19bbebb265f205efd0e55f9136
GET /static/js/flatsome-live-search.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: application/javascript
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:37 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: "671fb435-3f6d"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=M4AYYf%2FE2yWSzYJZKP%2BML%2BtDr3O3noI9AxMIXvAUNgiIUgTfu%2F595FYorajeO7juofnoIrZEU5pbF%2BlDlt4fEXZqXFJ7527x"}]}
cf-ray: 9535de54de4c56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/js/chunk.popups.js
172.67.216.69200 OK 20 kB URL GET th778.help/static/js/chunk.popups.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (20041), with no line terminators
Hash bf993b0a8b61c90cdf9d6db0b74fdc1d
4d1c454f45a6549c50d7ce3eddcc3194d777ec10
f793c6524fb66bf6952e24951937d2519f9caa869f06548a0fd7fc677c719219
GET /static/js/chunk.popups.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:22 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EytP%2B%2FyoZ8A4UkXpLCEX5FOk%2Fm1RyJ%2Fi%2B14jioSD%2F9HmC1hFAZxJtmtTByiLMn7L1j4MAGY3KLIm1F4%2BQoJk%2FA%2FPKtJjDHSQXkrMVgD8yHXeTFoB6A4sxXa%2BT9%2BW"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:35 GMT
vary: Accept-Encoding
etag: "671fb433-4e49"
expires: Sun, 22 Jun 2025 07:21:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
cf-ray: 9535de581b2156c6-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1039&min_rtt=0&rtt_var=800&sent=330&recv=206&lost=0&retrans=0&sent_bytes=251779&recv_bytes=13660&delivery_rate=7934094&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22418&unsent_bytes=0&cid=da3f6df993116bda&ts=777&inflight_dur=148&x=44"
GET acemortgagebanking.com/
104.21.16.1301 Moved Permanently 7.3 kB IP 104.21.16.1:80
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sat, 21 Jun 2025 19:21:03 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 21 Jun 2025 20:21:03 GMT
Location: https://acemortgagebanking.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B2rx%2FTgJQ7Zb4Lrvif58RHkc1Js98RmWpIE350thoo4y%2BEETBJ2WGGRcwO6sXs0RT8YOSwy9nByPZwSQX6E5ma%2FdVQiEovx6Gf2Ot8jhtQwRpskpJYlx0HeRwFJtofaJ2YuKdW6lzCWn"}],"group":"cf-nel","max_age":604800}
Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
Cf-Ray: 9535dde63a2e56a3-OSL
alt-svc: h2=":443"; ma=60
Server-Timing: cfOrigin;dur=0,cfEdge;dur=26, cfL4;desc="?proto=TCP&rtt=450&min_rtt=450&rtt_var=225&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=407&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
GET th778.help/static/js/jquery-migrate.min.js
172.67.216.69200 OK 14 kB URL GET th778.help/static/js/jquery-migrate.min.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (13479)
Hash 9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /static/js/jquery-migrate.min.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: application/javascript
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:38 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: "671fb436-3509"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=b1juF5BhWseBwpxyjAw9eASdyFJye67bgTiWQwXpPqP62AGZTXxlD9Pm2eUvamn3C%2BeEYdYrYUaos2hK%2BawtcUCMcfan7gar"}]}
cf-ray: 9535de54de3056bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/js/hoverIntent.min.js
172.67.216.69200 OK 1.5 kB URL GET th778.help/static/js/hoverIntent.min.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (1464)
Hash 8c0498e2f1f7a684a8d2a3feb934b64b
76099689ccaee466d4608da621c403b368dcae03
ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40
GET /static/js/hoverIntent.min.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: application/javascript
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:38 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: "671fb436-5db"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9JBNCrgVAw%2BMYEdBNHFR%2BBWZjgkL2S4eQC7Iy9ovakUd3aoqAEALdpaNgv8oOS7Zcjrf93MhSBdhsFTYLdhIDxqfhYN9p0%2BR"}]}
cf-ray: 9535de54de5156bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/js/chunk.slider.js
172.67.216.69200 OK 50 kB URL GET th778.help/static/js/chunk.slider.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (49913), with no line terminators
Hash dc5736a54ea2f7d768700c849aeb2b3f
4c80335a09ea5134f7a0922b58c56a00a8d0db0d
bec887feaec684bbc55998c457617df16605234f032386cd8068ad2dc8964a5c
GET /static/js/chunk.slider.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:22 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KdCRHM5ngvr3OspIGgNxbnlfl9KyeSMUuRm4ZYRZDoeX9g2mTg8iU%2BJfZaBwnC4R3DzYWrxDJtjGUAGd9PRSXWES%2FZEUSs2F9%2B4aGALHGFGvkaCnZQKqEIyxqwI6"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:36 GMT
vary: Accept-Encoding
etag: "671fb434-c2f9"
expires: Sun, 22 Jun 2025 07:21:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
cf-ray: 9535de580b2056c6-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1214&min_rtt=0&rtt_var=1250&sent=316&recv=203&lost=0&retrans=0&sent_bytes=235059&recv_bytes=13516&delivery_rate=7934094&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22295&unsent_bytes=0&cid=da3f6df993116bda&ts=773&inflight_dur=142&x=44"
172.67.216.69200 OK 103 kB IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (324)
Size 103 kB (102733 bytes)
Hash d39a55e8824d3f9bd44d59feae9335e6
d250f6ec3b6089b169242a3821e2dd5711d695a9
b0316c7dd277d456a01519886243ac9fb75d2b721094cd0a06bf40a1d6de7cf2
GET / HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://acemortgagebanking.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: text/html
server: cloudflare
last-modified: Sun, 06 Apr 2025 14:58:19 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=D6FFuzilLyBGEv7H2BMX1SriCxfGyKO0saTYoQUWAo1oo0hiUZXsPNTSQPq88Wb2x%2F%2BHRSTQfmtNZRW92My5hjWoilW9ArK%2B"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9535de52eb2e56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/js/wp-emoji-release.min.js?ver=6.6.2
172.67.216.69200 OK 19 kB URL GET th778.help/static/js/wp-emoji-release.min.js?ver=6.6.2
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (15752)
Hash b976b651932bfd25b9ddb5b7693d88a7
7fcb7cb5c11227f9213b1e08a07d0212209e1432
4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /static/js/wp-emoji-release.min.js?ver=6.6.2 HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PdH6fAdyHYdt427zQK%2B9Z4xR3ddBxBl4Y6wIuL7QOdryRMCDuGT7wBUu6xGxk4QS9CiTCTS6soIf1I7ZeU5%2FVNEuvPliIajCK0WYDhEj843vFxqqmKAVBGX9rTU2"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:40 GMT
vary: Accept-Encoding
etag: "671fb438-4926"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
cf-ray: 9535de56bb1256c6-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=510&min_rtt=0&rtt_var=300&sent=171&recv=169&lost=0&retrans=0&sent_bytes=85840&recv_bytes=11056&delivery_rate=5077805&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22428&unsent_bytes=0&cid=da3f6df993116bda&ts=548&inflight_dur=75&x=44"
POST acemortgagebanking.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1968273671:1750530407:qanDPkQNBy7E9CGE9fD2tKuklBkgm9svbqltfNZY4Ug/9535dde66d755691/.4OCbkFzASRMnVVqTeGAfAttC7XY.Z0mKCg94kGo2rY-1750533663-1.2.1.1-3Yh0GrSoDuu3KSGUzrOkO2ohC2EreChm_eb6t7XMpeMP4aTuvctODxUTlTS0RWy.
