Overview

URLemail.mail.usbfund.com/c/eJxNUdtuwyAM_ZrkjYoACe0DD5Om_kZkwKTRIERcFvXvR9duqoRk7CPrXIxqmCSlgjJ66a3SVE6DM30uMeGc0Klh4IL3NyUHdHK0iJMRk5XDxRmO1Dhq5ZmykfUlgfkC7XEu9x1Vx5iBsMO6bO3be3UrZc8d_-jYtb3jOE41a1c3ezIxtMmChQDJAbwnuuZ1w5yJj7A9Fvi1ljDnWJPBjn9quOO2wIIdmx5AQLvW0IA_SoIBVv9C_3W0RcyFaB-XTEokLnofDwI61kIM5Btxre8YfzOz2paQoLJfFaOMDYzylhZn42niVo-GCeROCsOnTtAH6butPimdcCtHwyAdTXOzhSn_YkWVrczPfIsyQc-v8g1pfnI-z1BrE9FCtOC4hbMGELq1PzgjkPU
IP 34.86.85.56 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-03 04:04:06 UTC
StatusLoading report..
IDS alerts0
Blocklist alert8
urlquery alerts No alerts detected
Tags None

Domain Summary (88)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
assets.anytrack.io (1) 73313 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 369 587 143.204.55.90
ocsp.sca1b.amazontrust.com (13) 1015 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4550 12771 54.230.245.39
shield.sitelock.com (1) 65503 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 394 11126 45.60.14.54
js.hsforms.net (1) 7264 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 361 153686 104.17.186.73
prism.app-us1.com (1) 8479 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 551 910 104.17.145.91
serve.albacross.com (1) 64177 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 363 4617 143.204.55.30
manager.eu.smartlook.cloud (1) 16883 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 480 731 52.58.230.158
www.usbfund.com (33) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 25719 1147436 50.87.170.174
sync.search.spotxchange.com (2) 523 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 942 1241 185.94.180.126
track.hubspot.com (1) 2528 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 970 1197 104.19.155.83
forms.hsforms.com (1) 5160 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 574 1095 104.16.89.5
ocsp.godaddy.com (2) 698 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 680 4571 192.124.249.24
web-writer.eu.smartlook.cloud (1) 115137 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 611 441 3.67.121.103
www.googletagmanager.com (2) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 766 100230 172.217.21.168
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5856 34.160.144.191
js.hs-scripts.com (2) 2571 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 760 1991 104.17.210.204
diffuser-cdn.app-us1.com (1) 8451 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 380 19668 104.17.145.91
sc.cdnma.com (1) 84971 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 369 9016 143.204.55.114
cm.g.doubleclick.net (2) 202 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 871 2027 142.250.74.130
speedyfox.io (1) 268478 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 599 253 23.253.207.75
stags.bluekai.com (1) 471 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 420 598 184.24.45.23
email.mail.usbfund.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 755 1075 34.86.85.56
simplifi.partners.tremorhub.com (1) 7073 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 430 201 54.197.48.148
ce.lijit.com (1) 812 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 418 309 216.52.2.19
ocsp.usertrust.com (1) 899 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 342 1015 172.64.155.188
d.agkn.com (1) 524 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 480 565 3.248.85.122
id.rlcdn.com (1) 618 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 379 192 35.244.174.68
region1.google-analytics.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 880 562 216.239.32.36
process.iconnode.com (1) 63404 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 479 377 13.248.238.122
www.linkedin.com (1) 608 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 722 2697 13.107.42.14
um.simpli.fi (21) 744 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 8169 20259 35.204.158.49
sync.intentiq.com (1) 1476 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 484 1329 143.204.55.22
googleads.g.doubleclick.net (1) 42 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 604 1150 142.250.74.162
us-u.openx.net (1) 357 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 429 406 34.98.64.218
ocsp.globalsign.com (2) 2075 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 718 3973 151.101.2.133
sendlane.com (1) 82414 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 362 16983 104.16.167.6
fonts.gstatic.com (6) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2954 100146 216.58.207.227
beacon.cdnma.com (1) 72077 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 856 644 54.166.158.215
511-lvj-854.mktoresp.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 767 119 199.15.214.243
bcp.crwdcntrl.net (1) 699 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 430 366 52.17.7.52
ocsp.digicert.com (25) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 8525 16757 93.184.220.29
aorta.clickagy.com (2) 2306 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 787 1348 54.156.212.180
www.checkbca.org (34) 541438 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 16519 150398 207.137.0.213
www.google-analytics.com (2) 40 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1534 21319 142.250.74.110
koi-3qnetrwct6.marketingautomation.services (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 401 400 130.211.21.179
aa.agkn.com (1) 431 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 441 736 35.157.204.17
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
snap.licdn.com (1) 1044 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 381 4887 95.101.11.57
status.geotrust.com (3) 3662 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1029 2328 93.184.220.29
eb2.3lift.com (1) 402 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 432 206 76.223.111.18
sync.bfmio.com (1) 1205 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 420 314 54.161.113.85
ws.zoominfo.com (1) 8735 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 381 953 104.16.168.82
tag.getdrip.com (1) 20100 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 361 491 143.204.55.93
new-collect.albacross.com (3) 53310 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2751 462 52.18.163.224
track.sendlane.com (1) 270591 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 586 722 23.250.2.183
ocsp.pki.goog (21) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 7203 14697 142.250.74.131
js.hs-banner.com (1) 2426 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 362 21157 172.64.154.85
loadm.exelator.com (1) 1042 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 436 385 34.254.143.3
omnisrc.com (1) 48023 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 368 527 104.18.24.198
code.jquery.com (1) 634 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 374 6239 69.16.175.10
i.simpli.fi (1) 3482 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 395 1153 169.50.137.179
px.ads.linkedin.com (2) 522 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1220 2407 13.107.42.14
scripts.iconnode.com (1) 40696 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 365 8224 54.230.111.62
pixel.rubiconproject.com (1) 314 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 453 237 213.19.162.90
fonts.googleapis.com (3) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1226 2238 142.250.74.106
r3.o.lencr.org (6) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2028 5319 23.33.119.27
rec.smartlook.com (3) 17636 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1210 16386 185.76.9.19
www.google.no (1) 25607 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 622 757 142.250.74.67
js.hs-analytics.net (1) 2411 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 389 623 104.17.67.176
widget.trustpilot.com (1) 6018 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 396 6796 143.204.55.101
tag.simpli.fi (1) 5216 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 393 4149 169.50.137.179
ajax.googleapis.com (1) 12905 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 391 30825 142.250.74.42
ocsp.sectigo.com (4) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1360 3852 172.64.155.188
trackcmp.net (1) 8111 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 609 452 172.64.145.151
hemsync.clickagy.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 425 378 52.200.196.186
www.googleadservices.com (1) 107 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 502 955 172.217.21.162
fei.pro-market.net (2) 2658 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 896 1387 107.178.240.89
www.google.com (1) 7 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 624 1046 216.58.211.4
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 44.240.159.184
d.impactradius-event.com (1) 2612 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 399 13709 35.186.249.72
img-getpocket.cdn.mozilla.net (7) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3829 63023 34.120.237.76
forms.soundestlink.com (1) 16969 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 509 30569 104.18.30.243
munchkin.marketo.net (1) 3550 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 367 1239 88.221.99.189
pixel-sync.sitescout.com (1) 593 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 505 16107 66.155.71.150
cdn.linkedin.oribi.io (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 978 919 54.230.111.42
ib.adnxs.com (2) 241 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 864 1787 185.89.210.212
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
pixel.tapad.com (2) 400 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 932 1940 35.227.248.159

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-03 medium email.mail.usbfund.com/c/eJxNUdtuwyAM_ZrkjYoACe0DD5Om_kZkwKTRIERcFvXvR9duqo (...) Malware
2022-12-03 medium www.usbfund.com/wp-content/plugins/AffiliateWP-master/assets/js/tracking.mi (...) Malware
2022-12-03 medium www.usbfund.com/wp-content/themes/usb/js/accounting.min.js Malware
2022-12-03 medium www.usbfund.com/wp-content/themes/usb/js/site.js Malware
2022-12-03 medium www.usbfund.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 Malware
2022-12-03 medium www.usbfund.com/fonts/socicon.woff Malware
2022-12-03 medium www.usbfund.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 Malware
2022-12-03 medium www.usbfund.com/wp-content/themes/usb/js/plugins.js Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 34.86.85.56
Date UQ / IDS / BL URL IP
2023-02-25 15:29:48 UTC 0 - 0 - 1 email.us.cupid-selections.com/c/eJxtkM1uwyAQh (...) 34.86.85.56
2023-02-25 14:34:29 UTC 0 - 0 - 3 email.daytranslations.com/c/eJxtjTsSwiAUAE8DZ (...) 34.86.85.56
2023-02-23 20:52:01 UTC 0 - 0 - 19 email.travelsbroker.com/c/eJxljssKwjAURL-m2Vn (...) 34.86.85.56
2023-02-23 19:41:27 UTC 0 - 0 - 1 email.mail.usbfund.com/c/eJxNUMtOwzAQ_Jr4GNlr (...) 34.86.85.56
2023-02-23 05:29:43 UTC 0 - 2 - 0 email.send.fixmycurls.com/c/eJxVz0tqxDAQBNDT2 (...) 34.86.85.56


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-06-02 11:20:29 UTC 0 - 0 - 1 robloxcounterbloxcodes2019july.blogspot.hk/ 172.217.21.161
2023-06-02 11:18:25 UTC 3 - 0 - 0 www.filesusr.com/html/fa043a_5931a9ca3168c054 (...) 34.102.176.152
2023-06-02 11:12:46 UTC 3 - 0 - 2 ls256354125478598522xs25632884.filesusr.com/h (...) 34.102.176.152
2023-06-02 11:02:33 UTC 0 - 3 - 0 videoxnxxvlxxfdsa.blogspot.com.ng/ 172.217.21.161
2023-06-02 11:02:24 UTC 0 - 0 - 3 5fgfgffg4g4gh4g4.blogspot.co.id/ 172.217.21.161


Last 5 reports on domain: usbfund.com
Date UQ / IDS / BL URL IP
2023-05-26 17:42:27 UTC 0 - 0 - 11 email.mail.usbfund.com/c/eJxcjsuu2yAQQL8G7xKZ (...) 34.102.239.211
2023-05-26 17:23:28 UTC 0 - 0 - 12 email.mail.usbfund.com/c/eJxMjsuO4yAQRb8G7xJB (...) 34.102.239.211
2023-05-26 17:23:20 UTC 0 - 0 - 1 email.mail.usbfund.com/c/eJw8j8uKGzEQRb-mehcj (...) 34.102.239.211
2023-05-26 16:37:14 UTC 0 - 0 - 1 email.mail.usbfund.com/c/eJxcj0GL1TAUhX9NuizN (...) 34.110.180.34
2023-05-26 16:13:30 UTC 0 - 0 - 12 email.mail.usbfund.com/c/eJxMjk2O4yAQRk-Dd4mg (...) 34.102.239.211