104.21.16.1200 OK 20 kB URL POST acemortgagebanking.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1968273671:1750530407:qanDPkQNBy7E9CGE9fD2tKuklBkgm9svbqltfNZY4Ug/9535dde66d755691/.4OCbkFzASRMnVVqTeGAfAttC7XY.Z0mKCg94kGo2rY-1750533663-1.2.1.1-3Yh0GrSoDuu3KSGUzrOkO2ohC2EreChm_eb6t7XMpeMP4aTuvctODxUTlTS0RWy.
IP 104.21.16.1:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
File type ASCII text, with very long lines (19520), with no line terminators
Hash 7c27f64b62e42bd5fae32e6caebac513
ded77559310ab32ed5bf08bbbc1fae4f07df2b24
9831614f42c4c6b8f4c41e8ce0372bc9fe7f111ac9237550df74306e317f6c19
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1968273671:1750530407:qanDPkQNBy7E9CGE9fD2tKuklBkgm9svbqltfNZY4Ug/9535dde66d755691/.4OCbkFzASRMnVVqTeGAfAttC7XY.Z0mKCg94kGo2rY-1750533663-1.2.1.1-3Yh0GrSoDuu3KSGUzrOkO2ohC2EreChm_eb6t7XMpeMP4aTuvctODxUTlTS0RWy. HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acemortgagebanking.com/
cf-chl: .4OCbkFzASRMnVVqTeGAfAttC7XY.Z0mKCg94kGo2rY-1750533663-1.2.1.1-3Yh0GrSoDuu3KSGUzrOkO2ohC2EreChm_eb6t7XMpeMP4aTuvctODxUTlTS0RWy.
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 2156
Origin: https://acemortgagebanking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:04 GMT
content-type: text/plain; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BDOAhxmDHFCTUyFs7vIkjbtT%2FwmDXqa5BKryHoR6nnNm8MGGbAVdSZyMlSkQ351Dirb%2B%2FYG3qsUuEB%2F8DxhO9BpBY0Fao74xKN1oHmpLZXQYU0zFdRxQwpmaEA%2F4mBZIWaJ9itlPFi22"}],"group":"cf-nel","max_age":604800}
cf-chl-gen: rCoTzIvAR18HA3VUqIEAZPqFGHh46xn/cpDXVI5y/+U=$KIprmrjN2zR9Gv5x7Bb9jA==
content-encoding: br
cf-ray: 9535ddea1986712e-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3838&min_rtt=649&rtt_var=3378&sent=156&recv=203&lost=0&retrans=0&sent_bytes=11528&recv_bytes=14376&delivery_rate=359005&ss_exit_cwnd=14936&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=2cb83a4050c389bc&ts=766&inflight_dur=43&x=44"
POST acemortgagebanking.com/cdn-cgi/rum?
104.21.16.1204 No Content 0 B URL POST acemortgagebanking.com/cdn-cgi/rum?
IP 104.21.16.1:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1069
Origin: https://acemortgagebanking.com
DNT: 1
Connection: keep-alive
Referer: https://acemortgagebanking.com/
Cookie: cf_clearance=Jwxe4bgbzYkkwEnLScJ0Z0zq4F_Ac0c8RmPE4l9lZZc-1750533680-1.2.1.1-332BgathWqcwTUpdxoSuAEWkpF9txeY08TccO1C1V.rdVFwxtteIrnbQeDmjaRzu0a4kx53i9VtCdgpPzu634dlr7b2mv0VPxZvdqEFHD6B8MI1g5Z5GubbhrIsJfKGGFY0NH5HSjJHdlcSZELiSB6GyzYbdUIfcMSJX4.k8SSyY8SPOwJG1UzBnSIPQ9ggZQ.mxtfmmVI_YOGMUdyQHRkTYzWKK3wnD1qL56NALGfwvznr5Gtvj7ejIJEY9wF_rMUNWW8R0GlEs7wX99ykpo2WTzEpeRXQ_blctbWeIPN9GMti1YacZI.AQmPlpFDp8h6Dy58fyE_bLFrFsSe5r8ahszRwUPqcPKGecdJwMIKFmrGT1a3_nY5mgA24SnvCm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/3 204 No Content
date: Sat, 21 Jun 2025 19:21:21 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://acemortgagebanking.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 9535de546d23712e-OSL
x-frame-options: DENY
GET www.googletagmanager.com/gtag/js?id=G-6K13V3BFM7
142.250.178.72200 OK 399 kB URL GET www.googletagmanager.com/gtag/js?id=G-6K13V3BFM7
IP 142.250.178.72:443
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (6004)
Size 399 kB (398768 bytes)
Hash 0b9a36dd945a9ad1dc8d62257d1772ce
3d99099691c06b5dc1ca55380bbfbf98a873210d
fc69e786d6b68892c792ce1c9f023b97e8d9d80948f04ebfd5fc40ab9bafbc9e
GET /gtag/js?id=G-6K13V3BFM7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 21 Jun 2025 19:21:21 GMT
expires: Sat, 21 Jun 2025 19:21:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 132701
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET th778.help/static/image/cropped-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9E%E0%B8%B7%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%87%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B2-1-32x32.webp
172.67.216.69200 OK 1.0 kB URL GET th778.help/static/image/cropped-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9E%E0%B8%B7%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%87%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B2-1-32x32.webp
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type RIFF (little-endian) data, Web/P image
Hash fc4cf21aa3ad683a79572712667028c5
18bdf5766bbb90578d69895d711f852c04d232ed
bf93b603013942f31f81433aa483ce2d48f9aa529a0e96ff8ac07cababc5f207
GET /static/image/cropped-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9E%E0%B8%B7%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%87%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B2-1-32x32.webp HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Cookie: _ga_6K13V3BFM7=GS2.1.s1750533681$o1$g0$t1750533681$j60$l0$h0; _ga=GA1.1.1290900888.1750533682
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:22 GMT
content-type: image/webp
content-length: 1024
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BEBZeb%2Fyh7nWom97ufvYDZKxIcdJKq%2BLKPGd%2BM70t5mbtfjBJiC6dTvw3RyUYCaj5Gwsj6DVP86oeuYAVYc4iXHqgyXKE81fzd3226QBQets9iIwFgkDhKEJzjqA"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:45 GMT
etag: "671fb43d-400"
strict-transport-security: max-age=31536000
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 9535de58eb2856c6-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1012&min_rtt=0&rtt_var=448&sent=350&recv=212&lost=0&retrans=0&sent_bytes=270393&recv_bytes=14867&delivery_rate=7934094&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22418&unsent_bytes=0&cid=da3f6df993116bda&ts=916&inflight_dur=159&x=44"
GET acemortgagebanking.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9535dde66d755691
104.21.16.1200 OK 121 kB URL GET acemortgagebanking.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9535dde66d755691
IP 104.21.16.1:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 121 kB (120670 bytes)
Hash 4e700c13c7178cb07a81602e8ec99d42
749d95020ffa72e39459359d21aa95a7741c319d
548f1774d464f4747b1db1305374d3cac1741aebdc4ec56055e311ea081a2dc6
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9535dde66d755691 HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acemortgagebanking.com/?__cf_chl_rt_tk=B.4n7vRReQBoQh8B_kU2zontUcrIe9wX17I5JF8uC98-1750533663-1.0.1.1-y3CTqKQNm2syyJ19LDf4Gs4uVQNKx6MeQ_KZddviUu4
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:03 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fqMKgbNvxc4jez4%2BGOx%2BE%2F2jOJzAPbFuluB5G3aVYyjOSS%2FdTReP633ValuHBBnfcvm3xnEBqzOrIL4T6DQpy3JdScFk6r9%2B3KGK%2F0HiMCa9R0fjTzuR0j%2F3vOBNSkPAZoI3a2AXlTqN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9535dde75ea05691-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2097&min_rtt=416&rtt_var=2823&sent=18&recv=16&lost=0&retrans=0&sent_bytes=15619&recv_bytes=1599&delivery_rate=6332361&cwnd=256&unsent_bytes=0&cid=507725ad771d4d2d&ts=370&x=0"
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9535ddec2c7c56af&lang=auto
104.18.94.41200 OK 139 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9535ddec2c7c56af&lang=auto
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 139 kB (139265 bytes)
Hash 61a65bc1e15026f373bc4f9b394a9232
f4968ca18faa1ae83eb01cdc1852d58360414405
4bbd7af95e6261bbfb08922f76018821b81bc1e9facfe0a7f328b88ebfe822ac
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9535ddec2c7c56af&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:04 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=3,i=?0
server: cloudflare
cf-ray: 9535dded2d7756af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST acemortgagebanking.com/
104.21.16.1200 OK 3.0 kB IP 104.21.16.1:443
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1443)
Hash b810c0b940bb81dd6d938207e2b9c423
b1cd0ec98546a13bd7c7b3b62a3bc7ec3aa7b52f
a7f16a2f363f35f4d41548fc714df8d3696899c55e0ef693151e8c9241f3f394
POST / HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acemortgagebanking.com/?__cf_chl_tk=B.4n7vRReQBoQh8B_kU2zontUcrIe9wX17I5JF8uC98-1750533663-1.0.1.1-y3CTqKQNm2syyJ19LDf4Gs4uVQNKx6MeQ_KZddviUu4
Content-Type: application/x-www-form-urlencoded
Content-Length: 3757
Origin: https://acemortgagebanking.com
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=Jwxe4bgbzYkkwEnLScJ0Z0zq4F_Ac0c8RmPE4l9lZZc-1750533680-1.2.1.1-332BgathWqcwTUpdxoSuAEWkpF9txeY08TccO1C1V.rdVFwxtteIrnbQeDmjaRzu0a4kx53i9VtCdgpPzu634dlr7b2mv0VPxZvdqEFHD6B8MI1g5Z5GubbhrIsJfKGGFY0NH5HSjJHdlcSZELiSB6GyzYbdUIfcMSJX4.k8SSyY8SPOwJG1UzBnSIPQ9ggZQ.mxtfmmVI_YOGMUdyQHRkTYzWKK3wnD1qL56NALGfwvznr5Gtvj7ejIJEY9wF_rMUNWW8R0GlEs7wX99ykpo2WTzEpeRXQ_blctbWeIPN9GMti1YacZI.AQmPlpFDp8h6Dy58fyE_bLFrFsSe5r8ahszRwUPqcPKGecdJwMIKFmrGT1a3_nY5mgA24SnvCm
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:20 GMT
content-type: text/html; charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gbE%2FQzAPL17wXIDFqRxFkDjfYE%2B3jZycqqWEhjOM8PPYi4gPh7NCnBQwTkTIJStVetQLhHGP6iLSzcfW7LpHMQUU21NVs61jN3fggoohhb6bLzJdWnPOyrBCfUqHJDEj9piCRlcEcShX"}],"group":"cf-nel","max_age":604800}
server-timing: cfCacheStatus;desc="DYNAMIC", cfOrigin;dur=269,cfEdge;dur=12, cfL4;desc="?proto=QUIC&rtt=1770&min_rtt=0&rtt_var=1564&sent=187&recv=223&lost=0&retrans=0&sent_bytes=35184&recv_bytes=26493&delivery_rate=1715824&ss_exit_cwnd=14936&ss_exit_reason=2&cwnd=16064&unsent_bytes=0&cid=2cb83a4050c389bc&ts=17294&inflight_dur=108&x=44"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9535de4fbd03712e-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET th778.help/static/js/chunk.tooltips.js
172.67.216.69200 OK 40 kB URL GET th778.help/static/js/chunk.tooltips.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (39860), with no line terminators
Hash fd8b8521010d831c4d95db4467c6b89c
b366ddaf5aeeb83ad4209f27e4f96f8952823483
0a0a9c4251675f3abb5b43a00d186c997029ba504bdf710074746b46102ec8ba
GET /static/js/chunk.tooltips.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:22 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YcMIHWxR1C82bpeVLqQYXVxJyCzEZBip7oXehNns0yI5ZT6SAmPw%2FPniJzgFfIifNeRLn0sHH2f4D0gpdRB9JUmHVji0UmI4xPFyJFlHYQ6ZLQH6PidiXRz7r%2BD2"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:36 GMT
vary: Accept-Encoding
etag: "671fb434-9bb4"
expires: Sun, 22 Jun 2025 07:21:22 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
cf-ray: 9535de581b2256c6-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1301&min_rtt=0&rtt_var=1435&sent=305&recv=202&lost=0&retrans=0&sent_bytes=222386&recv_bytes=13467&delivery_rate=7934094&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22295&unsent_bytes=0&cid=da3f6df993116bda&ts=767&inflight_dur=140&x=44"
GET acemortgagebanking.com/favicon.ico
104.21.16.1200 OK 1.6 kB URL GET acemortgagebanking.com/favicon.ico
IP 104.21.16.1:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
File type HTML document, Unicode text, UTF-8 text
Hash a132033ec77eb31fb5227cb47b03c004
714f1307ef962c0fa2636b8552cfd69b73388f81
ba28fa6caed3c5c3f40a21c7226dba6ab7c1804d7a3592ca6ff97b040720867f
GET /favicon.ico HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acemortgagebanking.com/?__cf_chl_rt_tk=B.4n7vRReQBoQh8B_kU2zontUcrIe9wX17I5JF8uC98-1750533663-1.0.1.1-y3CTqKQNm2syyJ19LDf4Gs4uVQNKx6MeQ_KZddviUu4