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-31 22:20:15 UTC 0 - 0 - 1 email.mail.usbfund.com/c/eJxcjt1u8yAMQJ8G7lqB (...) 34.110.180.34
2023-03-31 19:27:09 UTC 0 - 0 - 1 email.mail.usbfund.com/c/eJxcjsuu4yAMQL-G7FqB (...) 34.110.180.34
2023-03-29 20:46:10 UTC 0 - 0 - 1 email.mail.usbfund.com/c/eJxMjs3q4yAUR5_G7Fr0 (...) 34.102.239.211
2023-03-24 20:22:59 UTC 0 - 0 - 1 email.mail.usbfund.com/c/eJxNkMuKwzAMRb8m3rXY (...) 34.102.239.211
2023-03-23 19:13:25 UTC 0 - 0 - 1 email.mail.usbfund.com/c/eJxcjsuu4yAMQL-G7Fph (...) 34.102.239.211

JavaScript

Executed Scripts (87)

Executed Evals (3)
#1 JavaScript::Eval (size: 311) - SHA256: 83b34ed574c9630f2d800fa605bcc5d84e287907f47456c7bd1be0deabd38901
(function() {
    var a = new Date,
        d = -a.getTimezoneOffset(),
        e = 0 <= d ? "+" : "-",
        b = function(c) {
            c = Math.abs(Math.floor(c));
            return (10 > c ? "0" : "") + c
        };
    return a.getFullYear() + "-" + b(a.getMonth() + 1) + "-" + b(a.getDate()) + "T" + b(a.getHours()) + ":" + b(a.getMinutes()) + ":" + b(a.getSeconds()) + "." + b(a.getMilliseconds()) + e + b(d / 60) + ":" + b(d % 60)
})();
#2 JavaScript::Eval (size: 618) - SHA256: f9a86e5f4e4fa64ebc8b4d07c63565ebd86c6f37b904d41386a202915afcb249
(function() {
    var f = 17,
        g = 14,
        h = 13;
    return function(a) {
        var d, b, e;
        "number" === typeof f && a.set("dimension" + f, a.get("clientId"));
        "number" === typeof g && a.set("dimension" + g, a.get("hitType"));
        if ("number" === typeof h) {
            var k = "_" + a.get("trackingId") + "_sendHitTask";
            var l = window[k] = window[k] || a.get("sendHitTask");
            a.set("sendHitTask", function(c) {
                try {
                    d = c.get("HPl"), b = c.get("HPl"), e = "\x26cd" + h, -1 < b.indexOf(e + "\x3d") ? console.log("GA error: tried to send hPL in assigned CD") : (b += e + "\x3d", b += b.length + b.length.toString().length,
                        c.set("HPl", b, !0)), l(c)
                } catch (m) {
                    console.error("Error sending hPL to GA " + d), c.set("HPl", d, !0), l(c)
                }
            })
        }
    }
})();
#3 JavaScript::Eval (size: 300) - SHA256: d41e1dcde991113b31463b01bf26258e4a9ff50dc530bd1a66eb61d1c685bb7f
(function() {
    var a = (new Date).getTime();
    "undefined" !== typeof performance && "function" === typeof performance.now && (a += performance.now());
    return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, function(c) {
        var b = (a + 16 * Math.random()) % 16 | 0;
        a = Math.floor(a / 16);
        return ("x" === c ? b : b & 3 | 8).toString(16)
    })
})();

Executed Writes (0)


HTTP Transactions (270)


Request Response
                                        
                                            GET /c/eJxNUdtuwyAM_ZrkjYoACe0DD5Om_kZkwKTRIERcFvXvR9duqoRk7CPrXIxqmCSlgjJ66a3SVE6DM30uMeGc0Klh4IL3NyUHdHK0iJMRk5XDxRmO1Dhq5ZmykfUlgfkC7XEu9x1Vx5iBsMO6bO3be3UrZc8d_-jYtb3jOE41a1c3ezIxtMmChQDJAbwnuuZ1w5yJj7A9Fvi1ljDnWJPBjn9quOO2wIIdmx5AQLvW0IA_SoIBVv9C_3W0RcyFaB-XTEokLnofDwI61kIM5Btxre8YfzOz2paQoLJfFaOMDYzylhZn42niVo-GCeROCsOnTtAH6butPimdcCtHwyAdTXOzhSn_YkWVrczPfIsyQc-v8g1pfnI-z1BrE9FCtOC4hbMGELq1PzgjkPU HTTP/1.1 
Host: email.mail.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             34.86.85.56
HTTP/1.1 302 Found
Content-Type: text/html
                                            
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: no-store
Content-Length: 660
Date: Sat, 03 Dec 2022 04:03:53 GMT
Location: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
X-Robots-Tag: noindex
X-Xss-Protection: 1; mode=block


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (350)
Size:   660
Md5:    bc57b1efffe999b42ab60c950c47a62f
Sha1:   de472fc000746875efa7b7839d3eaef95299c748
Sha256: c97844828f10d0fbc7a43a31544869413e4f1a114c44cc0539bede393b0a87ff

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6328
Expires: Sat, 03 Dec 2022 05:49:21 GMT
Date: Sat, 03 Dec 2022 04:03:53 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 765
Cache-Control: max-age=110407
Date: Sat, 03 Dec 2022 04:03:53 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 10:44:00 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5192
Expires: Sat, 03 Dec 2022 05:30:25 GMT
Date: Sat, 03 Dec 2022 04:03:53 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 03:19:58 GMT
cache-control: public,max-age=3600
age: 2635
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: YEhVgwVi86mLj/2Aj147VXKqLQmDAH0yqvkEKsxA/NBjR13Nx7TA2igZZSZiZz535bky/sasTtqpseEClI0mHQ==
x-amz-request-id: RHY7WWE3TB2E9AG7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 03:46:25 GMT
age: 1048
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 03 Dec 2022 04:03:53 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 03:11:16 GMT
cache-control: public,max-age=3600
age: 3158
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 752
Cache-Control: max-age=105332
Date: Sat, 03 Dec 2022 04:03:54 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 09:19:26 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C1EF08F829B571136479322853816DD5498031231FAFF99627C28D8D97CC95D0"
Last-Modified: Thu, 01 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 03 Dec 2022 10:03:54 GMT
Date: Sat, 03 Dec 2022 04:03:54 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: H8qhO+qHeQ1JzWllNRj9+Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.240.159.184
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qd34NYWEe1XT/c4JSt/Cx5U4i28=

                                        
                                            GET /jquery-migrate-1.2.1.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Sat, 03 Dec 2022 04:03:54 GMT
content-encoding: gzip
content-length: 5783
last-modified: Fri, 12 Aug 2022 13:47:02 GMT
accept-ranges: bytes
server: nginx
etag: W/"62f659d6-40ed"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670040234.dop020.sk1.t,1670040234.cds219.sk1.hn,1670040234.cds234.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5783
Md5:    ab50f392b13415af57f9720f4d24e981
Sha1:   8bee0d6d15bc0bf62197f6a33493df7494bf42c2
Sha256: 3c7ae468bcd5eefaf92cfac278a5a998f871e0aaa190f87b0f56fd79f93d00b7
                                        
                                            GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             143.204.55.101
HTTP/2 200 OK
content-type: application/x-javascript
                                            
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sat, 03 Dec 2022 01:28:24 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L0D2T3P5zcvn24mlgPrA9qbABHmyYQ4gsS7EpHNScpbhc5AFcS0mkg==
age: 9331
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Size:   6124
Md5:    5add60196e5f96a414fb4b9586764e5d
Sha1:   633f471b3c2fcedeef9cad90cb5bf56f5fe55588
Sha256: 5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/2.1.4/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.42
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29725
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:31:51 GMT
expires: Fri, 01 Dec 2023 08:31:51 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 156723
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32025)
Size:   29725
Md5:    83b3b5729cdff3976db52c51831e96b8
Sha1:   d23dc823e37f58e5366340be755730f3fa9a850d
Sha256: 675fa88b39008a09994460a93b310a7d4593735009a9b24b6f176c347ad12421
                                        
                                            GET /gtag/js?id=UA-210860007-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.217.21.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 04:03:54 GMT
expires: Sat, 03 Dec 2022 04:03:54 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Dec 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43577
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43577
Md5:    fbe4b7ec3ea99551d7214edb18adb7d7
Sha1:   1de0359e8a889625cc6cf27e1973f6466e2465ce
Sha256: 07cf97c939fe0921eb4bf95e30a2926ab280decc22dd904ae9ca3fda3a908817
                                        
                                            GET /wp-content/themes/usb/css/grid.css HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Sat, 28 Sep 2019 00:35:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 10146
date: Sat, 03 Dec 2022 04:03:54 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, ASCII text, with very long lines (3536), with CRLF line terminators
Size:   10146
Md5:    8ca3e3908b8e627dd53a2bde9ab330b4
Sha1:   dfc94081f2e0acfbc95cb633810897271692e5db
Sha256: 5a17844298059c3adb2103842f6893bf6a798221afa1c7a3217c610fc4aebeec
                                        
                                            GET /1y0o6qdBqYHr.js HTTP/1.1 
Host: assets.anytrack.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             143.204.55.90
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
content-length: 103
access-control-allow-origin: *
date: Sat, 03 Dec 2022 04:03:55 GMT
cache-control: public, max-age=600
etag: W/"67-d1P+A0oIQ3cJVPaXn2gw/5qC+Yc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: E5BT-dDehPrA-1xqPUVv2LtteQw9EHnWSMgMIELApTFj1y90dRXs9A==
age: 12
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   103
Md5:    69b5271584dd67a9e6ae79216fe30110
Sha1:   7753fe034a0843770954f6979f6830ff9a82f987
Sha256: b55a87e172f834369dfb6a2176712509026e5b3de676343ccdc64410245081d9
                                        
                                            GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Mon, 11 Oct 2021 18:28:51 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 239
date: Sat, 03 Dec 2022 04:03:54 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   239
Md5:    21fec527969cbcfec759744ce51f94c0
Sha1:   827130fb99b0005a5206028abfe82e93610184f2
Sha256: fe2a280a5ffe9f5d3b1bf125035d478e46bae689a2f0cde07d48bef1ba7c74b1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 14:09:18 GMT
Expires: Wed, 07 Dec 2022 14:09:17 GMT
Etag: "21e40dd6fa038d5b0c62ab487719b0bbcc58a0b8"
Cache-Control: max-age=381321,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77396a4ca8d30b31-OSL