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:04 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9HTLBw9fVhARegwuUMG7lspjvM4H1IP%2Bs%2Ba%2BOfm%2Fce%2F1kDQFd%2Fmvr9WGBifw3qIvfcGNdMj4mvkiIw5G2lxH42KACeN9M8FlcRGjqL1txc0HRfC7al%2BrBPpAPyB9NP8gTIy4ycXfvkbS"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
last-modified: Sat, 21 Jun 2025 19:21:04 GMT
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 9535dde98984712e-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2561&min_rtt=0&rtt_var=2544&sent=170&recv=208&lost=0&retrans=0&sent_bytes=27254&recv_bytes=14597&delivery_rate=1372658&ss_exit_cwnd=14936&ss_exit_reason=2&cwnd=16212&unsent_bytes=0&cid=2cb83a4050c389bc&ts=976&inflight_dur=59&x=44"
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
104.18.94.41200 OK 86 B URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced
Hash 70c202196187ab3c11b4e094c20c6de1
9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863
6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643
GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:04 GMT
content-type: image/png
content-length: 86
priority: u=4,i=?0
server: cloudflare
cf-ray: 9535ddecdd3856af-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST acemortgagebanking.com/cdn-cgi/rum?
104.21.16.1204 No Content 0 B URL POST acemortgagebanking.com/cdn-cgi/rum?
IP 104.21.16.1:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acemortgagebanking.com/
content-type: application/json
Content-Length: 1396
Origin: https://acemortgagebanking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Sat, 21 Jun 2025 19:21:04 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://acemortgagebanking.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 9535ddee19e1712e-OSL
x-frame-options: DENY
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
104.18.94.41200 OK 26 kB URL GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
IP 104.18.94.41:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type HTML document, ASCII text, with very long lines (26515), with no line terminators
Hash 48becf4f1bd9cb422499d45d1ba4a8f4
8e4605f4918cf15ffda3f26cfc2631aad10321c7
b3e02977ea57a9d93644f3fb3c5b23cec2c7b704b93d8808fec68d3e793c3fb9
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:04 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: default-src 'none'; script-src 'nonce-aEsRv9pMFruIak7n' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 9535ddec2c7c56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET th778.help/static/css/main.min.css
172.67.216.69200 OK 3.0 kB URL GET th778.help/static/css/main.min.css
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type ASCII text, with very long lines (3029), with no line terminators
Hash 828a9fe6e0d92027ef15bf1c6699f672
e8f7d3afeae0498bfd05e780129202111d32961a
5978d7eee4b0fb37c9409a3315f1ca722ebd7dfd476a42e9efa8cb016c076414
GET /static/css/main.min.css HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: text/css
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:56 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: "671fb448-bd5"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fLhwHbUIAbKtjjyFAITgqLhSs2aOhsoAIhUQcHUsMIulAsInUDSiGryZHu5rht4D%2Bo9nqCB9ke8xapK3FWkNQfCv6D7imiPo"}]}
cf-ray: 9535de54de4156bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/font/nKKU-Go6G5tXcr4-ORWzVaF5NQ.woff2
172.67.216.69200 OK 13 kB URL GET th778.help/static/font/nKKU-Go6G5tXcr4-ORWzVaF5NQ.woff2
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 13020, version 1.0
Hash cfec583a2e1436242508c9583eb8fd6e
c762659bc1329fec6f1adfcdcb1b1c3e1fde48c0
ccea96d4c9abf4b4c259cc0baca0ae097dfffc4fdcaeea7f7da743f7b5abf111
GET /static/font/nKKU-Go6G5tXcr4-ORWzVaF5NQ.woff2 HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://th778.help/static/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: font/woff2
content-length: 13020
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5t2F%2Fq3EZ1KXD9nBSqq8o%2FzRjyH%2Fhwe19ayrLxqIgjeCDmlSzvN7Dg%2BLYYvv6Gb7GrSvoD1NeDIWBWjK5p4U2cofl8PWawzrV6DUI25RVVwHv84TxwAdyu7nefVG"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:52 GMT
etag: "671fb444-32dc"
strict-transport-security: max-age=31536000
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9535de567b0c56c6-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2914&min_rtt=462&rtt_var=2102&sent=105&recv=145&lost=0&retrans=0&sent_bytes=8640&recv_bytes=9978&delivery_rate=568204&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=da3f6df993116bda&ts=518&inflight_dur=49&x=44"
GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
104.16.80.73200 OK 20 kB URL GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
IP 104.16.80.73:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
FingerprintEA:C7:0D:68:3A:45:CB:AD:C5:33:41:B6:DF:F1:60:64:E1:0F:52:6A
ValiditySun, 27 Apr 2025 18:18:02 GMT - Sat, 26 Jul 2025 19:17:55 GMT
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Hash ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://acemortgagebanking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:03 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 9535dde76bac7130-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET challenges.cloudflare.com/turnstile/v0/g/180b6a431d85/api.js?onload=ZJgv0&render=explicit
104.18.94.41200 OK 49 kB URL GET challenges.cloudflare.com/turnstile/v0/g/180b6a431d85/api.js?onload=ZJgv0&render=explicit
IP 104.18.94.41:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type JavaScript source, ASCII text, with very long lines (48827)
Hash 37dbac94aef1db73de816d49652909e2
324ec5206208c2c336cfd6f924c4e19b80cc5706
cad4395e83a0a0d66da04e657e32491d430580ce68aeb4bd59031b3e37ab9c99
GET /turnstile/v0/g/180b6a431d85/api.js?onload=ZJgv0&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://acemortgagebanking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:04 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 16 Jun 2025 16:33:10 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 9535dde838055690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1094521939:1750530369:E1AB0mkmyWMp6aLLeFgdAcKSXOJvhlWfNUGPfizmZfA/9535ddec2c7c56af/WGyzoe8qgOl0QMgKizA_LXegqEgZxaldgS6gXiDE3Zg-1750533664-1.2.1.1-pl1Nv2aLKYIsGWlGbQ2khGgenk3cBcnJcGnY9JLfgVoB955mOthFSiVJLZX7UM4w
104.18.94.41200 OK 296 kB URL POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1094521939:1750530369:E1AB0mkmyWMp6aLLeFgdAcKSXOJvhlWfNUGPfizmZfA/9535ddec2c7c56af/WGyzoe8qgOl0QMgKizA_LXegqEgZxaldgS6gXiDE3Zg-1750533664-1.2.1.1-pl1Nv2aLKYIsGWlGbQ2khGgenk3cBcnJcGnY9JLfgVoB955mOthFSiVJLZX7UM4w
IP 104.18.94.41:443
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
Certificate IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C
ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 296 kB (295916 bytes)
Hash 65854ad5c8f0039f28b520d0036ca950
5b21fd63e5a66a5888a572923e602b2dc3e59255
49f00cfeed6746fe19322749df742277187dec789e12aca6b5466c397fd1a298
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1094521939:1750530369:E1AB0mkmyWMp6aLLeFgdAcKSXOJvhlWfNUGPfizmZfA/9535ddec2c7c56af/WGyzoe8qgOl0QMgKizA_LXegqEgZxaldgS6gXiDE3Zg-1750533664-1.2.1.1-pl1Nv2aLKYIsGWlGbQ2khGgenk3cBcnJcGnY9JLfgVoB955mOthFSiVJLZX7UM4w HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/n8dtj/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/
cf-chl: WGyzoe8qgOl0QMgKizA_LXegqEgZxaldgS6gXiDE3Zg-1750533664-1.2.1.1-pl1Nv2aLKYIsGWlGbQ2khGgenk3cBcnJcGnY9JLfgVoB955mOthFSiVJLZX7UM4w
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 4300
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:05 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: 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$dH9oxOmdoqpVGyCboFrfYg==
priority: u=3,i=?0
server: cloudflare
cf-ray: 9535ddf079b156af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET th778.help/static/js/jquery.min.js
172.67.216.69200 OK 88 kB URL GET th778.help/static/js/jquery.min.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /static/js/jquery.min.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: application/javascript
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:39 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: "671fb437-15601"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=NTDXZHbDw%2BBa8gEV8R%2BlEvXFN5VDS2uT60M4my22WKTT2QX1rRlexP0RATAzlwEL2IgIqY5oXPP%2FiRXQBLvhTL%2BpAXXggLqG"}]}
cf-ray: 9535de54ce2a56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/js/main.min.js
172.67.216.69200 OK 3.7 kB URL GET th778.help/static/js/main.min.js
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type JavaScript source, ASCII text, with very long lines (3678), with no line terminators
Hash d5e3262f9f557bb91d6ffba0801707f6
2beed0a2c56d4511f7bbdcf07500e9d12f3342c8
995456f7211327129612b97dc0a2baa2288f1e3065d1d6ed1882a0eb89d6baac
GET /static/js/main.min.js HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: application/javascript
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:39 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: "671fb437-e5e"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=IyhaVIMBaJhvWcG2mZ1j8337nbXgEIy0Qb8ArYDF1fM8gnQf84P37qhN1aQosqQrus48voRg3ur3WyxRwuu1HG9ceF4W%2F8cb"}]}
cf-ray: 9535de54ee5856bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/image/cropped-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9E%E0%B8%B7%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%87%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B2-1-192x192.webp
172.67.216.69200 OK 8.8 kB URL GET th778.help/static/image/cropped-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9E%E0%B8%B7%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%87%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B2-1-192x192.webp
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type RIFF (little-endian) data, Web/P image
Hash 01d6b11104cb0d9ceaedd20e2cb6e462
bb0e940080d0b3c67e3d673a085bf28ef11a808b
d5eb0d555fb5af1c16dc27bb1e7d7284f6092ac0ad5b5b7c042a0f9375c6e83f
GET /static/image/cropped-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9E%E0%B8%B7%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%87%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B2-1-192x192.webp HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Cookie: _ga_6K13V3BFM7=GS2.1.s1750533681$o1$g0$t1750533681$j60$l0$h0; _ga=GA1.1.1290900888.1750533682
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:22 GMT
content-type: image/webp
content-length: 8806
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qle1F%2FvSdU25glIWFWSRSx0xDtSQQrcs2RBToSvFV0Dbc8DkRwUqkmn8WbdBLu9Q2yuP40a3%2FzaB%2FXxVTZsSHNuMnDKisymGcEctt3YnXSgUIMn7bkwaupqWsGdH"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:44 GMT
etag: "671fb43c-2266"
strict-transport-security: max-age=31536000
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9535de58eb2756c6-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=995&min_rtt=0&rtt_var=539&sent=341&recv=210&lost=0&retrans=0&sent_bytes=260688&recv_bytes=14777&delivery_rate=7934094&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=22418&unsent_bytes=0&cid=da3f6df993116bda&ts=853&inflight_dur=152&x=44"
GET acemortgagebanking.com/
104.21.16.1403 Forbidden 8.2 kB IP 104.21.16.1:443
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