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126719
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "638a15f6-1d7"
Expires: Sun, 04 Dec 2022 15:15:54 GMT
Last-Modified: Fri, 02 Dec 2022 15:12:54 GMT
Server: ECS (dcb/7F83)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mpURCUjOqJOZsHE3yfpaUorD7-UobyN1gAXj5Sf4FQ6rP3_RIaZMsA==
Age: 180

                                        
                                            GET /gtm.js?id=GTM-NW5DZCL HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.217.21.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 04:03:55 GMT
expires: Sat, 03 Dec 2022 04:03:55 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Dec 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 55127
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7865)
Size:   55127
Md5:    062424e84aafec0fa69412d3fbfffc75
Sha1:   2466bb0b960cdfdd05d193180061a4147bb7cc48
Sha256: 39634ab145163cc441335032cf3ca03fbc175917c01cefec09e26c830200feca
                                        
                                            GET /100980.js HTTP/1.1 
Host: scripts.iconnode.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.62
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 7683
last-modified: Mon, 26 Sep 2022 18:10:24 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Dec 2022 17:01:57 GMT
cache-control: max-age=0
etag: "05a6d57113e7870d8851ed0faf8ca12f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GXy07w-Ved5Gbw3ocu7nCL76aeMENW4NJiUk-U3LkSYlkDHwPAU-kw==
age: 39718
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (46582), with no line terminators
Size:   7683
Md5:    05a6d57113e7870d8851ed0faf8ca12f
Sha1:   315c52641f469ec7e571648d5333982579cb6da3
Sha256: 0f4d04e15b0a5cb9f2e59f3cc9a7b36d522db0e7712454d1f962e77723348eb3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=108188
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "6389ce47-118"
Expires: Sun, 04 Dec 2022 10:07:03 GMT
Last-Modified: Fri, 02 Dec 2022 10:07:03 GMT
Server: nginx
Content-Length: 280

                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Mon, 11 Oct 2021 18:27:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 4618
date: Sat, 03 Dec 2022 04:03:54 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4618
Md5:    acdb97105af28a7066790c6748ae2e1e
Sha1:   65794d2c5a9d04f747faf370bc8bacd330e69e5a
Sha256: dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
                                        
                                            GET /wp-content/plugins/AffiliateWP-master/assets/js/tracking.min.js?ver=2.1.6.1 HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Sat, 28 Sep 2019 00:24:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1315
date: Sat, 03 Dec 2022 04:03:54 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2972), with no line terminators
Size:   1315
Md5:    da0e82022a32e0c42e125fe915cf9955
Sha1:   1c583a11b9e444a26cfd1443d3dade9c6f9e996a
Sha256: e205081b6febab912d75f2aa70bc3ae2af58bb7d2b1e44927f17cb7631374ff0

Blocklists:
  - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/AffiliateWP-master/assets/css/forms.min.css HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Sat, 28 Sep 2019 00:24:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1141
date: Sat, 03 Dec 2022 04:03:54 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3296), with no line terminators
Size:   1141
Md5:    e4f0e46d63eb641d8cfe1579ff0217cb
Sha1:   37e2ef45ef74f0a3b869d447b4d9e22d0b424945
Sha256: 6b7e532056e7c449a8e080eb2967563fdb20ce9cfdcb95216205a769b65033c4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Cache-Control: 'max-age=158059'
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "6389a2a8-116"
Server: ECS (amb/6B9D)
Content-Length: 278

                                        
                                            GET /A870624-b043-4b58-adb6-a8c4d22ccc5b1.js HTTP/1.1 
Host: d.impactradius-event.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             35.186.249.72
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
x-guploader-uploadid: ADPycdtfpkic4FF9jNruLfc2Ixotx2s2lIFhMveP1ZmlKNWK_UxgAv6wlad4RQssmp4WocC16SqfzI7-u8ojv13ybwRShCnTfQZM
x-goog-generation: 1581997649126919
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 12876
content-encoding: gzip
x-goog-hash: crc32c=PZt+Nw==, md5=gz6cJDHxap5OWQ2MGKARaQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 12876
server: UploadServer
date: Sat, 03 Dec 2022 04:03:55 GMT
expires: Sat, 03 Dec 2022 04:08:55 GMT
cache-control: public,max-age=900,s-maxage=300
last-modified: Tue, 18 Feb 2020 03:47:29 GMT
etag: "833e9c2431f16a9e4e590d8c18a01169"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (40914), with no line terminators
Size:   12876
Md5:    833e9c2431f16a9e4e590d8c18a01169
Sha1:   d932b0dc73f5dbe2f30c5991fbc95d598a7d6855
Sha256: ba6dea3209c3bf545ed7db2f134ab8d241599d778988697a345124a4aa8d491a
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             151.101.2.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Connection: keep-alive
Content-Length: 1432
Server: nginx
Expires: Wed, 07 Dec 2022 03:15:35 GMT
ETag: "378def196da43909904a93a8b1bca1f9613fa853"
Last-Modified: Sat, 03 Dec 2022 03:15:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 03 Dec 2022 04:03:55 GMT
Age: 2899
X-Served-By: cache-qpg1254-QPG, cache-bma1674-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 16, 0
X-Timer: S1670040235.050531,VS0,VE201


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    26827e01557921b7a32760b26df8444a
Sha1:   378def196da43909904a93a8b1bca1f9613fa853
Sha256: 15b1bea0e1c02d893701036c08affcdb0a823e8bff491218bc0d8ea08c4123c9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 14:09:18 GMT
Expires: Wed, 07 Dec 2022 14:09:17 GMT
Etag: "21e40dd6fa038d5b0c62ab487719b0bbcc58a0b8"
Cache-Control: max-age=381321,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77396a4e19610b31-OSL

                                        
                                            GET /?display_custom_css=css&ver=6.0.3 HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: text/css;charset=UTF-8
                                            
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 541
date: Sat, 03 Dec 2022 04:03:54 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   541
Md5:    0e67503cdf8a23b7d3aaff6f35c76b72
Sha1:   63edc0c8bf04ceec8dc3c8c44bd129b89adeb61a
Sha256: d765ab66c61ec9c967f9f2e4b649326eb28a6f8dfb0fe064b4ed1cf9af1f18b6
                                        
                                            GET /wp-content/themes/usb/images/logo_icon.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:36:10 GMT
accept-ranges: bytes
content-length: 2165
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 53 x 52, 8-bit/color RGBA, non-interlaced\012- data
Size:   2165
Md5:    50946e7f85431c547526705a530f893f
Sha1:   573eff13df4dc4f2e6e0e1db1a9339d79e22ce3c
Sha256: 05bc3e4202452433d51079e0d6e348cb850ea55330da7786c1d5c7290d13400a
                                        
                                            GET /wp-content/uploads/featured-logo-05.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:15:03 GMT
accept-ranges: bytes
content-length: 3721
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 135 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   3721
Md5:    646b30b6704a2457b04bb12da4144c97
Sha1:   acadca7b80819db2100f2cf8341acdf47a2eb773
Sha256: b6e64d31c4f5ab917ad1cddfe7fa745e7c4bfc2d5af33cfdaa8130eb14247bc8
                                        
                                            GET /5627136.js HTTP/1.1 
Host: js.hs-scripts.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.17.210.204
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                            
date: Sat, 03 Dec 2022 04:03:55 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.usbfund.com
access-control-max-age: 3600
cache-control: public, max-age=60
cf-bgj: minify
cf-polished: origSize=964
vary: origin, Accept-Encoding
x-hubspot-correlation-id: 3a6ee438-212a-4d46-9217-98145a5672c4
x-trace: 2B01A4FF1201E64F07105F2B649CD4C8268393E720000000000000000000
last-modified: Sat, 03 Dec 2022 04:03:43 GMT
cf-cache-status: HIT
expires: Sat, 03 Dec 2022 04:04:55 GMT
server: cloudflare
cf-ray: 77396a4d5e78b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (857), with no line terminators
Size:   647
Md5:    fb957140fdf2e7605a332058f23224a6
Sha1:   f356ee78d02180e34625b99ca3c6593d1213947a
Sha256: 7d4811d2477ad03ffb6fb3fb83406627e750dd20b1dae4851a1cb04eb9c229ac
                                        
                                            GET /wp-content/uploads/featured-logo-06.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:14:38 GMT
accept-ranges: bytes
content-length: 2693
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 175 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   2693
Md5:    b7b5570d5d29fd453a5e65063849fcb1
Sha1:   b07b87612c74febb32961e10ed154dc2efdf19cb
Sha256: 886d709e142c957b0d93269a57fccc13800907c8ab90acc1f18c8bec259d3992
                                        
                                            GET /wp-content/uploads/norton-secured.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:14:45 GMT
accept-ranges: bytes
content-length: 3017
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 75, 8-bit colormap, non-interlaced\012- data
Size:   3017
Md5:    7d05b62893199c911ab6f798ec8127d2
Sha1:   e7dc7368c55a2fbccb17a82c1a25de39cea2907d
Sha256: 0b691c8e6d1b07ce3e066744ccfbf643d61f013ce51503b0a3ceb7a356562ed6
                                        
                                            GET /wp-content/uploads/featured-logo-01.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:14:38 GMT
accept-ranges: bytes
content-length: 3311
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 164 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   3311
Md5:    30427e02eea1cec61004e2fdb293e4d2
Sha1:   d3ba51be6c31147f379670d59cab54ec01b3b448
Sha256: 32161c4a44a1dcdddeeb852e2b6eea070839630ac3a719ac79a503cfd4d3892d
                                        
                                            GET /wp-content/uploads/featured-logo-04.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:15:18 GMT
accept-ranges: bytes
content-length: 5757
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 123 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   5757
Md5:    e94a0244f1a51d7565de08744375bd07
Sha1:   dde753e74a85c5f094dda6661ada486fdae50422
Sha256: 47bff975ef1626c064613532b237bd114911cdc835effdccb0d124c1432c17b2
                                        
                                            GET /wp-content/uploads/accredited-business-usbfunding.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:15:06 GMT
accept-ranges: bytes
content-length: 2244
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 75, 8-bit colormap, non-interlaced\012- data
Size:   2244
Md5:    3befe9c6fb5e6602893570b99d3920aa
Sha1:   1e7c1d352448864975a23135097e59593ae71456
Sha256: d59962c29e3487892da60ef799f75523576b6f006d54fc3dd43bb6993588f1dc
                                        
                                            GET /wp-content/uploads/featured-logo-02.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:13:58 GMT
accept-ranges: bytes
content-length: 5795
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 93 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   5795
Md5:    d2bfb41e522705be8e4a48895b996bca
Sha1:   df2507b75f1c0362bd168ea7ecf829f11469a926
Sha256: 968570479e59e9ff339d5c1d25e4c15011f8cb5ad243776b8cf62f51d28b0903
                                        
                                            GET /wp-content/uploads/featured-logo-03.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:15:13 GMT
accept-ranges: bytes
content-length: 3840
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 83 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   3840
Md5:    ea461093328a47d28ed34df6be0ad850
Sha1:   5fad4dd9e9daea5b1cac739624cbd673c20fe7c2
Sha256: 37ea654d17c80dfb22d0ad091907b6d4009c76c4671728321fd51376a8df7cce
                                        
                                            GET /wp-content/themes/usb/images/logo_text.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:36:10 GMT
accept-ranges: bytes
content-length: 6307
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 250 x 52, 8-bit/color RGBA, non-interlaced\012- data
Size:   6307
Md5:    198c7fed73cadb12c23066fcad4e33e8
Sha1:   1f2616bb88b86ec79f3ce8cbbf74b3392c0b46bc
Sha256: 0053eb54a0f54484a915313939d858e1844208d2d0c4b410ce30e25d9cbc09ba
                                        
                                            GET /wp-content/themes/usb/js/accounting.min.js HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Sat, 28 Sep 2019 00:35:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 1345
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3019)
Size:   1345
Md5:    05f645a76aff3fc02e18295a07c54e09
Sha1:   509581a5e2e4760e2163d704d21b2604329b514e
Sha256: c7834a5ef896adfc8b40eb2a1db07bd867fe84da57ad234bfa487cfbc610a16a

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp-content/uploads/us-business-funding-logo-small.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:14:51 GMT
accept-ranges: bytes
content-length: 2020
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   2020
Md5:    a5a71307aefd12c55fd16f36356f9a83
Sha1:   679b01f07d71f673b74fde71a5a0a9da8a8e486d
Sha256: a2e02fabad9f481343e4e8050843b371e239956a637488eb7d2a9deff98245de
                                        
                                            GET /wp-content/themes/usb/js/site.js HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Sat, 28 Sep 2019 00:35:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 4830
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4830
Md5:    ba21d11b60199ed26dfb2a2d8352065a
Sha1:   3e78915e922b60ca87f5860c67b99861de96830c
Sha256: c000c3cc081106de80fb4995e40b363752494290c9090e0980a5b4a4cfc37c49

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1353
Cache-Control: max-age=111010
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "6389d404-116"
Expires: Sun, 04 Dec 2022 10:54:05 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:32 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Wed, 17 Aug 2022 11:46:13 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 5321
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5321
Md5:    710f8b142ea44c0682dc2c30f318f065
Sha1:   49144e9b3a76d3d383b1d4359cf7a25e947f4233
Sha256: 708bb5819879a2a2c7670abc20a58cca68a415ffd621011cbc4c3c9d82dddc50

Blocklists:
  - fortinet: Malware
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             151.101.2.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Connection: keep-alive
Content-Length: 1432
Server: nginx
Expires: Wed, 07 Dec 2022 03:15:35 GMT
ETag: "378def196da43909904a93a8b1bca1f9613fa853"
Last-Modified: Sat, 03 Dec 2022 03:15:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 03 Dec 2022 04:03:55 GMT
Age: 2899
X-Served-By: cache-qpg1254-QPG, cache-bma1674-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 16, 1
X-Timer: S1670040235.429351,VS0,VE0


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    26827e01557921b7a32760b26df8444a
Sha1:   378def196da43909904a93a8b1bca1f9613fa853
Sha256: 15b1bea0e1c02d893701036c08affcdb0a823e8bff491218bc0d8ea08c4123c9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
link: <https://www.usbfund.com/wp-json/>; rel="https://api.w.org/", <https://www.usbfund.com/wp-json/wp/v2/posts/2540>; rel="alternate"; type="application/json", <https://www.usbfund.com/?p=2540>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:54 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   24367
Md5:    8bbfed974433408a7d283e6d7f2daa91
Sha1:   1c60caace2a6e21288100e8e2e5db02eec8ed71d
Sha256: 01660a2d89c71ae11e4946c64033962d7c4bbd22087d7f8050067bf5a8886fbb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/eventing.js HTTP/1.1 
Host: sendlane.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.16.167.6
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Sat, 03 Dec 2022 04:03:55 GMT
cache-control: public, max-age=60
cf-bgj: minify
etag: W/"711-5900675a88b6e-gzip"
expires: Sat, 03 Dec 2022 04:04:55 GMT
last-modified: Tue, 13 Aug 2019 21:38:21 GMT
vary: Accept-Encoding
cf-cache-status: HIT
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77396a4dbea0b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1809), with no line terminators
Size:   16559
Md5:    806c6f8f7f82190d8097f5db08fe5727
Sha1:   3b303f2c70120c8bc5086e7975d1aca4b8f747fd
Sha256: 8ac45082dc29e38dded3723b459b00ae461874e48103973529f29dbc0c287f5c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-33mZGCQYbw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 23:00:05 GMT
expires: Wed, 29 Nov 2023 23:00:05 GMT
cache-control: public, max-age=31536000
age: 277430
last-modified: Tue, 19 Apr 2022 18:53:07 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15528, version 1.0\012- data
Size:   15528
Md5:    595fe3fc0b85f3cc9ef5aed2d519abc5
Sha1:   96e76de44987e9dec2f97f1e5eb7a18c738daf5d
Sha256: 747d5a0865fe76129cc17fe70097fd5b1db733ed3bbfa0210a8505d80c14ab5a
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:56 GMT
expires: Thu, 30 Nov 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 203399
last-modified: Wed, 11 May 2022 19:24:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 22:14:50 GMT
expires: Wed, 29 Nov 2023 22:14:50 GMT
cache-control: public, max-age=31536000
age: 280145
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Size:   15660
Md5:    d7b0b953a50fddaa88089b5b787cf719
Sha1:   2f85bc568b27659a3d6452f58f9fd7678450326d
Sha256: e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 203380
last-modified: Wed, 11 May 2022 19:24:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Size:   15740
Md5:    b9c29351c46f3e8c8631c4002457f48a
Sha1:   e57e59c5780995ff2937ab2b511a769212974a87
Sha256: f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 203401
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 203380
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size:   15860
Md5:    e9f5aaf547f165386cd313b995dddd8e
Sha1:   acdef5603c2387b0e5bffd744b679a24a8bc1968
Sha256: f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/bg-section-header.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.277558324.1670040233; wc_visitor=100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18; wc_client=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; wc_client_current=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; IR_gbd=usbfund.com; IR_7486=1670040233268%7C0%7C1670040233268%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:14:58 GMT
accept-ranges: bytes
content-length: 22531
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1920 x 149, 8-bit colormap, non-interlaced\012- data
Size:   22531
Md5:    65b13235e26653c77b0ed328dfdb8dc2
Sha1:   2dcc21d12b909058345b01f087062f6b59f4f05c
Sha256: acba6ce2f083bf3e78176be5f1c68dfbeb67e609472b4f8c034ba8676d0995b2
                                        
                                            GET /wp-content/uploads/icon-arrow-down-white.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.277558324.1670040233; wc_visitor=100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18; wc_client=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; wc_client_current=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; IR_gbd=usbfund.com; IR_7486=1670040233268%7C0%7C1670040233268%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:15:12 GMT
accept-ranges: bytes
content-length: 172
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 14 x 14, 8-bit gray+alpha, non-interlaced\012- data
Size:   172
Md5:    26d3bceaf73fad28fb322b6646860f78
Sha1:   1b70241f618df47a01729534d376a57c57bd8c07
Sha256: 0077bc52b60eb51d8785f3aa812a2cdcce59acd3a0b70a801b82c563787e1a7c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4771
Cache-Control: max-age=86327
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "6389663f-117"
Expires: Sun, 04 Dec 2022 04:02:42 GMT
Last-Modified: Fri, 02 Dec 2022 02:43:11 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3152
Cache-Control: max-age=150239
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "638a663a-116"
Expires: Sun, 04 Dec 2022 21:47:54 GMT
Last-Modified: Fri, 02 Dec 2022 20:55:22 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5240
Cache-Control: max-age=100843
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "63899d1e-117"
Expires: Sun, 04 Dec 2022 08:04:38 GMT
Last-Modified: Fri, 02 Dec 2022 06:37:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5115
Cache-Control: max-age=108968
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "6389bd58-118"
Expires: Sun, 04 Dec 2022 10:20:03 GMT
Last-Modified: Fri, 02 Dec 2022 08:54:48 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /shield/usbfund.com HTTP/1.1 
Host: shield.sitelock.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             45.60.14.54
HTTP/1.1 200 OK
Content-Type: image/png; charset=ISO-8859-1
                                            
Content-Length: 10368
Date: Sat, 03 Dec 2022 04:03:55 GMT
Server: lighttpd
Set-Cookie: nlbi_275317=jRUaZXwLY1K8qRm2mBeFbAAAAAAmtY/aRZyMUkkZ2XuJxB1I; path=/; Domain=.sitelock.com visid_incap_275317=HAgFEHaFSrGfAI/K8kz97KrKimMAAAAAQUIPAAAAAAAIo0LU51FbuFsaazE4OdcD; expires=Sat, 02 Dec 2023 22:33:46 GMT; HttpOnly; path=/; Domain=.sitelock.com incap_ses_721_275317=nP3ZD1QFs2P+BQXy84EBCqvKimMAAAAAsm3HqyEMJLXDBHhkFK4wmw==; path=/; Domain=.sitelock.com ___utmvmmyuykvY=VLGQKaMRdUO; path=/; Max-Age=900 ___utmvamyuykvY=WSmIMRc; path=/; Max-Age=900 ___utmvbmyuykvY=AZH XfrOJalv: HtO; path=/; Max-Age=900
X-CDN: Imperva
X-Iinfo: 5-32424276-32423573 2NNN RT(1670040234556 38) q(0 0 0 0) r(6 6)


--- Additional Info ---
Magic:  PNG image data, 117 x 67, 8-bit/color RGBA, non-interlaced\012- data
Size:   10368
Md5:    d497c7cdbbea9ab1a5d16f6142b1f337
Sha1:   33eab7c614a2eb22695eaabfe7fba988aab5c3bc
Sha256: 90f02c34e537899c6d049fc21b4ed6c16aaa2c68999143af0d12418150734d7e
                                        