File type HTML document, ASCII text, with very long lines (8170)
Hash e1e04a9dd33e09fa2e64385f81dc7205
b71b89de1aaded3e87f6d6fe5111963f08e9d4ad
04a745dcf74c81a1884dfd48ee3e712804e871a9414b8069e1cb698ca18ea14a
GET / HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sat, 21 Jun 2025 19:21:03 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dvQyK7TQ4WWcFxKB%2BLG%2BO35SewqnqSnHfMNuYXov4Qn9FqdbP2OvRqnFRIAMLHw6ioB3a%2BqMoe6LaysSEB92wGv8Zw5uw55EzEGbrqIJ13Eq3jhQiwKb79GHdOgGJCYgq6ZGYDkneeAb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9535dde54c185691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="9535dde54c185691", cfOrigin;dur=0,cfEdge;dur=17, cfL4;desc="?proto=TCP&rtt=584&min_rtt=416&rtt_var=329&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3304&recv_bytes=1265&delivery_rate=6332361&cwnd=253&unsent_bytes=0&cid=507725ad771d4d2d&ts=42&x=0"
X-Firefox-Spdy: h2
GET acemortgagebanking.com/favicon.ico
104.21.16.1200 OK 1.6 kB URL GET acemortgagebanking.com/favicon.ico
IP 104.21.16.1:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
File type HTML document, Unicode text, UTF-8 text
Hash a132033ec77eb31fb5227cb47b03c004
714f1307ef962c0fa2636b8552cfd69b73388f81
ba28fa6caed3c5c3f40a21c7226dba6ab7c1804d7a3592ca6ff97b040720867f
GET /favicon.ico HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acemortgagebanking.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:04 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LHdGxqTO5%2FZfQdtLlJgX7vuxf19CP1WyoA5LPGsVh5hmht7yAmlt%2BRkNT6HXLqnMyDBfeHeP09PAdUq2l8F70WwZfOcpvWfjeVZxAjAOS8uTGL%2BFB3KWwo5sXsxvxlxxayDtalaMocWi"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
last-modified: Sat, 21 Jun 2025 19:21:04 GMT
cache-control: max-age=14400
cf-cache-status: EXPIRED
content-encoding: br
cf-ray: 9535dde80977712e-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2422&min_rtt=0&rtt_var=2186&sent=172&recv=209&lost=0&retrans=0&sent_bytes=28622&recv_bytes=14641&delivery_rate=1372658&ss_exit_cwnd=14936&ss_exit_reason=2&cwnd=16212&unsent_bytes=0&cid=2cb83a4050c389bc&ts=980&inflight_dur=61&x=44"
GET th778.help/static/css/flatsome.css
172.67.216.69200 OK 152 kB URL GET th778.help/static/css/flatsome.css
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 152 kB (151688 bytes)
Hash ecf12fa766dd11cc2b739d07377fc413
f0a42559ce7601780ee150ae83cb2a1fdf458c00
adf830f4172062064055beddde901b84bdf36580b7302b0ee8e20b6a5635f83d
GET /static/css/flatsome.css HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: text/css
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:55 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: "671fb447-25088"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=TlWoz4Tds1EDYlPvlLDATg5iAn6LvIrBWkB24jv8k3sVQFeFdJmpVRKU%2FhqcYBx2i%2FotHtxZgCEv%2Bikp0h%2BK9PaR1rJgfTA5"}]}
cf-ray: 9535de54ce2056bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET acemortgagebanking.com/
104.21.16.1403 Forbidden 7.3 kB IP 104.21.16.1:443
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
File type HTML document, ASCII text, with very long lines (7252)
Hash b3e54b0774ab8caf7ceea92131292478
a802e0f37a1e8dbbc0cd176b0a0d4e51d470f8f7
65549746d9d8da5cde24459d8829625ff53ebbaea535befe37d35a6ed6c29feb
GET / HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sat, 21 Jun 2025 19:21:03 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ULP22RFvabODJZhd9Ncras5qZgfObOtQmbO3H5mdWHN7ZpP4zBBxFhZne%2BO36b2ZeyEa1HXLpZeX%2Bx5UOihwc0ChyfK77pON%2FrKu%2B9w%2FbSt8okxXB37Dl35bU79u%2BLZGI6NHL1ouYuNo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9535dde66d755691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="9535dde66d755691", cfOrigin;dur=0,cfEdge;dur=7, cfL4;desc="?proto=TCP&rtt=2476&min_rtt=416&rtt_var=3818&sent=13&recv=13&lost=0&retrans=0&sent_bytes=10376&recv_bytes=1332&delivery_rate=6332361&cwnd=256&unsent_bytes=0&cid=507725ad771d4d2d&ts=217&x=0"
X-Firefox-Spdy: h2
GET th778.help/static/picture/gif2-640-77.gif
172.67.216.69200 OK 287 kB URL GET th778.help/static/picture/gif2-640-77.gif
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type GIF image data, version 89a, 640 x 77
Size 287 kB (286842 bytes)
Hash 0affe6dda50a56b0f463f1b6b04920d2
781d9d5d798ab53e4d6ba43178df6a8f5c8520da
4550321285c8aaff7680ad73ff82a830b3ba17202e29630fc95147878d26ba0d
GET /static/picture/gif2-640-77.gif HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: image/gif
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:33 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"671fb431-4607a"
expires: Wed, 16 Jul 2025 12:28:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: gzip
age: 456759
cf-cache-status: HIT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cgR%2BhCprDRv1ksWduQ4dUia2AmKZkSNy9yD8%2FcBk7U2tCruvA2HHFu3QHr24LNWn%2BVDpVH8DPNZblyPDBBPjrO5PvdLHDOJW"}]}
cf-ray: 9535de54de3b56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/font/nKKZ-Go6G5tXcraBGwCYdA.woff2
172.67.216.69200 OK 13 kB URL GET th778.help/static/font/nKKZ-Go6G5tXcraBGwCYdA.woff2
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 13260, version 1.0
Hash 7a372a426958cc1b540518973c9fe88c
e6016f4b53ea42ba7ea25ad217f44c4edd30ef93
d03834de65cdb3ea45008ab88ba319d2fe3b47c26e145a79347043e18e36e7af
GET /static/font/nKKZ-Go6G5tXcraBGwCYdA.woff2 HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://th778.help/static/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: font/woff2
content-length: 13260
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JfzW5bEjoS9fXZwSgNJ88e0wO189LOB2bJuDBEOUDgDNjBdbieQ17iqB2tO2G71X2rfOul4i6HIT31gMqB6dJ2oHYX7acPGHkqKhee7x13CxXhdXDganEd4FvU5d"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:53 GMT
etag: "671fb445-33cc"
strict-transport-security: max-age=31536000
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 9535de568b0e56c6-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=737&min_rtt=0&rtt_var=780&sent=144&recv=159&lost=0&retrans=0&sent_bytes=54462&recv_bytes=10603&delivery_rate=3034295&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=14745&unsent_bytes=0&cid=da3f6df993116bda&ts=539&inflight_dur=65&x=44"
GET th778.help/static/css/css.css
172.67.216.69200 OK 2.8 kB URL GET th778.help/static/css/css.css
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
Hash 68e79d300a36cbd5ac23004d3a0c979c
3454fd4b3a545bea8cf80fde30a1f07dcba570bf
ad059b72aed39ae2827699dbff7c7ad4991364fec260c8689da7bd5610e93550
GET /static/css/css.css HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: text/css
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:55 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: "671fb447-ad2"
expires: Sun, 22 Jun 2025 07:21:21 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Z2oOadhTnTnR%2Be1c%2Fh1Qv1Hd0Xp8MJWTbcC8%2FQ%2FEWg83jlbFZondfds1kZJOo%2FZ9qhbBhPPfPDFt0L5%2BnmLLWPSYiDPkONpq"}]}
cf-ray: 9535de54ce2656bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/picture/%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9E%E0%B8%B7%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%87%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B2-1-1024x1024.webp
172.67.216.69200 OK 71 kB URL GET th778.help/static/picture/%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9E%E0%B8%B7%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%87%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B2-1-1024x1024.webp
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type RIFF (little-endian) data, Web/P image
Hash 522f8cd6ae8a8e42425b8f9a87583da0
75322d1ab8bcefd2fdab595c691a72faec812c19
150ff1ee7f3662df1f74d2551b11cf1a317742fe9fe4b085236e56dcfcbe91f6
GET /static/picture/%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9E%E0%B8%B7%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%87%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B2-1-1024x1024.webp HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: image/webp
content-length: 71302
server: cloudflare
last-modified: Mon, 28 Oct 2024 15:56:35 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: "671fb433-11686"
strict-transport-security: max-age=31536000
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZP58ukecm%2FI46aubb8GPy9rcV0b6kjWfV%2F42BNwuuCsI5zMyDdQjfuVLdItsQlJZ9VCdez21e4Z%2Bf%2F%2BUqOryZWFdEVxUzYZ4"}]}
cf-ray: 9535de54de3956bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET th778.help/static/font/nKKZ-Go6G5tXcraVGwA.woff2
172.67.216.69200 OK 19 kB URL GET th778.help/static/font/nKKZ-Go6G5tXcraVGwA.woff2
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 19388, version 1.0
Hash f816f16f297c801aaf01ff43c9fcd563
2e9e2c80bc5aa5f01f75cd486baa1769f53dea5e
ae7b918efe7cd287651e014ed269c923e1a925c8eee1a474ad11184f04659d3e
GET /static/font/nKKZ-Go6G5tXcraVGwA.woff2 HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://th778.help/static/css/css.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: font/woff2
content-length: 19388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7umapeLR8cP4mvga6ynJJwy0VIQ7YXJTUg1BS9xmwVUjHpLBFsjBKTctwn7uE%2F3JhJOR3pQK2wh%2Fq29hZHn8z9C5ONfqOZuhmMCMuBfdbo%2BdH4vOjlbIh6uGfjFP"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:54 GMT
etag: "671fb446-4bbc"
strict-transport-security: max-age=31536000
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 9535de568b0d56c6-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2914&min_rtt=462&rtt_var=2102&sent=108&recv=145&lost=0&retrans=0&sent_bytes=12240&recv_bytes=9978&delivery_rate=568204&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=da3f6df993116bda&ts=519&inflight_dur=49&x=44"
POST acemortgagebanking.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1968273671:1750530407:qanDPkQNBy7E9CGE9fD2tKuklBkgm9svbqltfNZY4Ug/9535dde66d755691/.4OCbkFzASRMnVVqTeGAfAttC7XY.Z0mKCg94kGo2rY-1750533663-1.2.1.1-3Yh0GrSoDuu3KSGUzrOkO2ohC2EreChm_eb6t7XMpeMP4aTuvctODxUTlTS0RWy.
104.21.16.1200 OK 4.2 kB URL POST acemortgagebanking.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1968273671:1750530407:qanDPkQNBy7E9CGE9fD2tKuklBkgm9svbqltfNZY4Ug/9535dde66d755691/.4OCbkFzASRMnVVqTeGAfAttC7XY.Z0mKCg94kGo2rY-1750533663-1.2.1.1-3Yh0GrSoDuu3KSGUzrOkO2ohC2EreChm_eb6t7XMpeMP4aTuvctODxUTlTS0RWy.
IP 104.21.16.1:443
Requested by https://acemortgagebanking.com/
Certificate IssuerGoogle Trust Services
Subjectacemortgagebanking.com
FingerprintAB:7E:AD:BE:7C:8F:1E:D9:82:6E:AD:CA:38:7F:43:47:77:6F:BD:70
ValidityMon, 12 May 2025 18:23:21 GMT - Sun, 10 Aug 2025 19:22:04 GMT
File type ASCII text, with very long lines (4168), with no line terminators
Hash a2547324cceb5f509252c52628e1f9b9
5ebad3c908dbde2f44c243f2e730ffee63e992a4
1021f94ec29116455f1434ebb1c69f7822f38c0d5229dc279d6150b2070eaa9a
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1968273671:1750530407:qanDPkQNBy7E9CGE9fD2tKuklBkgm9svbqltfNZY4Ug/9535dde66d755691/.4OCbkFzASRMnVVqTeGAfAttC7XY.Z0mKCg94kGo2rY-1750533663-1.2.1.1-3Yh0GrSoDuu3KSGUzrOkO2ohC2EreChm_eb6t7XMpeMP4aTuvctODxUTlTS0RWy. HTTP/1.1
Host: acemortgagebanking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://acemortgagebanking.com/
cf-chl: .4OCbkFzASRMnVVqTeGAfAttC7XY.Z0mKCg94kGo2rY-1750533663-1.2.1.1-3Yh0GrSoDuu3KSGUzrOkO2ohC2EreChm_eb6t7XMpeMP4aTuvctODxUTlTS0RWy.