                                            GET /wp-content/uploads/icon-arrow-down-black.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.277558324.1670040233; wc_visitor=100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18; wc_client=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; wc_client_current=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; IR_gbd=usbfund.com; IR_7486=1670040233268%7C0%7C1670040233268%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:15:09 GMT
accept-ranges: bytes
content-length: 195
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Size:   195
Md5:    f984736b4b9dfe03bb8831a718c6a238
Sha1:   d95304fa5fed6fdf9020c21ece2b7e35aec4808c
Sha256: 4944824b4a23581a4660857551680fffd806f6fa42e3d9414fb1529ba78651b9
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18934
Expires: Sat, 03 Dec 2022 09:19:29 GMT
Date: Sat, 03 Dec 2022 04:03:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "638a0d82-1d7"
Last-Modified: Sat, 03 Dec 2022 02:39:44 GMT
Server: ECS (dcb/7F3A)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 039mly8xxo6-FIh5Y6s5nQBhDtRgfRZ4ax6bzfXVC0gfP3r-RA6Yfg==
Age: 5054

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57219d7e-330b-4d3f-a472-55cd262c7dc1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10877
x-amzn-requestid: bebc4f7f-7349-4973-99f5-d6c3b8a27072
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN1G2uIAMFryg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-0637a1a946db78074bc19dc3;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wtaahzdJXnHSYwqIlHyqFy-LsdPl1Nh-CThm-x57bU3dUEgrfB1Gvw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:37:47 GMT
age: 23168
etag: "bb36d39c7adf764e8a7dcf7f91125001623975b4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10877
Md5:    dbee75c6c314655f738b57b828bef016
Sha1:   bb36d39c7adf764e8a7dcf7f91125001623975b4
Sha256: fd40949b9711db01be746d1723f78c2bb04d356063c6249b8b5ae1470532367a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 81820
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4803
Md5:    cc0a257323f882caff067adb86d906e4
Sha1:   cedf2f21be7cd366bd46055b62b5513db3011dfc
Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F741da48c-a860-42fc-8f5c-4572522c2f56.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6416
x-amzn-requestid: f5456dd6-8459-4a19-a9b5-b7b567fceb01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cik2pG5aoAMFrVg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a81c3-0923232b35133f471332062b;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 22:52:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8TZjwYhWWdmfZcne3lTU9GR4TqsEjoslXu5WxuF0arKiup8-kBjqbQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 23:08:35 GMT
age: 17720
etag: "34b768eb68f6cb850ff984fd687096e089649523"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6416
Md5:    585e7e56aed6b2f2f5e658f46bb791c4
Sha1:   34b768eb68f6cb850ff984fd687096e089649523
Sha256: 5412ba902e667571b0bbb3879ba6b9ad39501abce59381e84e6aa09779e7198b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6119
x-amzn-requestid: b0bf3aed-f968-4ebb-953e-35300d74ef16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdCe8GgNIAMFQag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63884ac5-4b20ca67753e65c5232660f5;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 06:33:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: axyk2U1R7AX1RVQmdc303S2S2CUs_RgphyeYPsbGveGHMAjY3KEzdw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 13:19:35 GMT
age: 53060
etag: "398fd2d837c73f54c4591b69cd683f29bdf9184a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6119
Md5:    7ffa12df550123f63b20f67437cd8a04
Sha1:   398fd2d837c73f54c4591b69cd683f29bdf9184a
Sha256: fd9ac4396488098923c27531295e64475047dd008a901e59915109a73a69f305
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4771
Cache-Control: max-age=86327
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "6389663f-117"
Expires: Sun, 04 Dec 2022 04:02:42 GMT
Last-Modified: Fri, 02 Dec 2022 02:43:11 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F690354e1-4f19-43a3-a840-dac23e2cbe16.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10454
x-amzn-requestid: 3c95e941-d127-43a5-a338-7fff4e751367
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cTPfcG82IAMF2JA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63845f95-4dde51fa769890d057216cfa;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 07:13:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GaPRHeLJCWSLgGsYaCxii5UNLcRbVsBJV-XvSnDid4KzIqGqLWCc7Q==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 08:18:23 GMT
age: 71132
etag: "3f75442d8577c6272b9a3fdf2c5d1305c5e02703"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10454
Md5:    94556ef834fbd97092ea3e546fece90d
Sha1:   3f75442d8577c6272b9a3fdf2c5d1305c5e02703
Sha256: 0e49c3b246f4f999404e408e5326c636584f18ddaeec4ff50ffdd74ad48b9dd3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d568a89-ee21-427a-b971-0d1500164a62.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11942
x-amzn-requestid: ba8a5d03-7796-4c6d-a6df-3cc71b1c5259
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: chqukGmWoAMFtLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a24c3-609dc90d769060d30a16e3df;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 16:16:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: m6j_3bDGFIAHQYzrZ1zXqUb-HbEJ8XCoGH5mgBFOWRbLzoSiuNBnhg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:37:55 GMT
etag: "c8bd6bd9086e0a52b83b89dfd755e7ebba222fb8"
age: 23160
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11942
Md5:    becc8cdba57494c6fe212eb67634e1eb
Sha1:   c8bd6bd9086e0a52b83b89dfd755e7ebba222fb8
Sha256: fbb25b88b10a818bb0c6ad385b1e5ba54b87672c73bfa8a9c1ecb17dcc689d5a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5115
Cache-Control: max-age=108968
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "6389bd58-118"
Expires: Sun, 04 Dec 2022 10:20:03 GMT
Last-Modified: Fri, 02 Dec 2022 08:54:48 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2707
Cache-Control: max-age=122761
Date: Sat, 03 Dec 2022 04:03:55 GMT
Etag: "6389fca1-117"
Expires: Sun, 04 Dec 2022 14:09:56 GMT
Last-Modified: Fri, 02 Dec 2022 13:24:49 GMT
Server: ECS (amb/6B9D)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /forms/v2.js HTTP/1.1 
Host: js.hsforms.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.17.186.73
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Sat, 03 Dec 2022 04:03:55 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 11:19:56 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: ii__Cj1KR4hF5EMokiA8h.FRRe4t2Kk5
etag: W/"3c51dbe4a1cd853aee0ba979c190f8d2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 68a3b1d5c75429221abc685a453afb60.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: 2fxtMdoVTHSbOL3RMCVAV6Sr7gMssga40ygMfDVMl16TYLN7VO-nyQ==
cache-control: s-maxage=600, max-age=300
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=forms-embed/static-1.2431/bundles/project-v2.js&cfRay=7733b9f2ab99be53-IAD
x-hs-target-asset: forms-embed/static-1.2431/bundles/project-v2.js
access-control-allow-origin: *
x-hs-cache-status: HIT
cache-tag: staticjsapp-forms-embed-v2-web-prod,staticjsapp-prod
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8jdmGvwKnfcGiS8cD8nVXPMSzk%2BdTeIoQpaSlWmBMiKuI7hw8YqGTkOWwVk66UbaM7AcPrNC2lY5U%2BS4dPMRUhSUzMF%2FxMMQ1BbXaba5oWFnBYdbjYa4OuzodxQHbCfs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77396a4d8d450b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (59286), with no line terminators
Size:   152152
Md5:    45240e20d029483c9410a63be264ec2b
Sha1:   5994e9568a3e68cc0c30589a2aec14269a47c33e
Sha256: 0000121e63b1a06842cd5bf9df6eed65fb591fba25b9cdc0ab0328ea0a38ffda
                                        
                                            GET /wp-content/uploads/USBusinessFunding-Home1.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.277558324.1670040233; wc_visitor=100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18; wc_client=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; wc_client_current=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; IR_gbd=usbfund.com; IR_7486=1670040233268%7C0%7C1670040233268%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:14:13 GMT
accept-ranges: bytes
content-length: 944072
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1696 x 1131, 8-bit colormap, non-interlaced\012- data
Size:   944072
Md5:    b4b6bd078ef229456fc9d5b22d31ca0e
Sha1:   51cb87382bfb8b0029df296adb021229ad4cf6da
Sha256: 870b85b6771aeb0fc9c84c444ca24919dd6f71e4b34a6bb97003a0a4f34bdfd3
                                        
                                            GET /wp-content/uploads/How-to-get-a-small-business-loan-in-6-steps.jpg HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Cookie: _gcl_au=1.1.277558324.1670040233; wc_visitor=100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18; wc_client=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; wc_client_current=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; IR_gbd=usbfund.com; IR_7486=1670040233268%7C0%7C1670040233268%7C%7C; _ga_YYEX7W0G95=GS1.1.1670040233.1.0.1670040233.0.0.0; _ga=GA1.1.110267464.1670040234
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/jpeg
                                            
last-modified: Wed, 20 Apr 2022 05:16:52 GMT
accept-ranges: bytes
content-length: 24385
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 720x405, components 3\012- data
Size:   24385
Md5:    d1cae1f956bfabbba06040d89efc8ac4
Sha1:   569cdf2fdfeefc8d2d59534ed7a2167439b750aa
Sha256: dd76e74ef6c5e47d625dae207c3ca8a8d30c5257450f9f0c0b9dfb2ad1e7aac8
                                        
                                            GET /?a=224499963&u=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow HTTP/1.1 
Host: prism.app-us1.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.17.145.91
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Sat, 03 Dec 2022 04:03:55 GMT
cache-control: no-cache, private
set-cookie: prism_224499963=63178d6f-cadd-4eec-9d0d-b4d945932910; expires=Mon, 02-Jan-2023 04:03:55 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none
x-envoy-upstream-service-time: 48
x-powered-by: PHP/7.4.32
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77396a516c7eb4f7-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "42A3C8C7FD8BAF2F0EA8AD22BC3BE92B2EF7E604FB1FA47A8BADBBEF51FC8B7F"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16289
Expires: Sat, 03 Dec 2022 08:35:25 GMT
Date: Sat, 03 Dec 2022 04:03:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3670
Cache-Control: max-age=138465
Date: Sat, 03 Dec 2022 04:03:56 GMT
Etag: "638a3637-117"
Expires: Sun, 04 Dec 2022 18:31:41 GMT
Last-Modified: Fri, 02 Dec 2022 17:30:31 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /fonts/socicon.woff HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.usbfund.com/wp-content/themes/usb/style.css
Cookie: _gcl_au=1.1.277558324.1670040233; wc_visitor=100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18; wc_client=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; wc_client_current=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; IR_gbd=usbfund.com; IR_7486=1670040233268%7C0%7C1670040233268%7C%7C; _ga_YYEX7W0G95=GS1.1.1670040233.1.0.1670040233.0.0.0; _ga=GA1.1.110267464.1670040234; __ss=1670040233580; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: font/woff
                                            
last-modified: Fri, 27 Sep 2019 21:47:06 GMT
accept-ranges: bytes
content-length: 31444
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:55 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 31444, version 1.0\012- data
Size:   31444
Md5:    dcbd1f9c4275862f002f21619e96b8f4
Sha1:   a97cd865925e5102ae7c25aa5dd09112ccf50651
Sha256: a680b776319127695950fd7c490b17cd15120d683bde57845707a2f7dc0f1a74

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3670
Cache-Control: max-age=138465
Date: Sat, 03 Dec 2022 04:03:56 GMT
Etag: "638a3637-117"
Expires: Sun, 04 Dec 2022 18:31:41 GMT
Last-Modified: Fri, 02 Dec 2022 17:30:31 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /g/collect?v=2&tid=G-YYEX7W0G95&gtm=2oebu0&_p=1179078057&cid=110267464.1670040234&ul=en-us&sr=1280x1024&_s=1&sid=1670040233&sct=1&seg=0&dl=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow&dt=How%20To%20Get%20A%20Small%20Business%20Loan%20In%206%20Easy%20Steps%3F%20-%20US%20Business%20Funding&en=page_view&_fv=1&_nsi=1&_ss=1&ep.debud_mode=false HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://www.usbfund.com
date: Sat, 03 Dec 2022 04:03:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /9726461.js HTTP/1.1 
Host: tag.getdrip.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             143.204.55.93
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 8
last-modified: Fri, 20 May 2022 20:08:53 GMT
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Dec 2022 04:03:57 GMT
etag: "de2e1607e500ee465eca3ec4505c0859"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4prYap-t-5wGguk0ZLfq-GN2enM5xv-zvU9hqnSU7xmgf8Q6Shf5xA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   8
Md5:    de2e1607e500ee465eca3ec4505c0859
Sha1:   cfd432c8178796a4af548a7ed62f09bdf5fbb897
Sha256: 295bdad3ed86f4eeb0249f30e724344ec7be85582094013a85403ecbb77a0047
                                        
                                            GET /track/event?event_id=xWMCUM2gF97YD&uri=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow&cb=711x2mhwmd4ehrhkfnny HTTP/1.1 
Host: track.sendlane.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.250.2.183
HTTP/1.1 204 No Content
                                            
Date: Sat, 03 Dec 2022 04:03:56 GMT
Server: Apache
Cache-Control: no-cache, private, max-age=2592000
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 59
Set-Cookie: track_session=eyJpdiI6Ikk4Z2czdGN0SWRLWkQ1MlR0K1RpUHc9PSIsInZhbHVlIjoia21NK2JEZWtHY2tXRmNiWGlVVHBDclFrNWR1SERtWERlMFFMQnp5cHZOVmxJWXMvYis0eGFEeFYwU0plbUc3TE0zczQxZ0JMZHlWamM3cTc1OFk1RXNOUFd3M1JpeStweGFtaE4wdXMzVDBwakFaU2twb1BMdnUxS3Q3M2M2VUoiLCJtYWMiOiIzNGM2Zjc0MDAxOTBiN2MxNmNhMDAwMDcwMTI1NjI2ZTZiMDBiMWQ2M2QwNWJlZGM2Yzk5YWRkNzg3NzdjZTk4IiwidGFnIjoiIn0%3D; expires=Sat, 03-Dec-2022 06:03:56 GMT; Max-Age=7200; path=/; domain=sendlane.com; secure; httponly; samesite=lax
Expires: Mon, 02 Jan 2023 04:03:56 GMT
Connection: close

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2708
Cache-Control: max-age=122761
Date: Sat, 03 Dec 2022 04:03:56 GMT
Etag: "6389fca1-117"
Expires: Sun, 04 Dec 2022 14:09:57 GMT
Last-Modified: Fri, 02 Dec 2022 13:24:49 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1516
Cache-Control: max-age=107908
Date: Sat, 03 Dec 2022 04:03:56 GMT
Etag: "6389c744-118"
Expires: Sun, 04 Dec 2022 10:02:24 GMT
Last-Modified: Fri, 02 Dec 2022 09:37:08 GMT
Server: ECS (amb/6B9D)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST /keyword/ HTTP/1.1 
Host: process.iconnode.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 988
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             13.248.238.122
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 37
server: Apache/2.4.54 () OpenSSL/1.0.2k-fips PHP/7.4.30
x-powered-by: PHP/7.4.30
access-control-allow-origin: https://www.usbfund.com
access-control-allow-credentials: true
access-control-max-age: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   37
Md5:    294301a02c05b5e45a73a1ab34e1f481
Sha1:   a20a918090a79dad1a597ad7d9723f86da6ebf0b
Sha256: fd65c5d696a53a04485aa8f8025ad82a0bba859fc3fa198bdc6cd36e4baa1557
                                        
                                            GET /REST/inShop/v1/getSettings?callback=_omnisend.setSettings&responseType=jsonp&shopHostname=www.usbfund.com&shopType=api&brandID=60034c978a48f7337bc1a105 HTTP/1.1 
Host: forms.soundestlink.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.18.30.243
HTTP/2 200 OK
content-type: application/json
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
cache-control: max-age=0, s-maxage=600, public
last-modified: Sat, 03 Dec 2022 04:03:56 GMT
x-envoy-upstream-service-time: 6
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: MISS
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 77396a51d864b505-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   30103
Md5:    808c52351a822ae3d8daa370415a9e25
Sha1:   514d266be65b0e0a00a0871e26f283825436ff81
Sha256: 0d3f0f2ff544d914f3e21b23583175f335fcdbc3b85fa5f048f2f35dcf1ed75f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=121054
Date: Sat, 03 Dec 2022 04:03:56 GMT
Etag: "6389fe27-1d7"
Expires: Sun, 04 Dec 2022 13:41:30 GMT
Last-Modified: Fri, 02 Dec 2022 13:31:19 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1U1kcYtPR_KRehLJkObf6jDsWVoI6wFKgOvcLiyAb6AJxJoQUV6LkA==
Age: 611

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Dec 2022 04:03:56 GMT
Last-Modified: Sat, 03 Dec 2022 03:53:58 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wJ1reCuFJiqmRR7sU0yubvseLyJDhNOErF7dZ8utkCCtyF4E1YzRLQ==
Age: 598

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=121070
Date: Sat, 03 Dec 2022 04:03:56 GMT
Etag: "6389fe27-1d7"
Expires: Sun, 04 Dec 2022 13:41:46 GMT
Last-Modified: Fri, 02 Dec 2022 13:31:19 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Du7xUlBRkdhzJdCy--H6xrEf2sTZH360MMb6X3Ix-y-0-oihb4JTig==
Age: 627

                                        
                                            GET /diffuser/diffuser.js HTTP/1.1 
Host: diffuser-cdn.app-us1.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.17.145.91
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Sat, 03 Dec 2022 04:03:55 GMT
last-modified: Thu, 21 Oct 2021 17:42:06 GMT
etag: W/"4d482a43613d3966f353ec9d97452e0c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=300
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 059f85e5e664bc876c915622803d9e28.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C2
x-amz-cf-id: LYgb7O-05A19YisedsHdW7Gqa3Bw46pjlPKvIkZSVBpaULKohYEzzQ==
cf-cache-status: HIT
age: 81
server: cloudflare
cf-ray: 77396a50ec56b4f7-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (63392), with no line terminators
Size:   19070
Md5:    86c5a8f1a956cd0fc352ed9d6dea1678
Sha1:   cebc7ecfecb71da68b4c24286f1a585900486a15
Sha256: 5278592a6c67f6353cc853057c97622b155d1b8453a861f390dd28df7d16f91e
                                        
                                            GET /t_prism_sitemessages.php?trackid=224499963&prismid=63178d6f-cadd-4eec-9d0d-b4d945932910&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow HTTP/1.1 
Host: trackcmp.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.64.145.151
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 0
x-powered-by: PHP/7.1.33
cache-control: no-cache, private
p3p: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"
x-privacy-policy: You can find our privacy policy here: https://www.activecampaign.com/help/privacy-policy/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77396a52edab0b51-OSL
X-Firefox-Spdy: h2

                                        
                                            GET /pixel.gif?clkgypv=jstag HTTP/1.1 
Host: aorta.clickagy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.156.212.180
HTTP/2 302 Found
content-type: application/json
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 0
location: https://pixel-sync.sitescout.com/connectors/clickagy/usersync?redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D
server: Aorta/20221117.e7edcc499
x-aorta-host: acdd2a5e90a4
x-aorta-region: us-east-1
access-control-allow-credentials: true
access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction
access-control-expose-headers: Set-Cookie
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin:
access-control-max-age: 31536000
cache-control: no-cache, no-store, must-revalidate
expect: 0
X-Firefox-Spdy: h2

                                        
                                            GET /liveramp_redir HTTP/1.1 
Host: aorta.clickagy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.156.212.180
HTTP/2 302 Found
content-type: application/json
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 0
location: https://id.rlcdn.com/711861.gif
server: Aorta/20221117.e7edcc499
x-aorta-host: e44271b36725
x-aorta-region: us-east-1
access-control-allow-credentials: true
access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction
access-control-expose-headers: Set-Cookie
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin:
access-control-max-age: 31536000
cache-control: no-cache, no-store, must-revalidate
expect: 0
X-Firefox-Spdy: h2

                                        
                                            GET /CompanyWidget.aspx?ID=100094667&WidgetType=1 HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             207.137.0.213
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                            
location: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
date: Sat, 03 Dec 2022 04:03:55 GMT
content-length: 196
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   196
Md5:    e4450c4791dadbc8f0fe8409a9b278ec
Sha1:   70f8e597f291a8a247c4f1bbbc4586e300f75723
Sha256: e350fe60679b3272336147b700171d459374f3a66c6e228673a94ec0d9239b7e
                                        
                                            GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 
Host: hemsync.clickagy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             52.200.196.186
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 28
access-control-allow-origin: https://www.usbfund.com
vary: origin
access-control-allow-credentials: true
access-control-expose-headers: content-length, last-modified, expires, content-type
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   28
Md5:    830cb026fae1a13104725d2b3100ec10
Sha1:   40188da405f4a93c90f0b5e060e0ccca8e483eba
Sha256: 4d32822dd4fd4e7b58950d7c693e301eaa19b29305077afaebc12852df7f4ee0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5342
Cache-Control: 'max-age=158059'
Date: Sat, 03 Dec 2022 04:03:56 GMT
Last-Modified: Sat, 03 Dec 2022 02:34:54 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /track.js HTTP/1.1 
Host: serve.albacross.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             143.204.55.30
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Apr 2021 13:13:21 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 03 Dec 2022 04:02:42 GMT
Cache-Control: max-age=120
ETag: W/"b769e9b4f23be6c9bab7c715fdf2526a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZB2mVBWr3I5NgfhwMbJ35cnd39o3PQvcB4iDxHRPiYGCO4f2dNR2eg==
Age: 86