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 4482
Origin: https://acemortgagebanking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:20 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zDVxc3imt3zc2C7twUoWU8l853kpkIBVerHXf8X719ygfDJ1P2HzvVYY5BXtm%2FFUDt8Xz0bJJeeVjVPTazL0McyLNhQr73IyYdtmNl27BZtbrro1v1jJDioD%2FxyeyJs40pqEnZSZqx2F"}],"group":"cf-nel","max_age":604800}
set-cookie: cf_clearance=Jwxe4bgbzYkkwEnLScJ0Z0zq4F_Ac0c8RmPE4l9lZZc-1750533680-1.2.1.1-332BgathWqcwTUpdxoSuAEWkpF9txeY08TccO1C1V.rdVFwxtteIrnbQeDmjaRzu0a4kx53i9VtCdgpPzu634dlr7b2mv0VPxZvdqEFHD6B8MI1g5Z5GubbhrIsJfKGGFY0NH5HSjJHdlcSZELiSB6GyzYbdUIfcMSJX4.k8SSyY8SPOwJG1UzBnSIPQ9ggZQ.mxtfmmVI_YOGMUdyQHRkTYzWKK3wnD1qL56NALGfwvznr5Gtvj7ejIJEY9wF_rMUNWW8R0GlEs7wX99ykpo2WTzEpeRXQ_blctbWeIPN9GMti1YacZI.AQmPlpFDp8h6Dy58fyE_bLFrFsSe5r8ahszRwUPqcPKGecdJwMIKFmrGT1a3_nY5mgA24SnvCm; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=acemortgagebanking.com; Expires=Sun, 21 Jun 2026 19:21:20 GMT
cf-chl-out: 3bivYgW5wJ8PewBIK3yjtZfkS+YGWvN1GXshnKIayt54yxyXMI+uXMII9gm+9OH8VnrWBiiqyrMGWMiDqnYgGg==$D8am9SnQJZ9I5pC/H2hkVQ==
cf-chl-out-s: IKjtVXS8Un0N1DjpScKajYT3pOO5KPU4qlKuMlV1dtgBsuw54DbI12XNdVQ06wXfFrx5AeE3ALv5bU6+1K4bw9jNA99kemgq9fA0Ttge6TkRMX1h5qCpoYbH8w1ln60ISEHXK6vvvt+n0ueBk/+4HGS2SqyTYWF5i0DUVR8ta0NkAhWImkTZ6LLzRV4zcYthvVSrJ7xh5rCxYj3vsFP7dLaAij+VbKL7dDEeAdvAGY7NQQgDFCEwmsFamucyKMxYtEpr4frFSqNIkjcJjmd1kRt8E6yiBUQpez1rHNb07dAgnZPlsrTScO4He8ws3gezvx6nxf3p3oEuvYKWt55vzkq5IGFQVFhq4nuZBMucsJE1GqxZeuqs4U+lbwl7/OAiMZ6ftNif0n/x8K/+QMTD9S37MqGqX2k6TjA5TNllsote1lT6jTfIrcreSGKx6SBZ$I+Hhcbu6/7izW1BMmjU0dQ==
content-encoding: br
cf-ray: 9535de4eacf2712e-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2140&min_rtt=0&rtt_var=1666&sent=180&recv=217&lost=0&retrans=0&sent_bytes=30290&recv_bytes=21677&delivery_rate=1372658&ss_exit_cwnd=14936&ss_exit_reason=2&cwnd=16212&unsent_bytes=0&cid=2cb83a4050c389bc&ts=16940&inflight_dur=85&x=44"
GET th778.help/static/picture/slotnew.gif
172.67.216.69200 OK 287 kB URL GET th778.help/static/picture/slotnew.gif
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type GIF image data, version 89a, 728 x 200
Size 287 kB (287078 bytes)
Hash e9bd5b815d98f79d532069165f3c516e
7b37aca2b08de94976fd58c0144420505e68bd8d
ab7985b850d0d8c6d5b3d082b4e6208b10e3c4f208bd211c47e99c7b7b8a898f
GET /static/picture/slotnew.gif HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: image/gif
cf-ray: 9535de54de3c56bd-OSL
last-modified: Mon, 28 Oct 2024 15:56:34 GMT
vary: Accept-Encoding
etag: W/"671fb432-46166"
expires: Mon, 14 Jul 2025 13:06:18 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: gzip
age: 627302
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hkjPuzo6tpEDnqu4rRKWT7fbzUVI26%2BIHJ%2BzbpZfxjEjMjwQ0kl0NtN2%2Bs8bYDEojCPJ4b0ky7SkMRuQAj3MlPVDbRy7XShgQEDAFEhNPpqJwVOPr87C43rZvnpM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=571&min_rtt=397&rtt_var=64&sent=318&recv=115&lost=0&retrans=0&sent_bytes=410201&recv_bytes=2694&delivery_rate=26905405&cwnd=210&unsent_bytes=19342&cid=bac37870eb57b512&ts=348&x=0"
X-Firefox-Spdy: h2
GET th778.help/static/font/fl-icons.woff2
172.67.216.69200 OK 7.2 kB URL GET th778.help/static/font/fl-icons.woff2
IP 172.67.216.69:443
Certificate IssuerGoogle Trust Services
Subjectth778.help
FingerprintF3:3C:F5:4E:27:D7:29:3D:45:4A:96:C0:21:0E:EA:D3:30:84:6F:CB
ValidityThu, 15 May 2025 13:14:12 GMT - Wed, 13 Aug 2025 14:11:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 7244, version 1.0
Hash 239a062dc84e13d3bf0264055163f5b8
df819f2954a4738a6bf7adfc692e16cc09d15ef2
bc425300c8a8a921a3d481e8b2395ef3c6cac4333b7326ceb1f5963fa6102b77
GET /static/font/fl-icons.woff2 HTTP/1.1
Host: th778.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://th778.help/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 19:21:21 GMT
content-type: font/woff2
content-length: 7244
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u51MTvIQlypZiTgjFpf%2FbltEx%2FLF1mu9GUZVPoeGH8TCTEsPXJcYW1ClerBBOvLPuQPheyw4X4m8RqiSz32QPUTfRKB9AebjGyoK5phUWz7d7OcpK%2FTLG49lIvF6"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 28 Oct 2024 15:56:50 GMT
etag: "671fb442-1c4c"
strict-transport-security: max-age=31536000
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 9535de56ab0f56c6-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1675&min_rtt=0&rtt_var=1990&sent=120&recv=150&lost=0&retrans=0&sent_bytes=25922&recv_bytes=10198&delivery_rate=1649728&ss_exit_cwnd=14903&ss_exit_reason=2&cwnd=16207&unsent_bytes=0&cid=da3f6df993116bda&ts=527&inflight_dur=55&x=44"