--- Additional Info ---
Magic:  ASCII text, with very long lines (10418)
Size:   4085
Md5:    e062066a14a30b3ed3b72c5b31f21ffe
Sha1:   064e97457f03f59e40134ea46a21ba6e98a90c68
Sha256: 7bc78e48c07227b97701737a2799c978d37ff3f2350b02043ce69464de7399de
                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.101.11.57
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
                                            
last-modified: Thu, 17 Nov 2022 18:52:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=15477
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 4581
x-cdn: AKAM
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12961)
Size:   4581
Md5:    c1a25b303b61b25e995516f5559bcdea
Sha1:   3c16a6fa3a2a6dc59d57a9ea1588c4f259884688
Sha256: 2063d2d1415ce9437e9331cb9a798714a5b2e106a65d6dc0ef0d426a5a4c30f2
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.110
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 02:41:08 GMT
expires: Sat, 03 Dec 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 4968
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             88.221.99.189
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Accept-Ranges: bytes
ETag: "92b41a298690c047b0c4602dd843cba4:1662686319.691662"
Last-Modified: Fri, 09 Sep 2022 01:18:39 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 03 Dec 2022 04:03:56 GMT
Content-Length: 728
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"


--- Additional Info ---
Magic:  ASCII text, with very long lines (521)
Size:   728
Md5:    51a92d8c69733d719447dea0416ed039
Sha1:   69f4c1e0b7ebba812bc096708d57627927dff265
Sha256: cb483c0ea4012ac512bcba6204b37622b388c1aefd4ae9028f60abb965f23d29
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 16
Cache-Control: max-age=90894
Date: Sat, 03 Dec 2022 04:03:56 GMT
Etag: "63898aaa-1d7"
Expires: Sun, 04 Dec 2022 05:18:50 GMT
Last-Modified: Fri, 02 Dec 2022 05:18:34 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /5627136.js HTTP/1.1 
Host: js.hs-banner.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.64.154.85
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
x-amz-id-2: 4bRtauNUvUssf8zVKdPGO7lwcZbsC12CeHr9iIrIvuvqSrXWH1oiLHWBNTX7qDHTEtNTgBDWlMI=
x-amz-request-id: 4K1ZGM4TG9ZHG7WT
last-modified: Tue, 25 Oct 2022 20:40:18 GMT
etag: W/"cac405a2f26900fc1b5f45bc4b2fbd5a"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: zI4pJTLFNjPt5tClOnwXN36nhgXVyIrD
access-control-allow-origin: https://www.usbfund.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
vary: origin, Accept-Encoding
expires: Sat, 03 Dec 2022 04:08:56 GMT
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 77396a510bb2b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (60033)
Size:   19466
Md5:    a5a75ff9a6f42b6c2fcc255412d68212
Sha1:   ebad2542eeb695dd1995f20882c6d9dac5972c21
Sha256: 3886deb828ac6067117119d0d9b3aa96b8a362c842d3ac1bfa1362ea2e9fcad0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:56 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 13:42:55 GMT
Expires: Wed, 07 Dec 2022 13:42:54 GMT
Etag: "c9de39bb466bfb8f885bae78849b7049389e3483"
Cache-Control: max-age=379737,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77396a57abd00b31-OSL

                                        
                                            GET /sifitag/7c49dfc0-b0ef-0139-b544-06a60fe5fe77 HTTP/1.1 
Host: tag.simpli.fi
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             169.50.137.179
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 3101
set-cookie: suid=72BC7AE3BBFC4701AECF5DD41412E7E7; Path=/; domain=simpli.fi; Expires=Mon, 04-Dec-23 04:03:56 GMT; SameSite=none; Secure; suid_legacy=72BC7AE3BBFC4701AECF5DD41412E7E7; Path=/; domain=simpli.fi; Expires=Mon, 04-Dec-23 04:03:56 GMT; Secure;
x-request-id: Fy0sv0Niluk6U26R0wah
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=0, private, must-revalidate, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0, max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache, no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT, Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3100)
Size:   3101
Md5:    3f39bd6aa96de4bb5bd9275b06354981
Sha1:   14f61e1cbeb536266027c98d8f48cc3211f1a2b2
Sha256: 4f8cbfd5c952dcec41e51c8cdf551acc7acf44e7e4d51ab90be179a503fb4b00
                                        
                                            POST /j/collect?v=1&_v=j98&a=1179078057&t=pageview&_s=1&dl=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow&ul=en-us&de=UTF-8&dt=How%20To%20Get%20A%20Small%20Business%20Loan%20In%206%20Easy%20Steps%3F%20-%20US%20Business%20Funding&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YADAAEABAAAAACAEK~&jid=632227613&gjid=1931854083&cid=110267464.1670040234&tid=UA-237731194-1&_gid=27682426.1670040235&_r=1&gtm=2wgbu0NW5DZCL&cd18=16db76ee-3533-4f47-b146-502168af1cc8&cd19=GTM%20ID%2FGTM-NW5DZCL--GTM%20Version%2F9&cd20=2022-12-03T04%3A03%3A53.231%2B00%3A00&cd17=110267464.1670040234&cd14=pageview&z=498516891 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.110
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://www.usbfund.com
date: Sat, 03 Dec 2022 04:03:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            GET /connectors/clickagy/usersync?redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D HTTP/1.1 
Host: pixel-sync.sitescout.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             66.155.71.150
HTTP/2 302 Found
                                            
set-cookie: ssi=7cd1c1e2-7c20-442a-978d-a241b2264979#1670040236818; Domain=.sitescout.com; Expires=Sun, 03-Dec-2023 04:03:56 GMT; Path=/; Secure; SameSite=None
location: https://pixel-sync.sitescout.com/connectors/clickagy/usersync?cookieQ=1&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D
content-length: 0
date: Sat, 03 Dec 2022 04:03:56 GMT
server: AC1.1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   15658
Md5:    3a830c916b786b30573e378e7b69bd09
Sha1:   fa2f8dd2d42e27f99cd1c6f6af426be50fb11bdf
Sha256: c85affb20937d0b85671f4ccb7a60fed6afa26e7ae467c5add5daa1cf2515801
                                        
                                            GET /711861.gif HTTP/1.1 
Host: id.rlcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             35.244.174.68
HTTP/2 451 Unavailable For Legal Reasons
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /partner/58092/domain/usbfund.com/token HTTP/1.1 
Host: cdn.linkedin.oribi.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.usbfund.com/
Origin: https://www.usbfund.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.42
HTTP/2 200 OK
                                            
content-length: 0
date: Fri, 02 Dec 2022 19:48:46 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: imjLxSxa-YFvkXm53RU21FVmLxdcEySMyqru6UAEbxYv1Wsp86RkNg==
age: 29710
X-Firefox-Spdy: h2

                                        
                                            GET /wp-content/uploads/cropped-iconusbfund-32x32.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Cookie: _gcl_au=1.1.277558324.1670040233; wc_visitor=100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18; wc_client=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; wc_client_current=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; IR_gbd=usbfund.com; IR_7486=1670040233268%7C0%7C1670040233268%7C%7C; _ga_YYEX7W0G95=GS1.1.1670040233.1.0.1670040233.0.0.0; _ga=GA1.1.110267464.1670040234; __ss=1670040233580; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow; soundestID=20221203040353-oxLMahrA5v1EIEXPtK6YYYnRXKaIURfs1eN2sH8MuOVx2cW6m; omnisendAnonymousID=jHSIiDkBMX4gBg-20221203040353; omnisendSessionID=3gkcrOOoyKdxqO-20221203040353; __ss_tk=202212%7C638acaabc65096566d2662fd; prism_224499963=63178d6f-cadd-4eec-9d0d-b4d945932910; wc_swap=9494033493+..+9494611140+..+68836; soundest-views=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:14:07 GMT
accept-ranges: bytes
content-length: 1438
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:56 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   1438
Md5:    331f8022f00882988b3dd50a45511040
Sha1:   295b137770dedf8de5101ba30c05f515e21b6fb0
Sha256: f83bb7fbb6ab6b05a6129fdc513d6edeb3b9029b0cbe6cf3eae361ad56c58cf5
                                        
                                            GET /wp-content/uploads/cropped-iconusbfund-192x192.png HTTP/1.1 
Host: www.usbfund.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/get-a-small-business-loan/?utm_source=bayengage&utm_medium=campaign-email&utm_campaign=best-blogs-to-follow-about-cash-flow
Cookie: _gcl_au=1.1.277558324.1670040233; wc_visitor=100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18; wc_client=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; wc_client_current=bayengage+..+campaign-email+..+best-blogs-to-follow-about-cash-flow+..++..++..++..+https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow+..+100980-4100afdc-6f59-b078-62b8-dd2f43a1aa18+..+; IR_gbd=usbfund.com; IR_7486=1670040233268%7C0%7C1670040233268%7C%7C; _ga_YYEX7W0G95=GS1.1.1670040233.1.0.1670040233.0.0.0; _ga=GA1.1.110267464.1670040234; __ss=1670040233580; __ss_referrer=https%3A//www.usbfund.com/get-a-small-business-loan/%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow; soundestID=20221203040353-oxLMahrA5v1EIEXPtK6YYYnRXKaIURfs1eN2sH8MuOVx2cW6m; omnisendAnonymousID=jHSIiDkBMX4gBg-20221203040353; omnisendSessionID=3gkcrOOoyKdxqO-20221203040353; __ss_tk=202212%7C638acaabc65096566d2662fd; prism_224499963=63178d6f-cadd-4eec-9d0d-b4d945932910; wc_swap=9494033493+..+9494611140+..+68836; soundest-views=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             50.87.170.174
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Sat, 28 Sep 2019 00:15:06 GMT
accept-ranges: bytes
content-length: 19606
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
date: Sat, 03 Dec 2022 04:03:56 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   19606
Md5:    273b22a347363c8bfaa20ddcca897d53
Sha1:   0bf5106cb96db26030ae4bee997db3aef8914130
Sha256: 3c673a54e1fea64b6b57dc31365058249f665f327b0e032746b310a2f6a2c0b2
                                        
                                            GET /es6/init.462db28866d53d1d25a1.js HTTP/1.1 
Host: rec.smartlook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.usbfund.com
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             185.76.9.19
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Sat, 03 Dec 2022 04:03:56 GMT
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
cross-origin-resource-policy: cross-origin
etag: W/"63861b50-d477"
last-modified: Tue, 29 Nov 2022 14:46:40 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-accel-expires: @1701270485
server: CDN77-Turbo
x-77-nzt: AblMCQ0Mg2n/V6oEAA
x-77-nzt-ray: c0a4cc2889e34293acca8a63cd58602f
x-cache: HIT
x-age: 305751
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (54308)
Size:   14614
Md5:    0f17234020eddd568ca5cc33def347f5
Sha1:   83c47453b4c1b336f183349b585f4b1b4fb656cc
Sha256: 114dd8454a89de204d3fbdcfa9cd8938629809a659349a17efa05a8f46a9935e
                                        
                                            GET /companywidget.aspx?ID=100094667&WidgetType=1 HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             207.137.0.213
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
set-cookie: ASP.NET_SessionId=srwep11lsguoskdglfs3syn0; path=/; secure; HttpOnly; SameSite=Lax
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 6794
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (604), with CRLF line terminators
Size:   6794
Md5:    ebd923a90193ed376c4b4477a1552b04
Sha1:   68aaae37d3742bfc4b56b54041ac4fba1fc3f671
Sha256: 7e145b407007cb26285eb0a5518a1ff4059b61396e55baafed04619f04052a87
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 03 Dec 2022 04:03:56 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 13:42:55 GMT
Expires: Wed, 07 Dec 2022 13:42:54 GMT
Etag: "c9de39bb466bfb8f885bae78849b7049389e3483"
Cache-Control: max-age=379737,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77396a588c070b31-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sat, 03 Dec 2022 04:03:56 GMT
Etag: "638a893d-1d7"
Server: ECS (dcb/7EA4)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: x0YC-08lVIGEh2lBEVDRz99thB8dK7pW9qUpH3b-gaCpXEu-xIzTnw==

                                        
                                            GET /collect?v=2&fmt=js&pid=58092&time=1670040234819&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.usbfund.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             13.107.42.14
HTTP/2 302 Found
                                            
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D58092%26time%3D1670040234819%26url%3Dhttps%253A%252F%252Fwww.usbfund.com%252Fget-a-small-business-loan%252F%253Futm_source%253Dbayengage%2526utm_medium%253Dcampaign-email%2526utm_campaign%253Dbest-blogs-to-follow-about-cash-flow%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQIAGVFrW7NfTQAAAYTWJ7N9vG83Ola_6_R7vKAAWplRRksMrwT7bw2O8WlNu1zND8WgTceDHTJbAg; Max-Age=2592000; Expires=Mon, 02 Jan 2023 04:03:56 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure AnalyticsSyncHistory=AQIl7EcZHSmH0wAAAYTWJ7N9deoGaZJtWc5VRaIcSo2wNe49Q6x5f2PvNcqTxnYfDTW8O3V4-h1f7iMpJPLRFg; Max-Age=2592000; Expires=Mon, 02 Jan 2023 04:03:56 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&06239ae8-794c-4b5f-8c5b-d2c9695f6d1a"; domain=.linkedin.com; Path=/; Secure; Expires=Sun, 03-Dec-2023 04:03:56 GMT; SameSite=None lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2385:u=1:x=1:i=1670040236:t=1670126636:v=2:sig=AQG9Kmd2YP_nnRY3gBco9Xui9pBsFlRV"; Expires=Sun, 04 Dec 2022 04:03:56 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXu5IsU+zvnPF6fA3YTIw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 835C2B43A8184031BDC480B91C667054 Ref B: OSL30EDGE0216 Ref C: 2022-12-03T04:03:56Z
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /stylesheets/font-awesome.min.css HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             207.137.0.213
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: no-cache
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 21:47:32 GMT
accept-ranges: bytes
etag: "032466bcfed81:0"
vary: Accept-Encoding
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 6965
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   6965
Md5:    775375b17c16dc85854ba29bbba28807
Sha1:   91c2f8c2838211a85090f061340b6c0c24e763af
Sha256: e05c4f03a6c957e6b769e9ac46b9b6d7f1de8f46f49fc894be7c7493aaf4e033
                                        
                                            GET /stylesheets/jquery.selectBox.css HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             207.137.0.213
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                            
cache-control: no-cache
location: https://www.checkbca.org/stylesheets/jquery.selectbox.css
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 180
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   180
Md5:    65d99af646ca7622a01fc0d3eb7a6b6d
Sha1:   a6b71820c0572f17c183b5669255346947bc3492
Sha256: 425fea6b4acfc8c48eee414af2be035b5c77a87742cf0bb46b136d07e0c29f6a
                                        
                                            GET /stylesheets/style.css HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             207.137.0.213
HTTP/2 200 OK
content-type: text/css
                                            
cache-control: no-cache
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 21:47:32 GMT
accept-ranges: bytes
etag: "032466bcfed81:0"
vary: Accept-Encoding
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 10899
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, Unicode text, UTF-8 text, with very long lines (548), with CRLF line terminators
Size:   10899
Md5:    a3ec3a585ca53c4eaa1082ae3427a329
Sha1:   7f08739e149ab8dc280a05b280c31b04bfb1bd6d
Sha256: 1e44bca5aecfd50bff07a4df9f9bb9c524f6addd9c24bb8c463eef67798283c9
                                        
                                            GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D58092%26time%3D1670040234819%26url%3Dhttps%253A%252F%252Fwww.usbfund.com%252Fget-a-small-business-loan%252F%253Futm_source%253Dbayengage%2526utm_medium%253Dcampaign-email%2526utm_campaign%253Dbest-blogs-to-follow-about-cash-flow%26liSync%3Dtrue HTTP/1.1 
Host: www.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             13.107.42.14
HTTP/2 302 Found
                                            
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=58092&time=1670040234819&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None bcookie="v=2&0dfbda14-db4b-4ed9-8d39-c39640f83e33"; Domain=.linkedin.com; Expires=Sun, 03-Dec-2023 04:03:57 GMT; Path=/; Secure; SameSite=None bscookie="v=1&20221203040357e55e5d86-b561-49cf-8b50-8e6f1ebf406bAQF20JnU4pvK0WCVU_HTOtRovlnMdqVt"; Domain=.www.linkedin.com; Expires=Sun, 03-Dec-2023 04:03:57 GMT; Path=/; HttpOnly; Secure; SameSite=None li_gc=MTswOzE2NzAwNDAyMzc7MjswMjGHjRRyfnNjri69bpDxSbGNIKqf+WVuBy2kitLSgK2m8g==; Domain=.linkedin.com; Expires=Thu, 01 Jun 2023 04:03:57 GMT; Path=/; Secure; SameSite=None lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2385:u=1:x=1:i=1670040237:t=1670126637:v=2:sig=AQFN0BQ0aw3aoQ2lb3zFp9tK-3RUshdR"; Expires=Sun, 04 Dec 2022 04:03:57 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com onyx.www.linkedin.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXu5IsYCF75+5abPtj6Ug==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2DE5DA84D3B54988B5B3F1C9470AF864 Ref B: OSL30EDGE0216 Ref C: 2022-12-03T04:03:57Z
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /WebResource.axd?d=pynGkmcFUV13He1Qd6_TZBAd-3g2iBrrqGpefWWgmRAZw8TONzGF-aV_9TjkbkyCvwDWnstKlAYe583il9NLzw2&t=637823077705833095 HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             207.137.0.213
HTTP/2 200 OK
content-type: application/x-javascript
                                            
cache-control: public
content-encoding: gzip
expires: Sat, 02 Dec 2023 17:44:02 GMT
last-modified: Tue, 08 Mar 2022 11:42:50 GMT
vary: Accept-Encoding
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 23086
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   23086
Md5:    20180537e2ac64e5c60143ac90c84998
Sha1:   82d03de61c4dededbc9fd79d8c3a8e18d3b43744
Sha256: 0999cb5dfb2dcd76a944ef880be49f8e2d66fc60d00817e2b251ba0a67090cbf
                                        
                                            GET /Scripts/WebForms/MsAjax/MicrosoftAjax.js HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             207.137.0.213
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                            
cache-control: no-cache
location: https://www.checkbca.org/scripts/webforms/msajax/microsoftajax.js
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 188
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   188
Md5:    6f83537ac9d2567aa0049ad8d28282d8
Sha1:   7e4975fe0edee16d97ab1f59dd7473a95902f30e
Sha256: c614ae1fc44d88ab3555782295fd0de23f7b1062ef93e0777530a9ff2fdb2fe6
                                        
                                            GET /Scripts/WebForms/MsAjax/MicrosoftAjaxWebForms.js HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             207.137.0.213
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                            
cache-control: no-cache
location: https://www.checkbca.org/scripts/webforms/msajax/microsoftajaxwebforms.js
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 196
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   196
Md5:    95d708e49ef3d81c5832e354dbdafb01
Sha1:   ddb6aa6d1990a59c42331129fef517bb9101fad1
Sha256: 429e36746d58356e8d7fd50c755f2ec8de5fcf67bc3980f782eef9c14e89db18
                                        
                                            GET /scripts/jquery-3.3.1.min.js HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             207.137.0.213
HTTP/2 200 OK
content-type: application/javascript
                                            
cache-control: no-cache
content-encoding: gzip
last-modified: Tue, 16 Oct 2018 20:49:20 GMT
accept-ranges: bytes
etag: "0c813b69165d41:0"
vary: Accept-Encoding
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 30394
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30394
Md5:    a263be51483c81a54aa8c85104a93e55
Sha1:   555a54a73531c553bd2aede6abc25c128b63312e
Sha256: b2f13ad730928958c09d89e6e32bb6a227c0260d032a39ca464d998a59e57a66
                                        
                                            GET /scripts/jquery.simplemodal.1.4.4.min.js HTTP/1.1 
Host: www.checkbca.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.checkbca.org/companywidget.aspx?ID=100094667&WidgetType=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             207.137.0.213
HTTP/2 200 OK
content-type: application/javascript
                                            
cache-control: no-cache
content-encoding: gzip
last-modified: Tue, 16 Oct 2018 20:49:20 GMT
accept-ranges: bytes
etag: "0c813b69165d41:0"
vary: Accept-Encoding
date: Sat, 03 Dec 2022 04:03:56 GMT
content-length: 3081
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (626), with CRLF, LF line terminators
Size:   3081
Md5:    487fda8eb4e12565909588706300e2fb
Sha1:   9224d8c027d499bb7ec852c2bf3c580e593f5d5b
Sha256: 664736273b9cff9b035c3c682e6ea5e1220468bf24d3199d45148b0a45e101dc
                                        
                                            GET /collect?v=2&fmt=js&pid=58092&time=1670040234819&url=https%3A%2F%2Fwww.usbfund.com%2Fget-a-small-business-loan%2F%3Futm_source%3Dbayengage%26utm_medium%3Dcampaign-email%26utm_campaign%3Dbest-blogs-to-follow-about-cash-flow&liSync=true HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.usbfund.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors