rmcifinancial.com/enote/xchange/login.php
301 Moved Permanently 170 B URL HTTP/1.1 rmcifinancial.com/enote/xchange/login.php
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 5bf3a62c4baec1d7339bb0a03f5b9211
24008e686ae1f0102891d02c994cd38a403f10bf
646f4cebed77580971f73047ec463a1010e25d0101be2354f1ca6ed119b5ff7f
Analyzer Verdict Alert fortinet Phishing
GET /enote/xchange/login.php HTTP/1.1
Host: rmcifinancial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.19.10
Date: Mon, 26 Sep 2022 19:48:33 GMT
Content-Type: text/html
Content-Length: 170
Connection: keep-alive
Location: http://www.rmcifinancial.com/enote/xchange/login.php
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 19:15:19 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: N95d5Y7GgIdNdOtlbBjllhO7v_G6FdbDLE9QPmit_BataQTYvzmqYA==
Age: 1994
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10212
Expires: Mon, 26 Sep 2022 22:38:45 GMT
Date: Mon, 26 Sep 2022 19:48:33 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4kgf2lARtqyij_0xcYE93IdYw7qlAQwzkiwSZvJyp8ZknZP-VRiQoQ==
age: 54798
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 19:48:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.rmcifinancial.com/enote/xchange/login.php
301 Moved Permanently 170 B URL HTTP/1.1 www.rmcifinancial.com/enote/xchange/login.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 83a6454cce4b7a1caf09b9cbeb7e4783
6eb2445aa205e26d64064702252a9a75a052cb07
7f813f0c20e6ce9fa96e72ab33bbfc4fe411b183b8e94abc1551a4b71ee9e9eb
Analyzer Verdict Alert fortinet Phishing
GET /enote/xchange/login.php HTTP/1.1
Host: www.rmcifinancial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Sep 2022 19:48:34 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.rmcifinancial.com/enote/xchange/login.php
X-StackifyID: V2|d60d6a8d-d1ba-4395-9055-53a7a5533485|C78253|CD45445
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=yKDQ.HX4Yr_Qp8joqDf3WB043EfZQdVXj9302KZ1V1U-1664221714-0-AVBD5qtVTrkZcwrIJ3gKeEF5edCtSaePhFhs+0uHMUyt8SjajywWjp8cG0kj3prxNZW+zjTfrjYXoSDjJhK2LpdZB7uOq/bBF/t9So4JbRbF; path=/; expires=Mon, 26-Sep-22 20:18:34 GMT; domain=.www.rmcifinancial.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 750e848fcbe6b51d-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 19:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Mon, 26 Sep 2022 19:26:17 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OqQJ2VMUpUDffkPmRehHtwF1F0tV5_yrC45zbZfOYCgJcZhzrL4JNg==
Age: 2268
ocsp.digicert.com/
200 OK 471 B IP
Hash 5adb7eb1d103eadeeafac36e663ffdd3
23b784388dd634fa736cd60aed71570661e73d02
5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5601
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:34 GMT
Last-Modified: Mon, 26 Sep 2022 18:15:13 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash d6a542569e675f48f3f156558cf5e64b
2c2e865623a29225786515117c7e738fd8d2318a
5c80c8327352937b64fc4c679e066988d613673101c3518dcdd7212cfd7b8452
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:34 GMT
Server: ECS (amb/6BA3)
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Fq3T/p/kPqYV1UbDU/FnNQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DcC48DeONnDK5wHAUvcY5W4+K+M=
ocsp.digicert.com/
200 OK 279 B IP
Hash bddecffbabfee51d9960094502eac272
d686a32447a5cab561a0d3272f313e7a9cf01eb7
a57a4fe0e0ce9c4cbd59312ec9b7aa9264ae2cc187beae1a265f031a71f5a52f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5017
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:35 GMT
Last-Modified: Mon, 26 Sep 2022 18:24:58 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
IP
File type ASCII text, with very long lines (32038)
Hash 103708790db3586027df27ded660f8ef
d3f58fbe6e02cb4b8b34c6fd510e011cb325bc70
fdba876856bb6c2783df94cacb0f17b53fe33f1907135539272c0127b4270ffe
GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 06:35:13 GMT
expires: Mon, 25 Sep 2023 06:35:13 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 134002
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8b8991cd52713b4bf0784a9f6bc40c54
67b21456edb17c427ac70f4c31e42ff43342d6fc
3b63204a4b244e4bdfcc73f4f9635b6c170228ce4c28eb0cda4198ea4566678e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 19:48:35 GMT
Last-Modified: Mon, 26 Sep 2022 19:07:45 GMT
Server: ECS (dcb/7EEE)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sQ75OiFMVMq7YetMqoqSiDpKDe3Gc-u8LdI_4GsGEbon5Xsil3Ralg==
Age: 2450
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8b8991cd52713b4bf0784a9f6bc40c54
67b21456edb17c427ac70f4c31e42ff43342d6fc
3b63204a4b244e4bdfcc73f4f9635b6c170228ce4c28eb0cda4198ea4566678e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 19:48:35 GMT
Last-Modified: Mon, 26 Sep 2022 18:36:10 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AoEHRbV8SSt1zX2YqebCIhu-P4i4IzCLhgmCm_KxB6NyGhnmM9DWPA==
Age: 4345
static.fmgsuite.com/site/templates/global/img/brokerCheck-bar-logo.png
200 OK 6.1 kB URL HTTP/2 static.fmgsuite.com/site/templates/global/img/brokerCheck-bar-logo.png
IP
File type PNG image data, 150 x 21, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a702e6adbbb9c114979785ab0055ff7
bf5212d8445a8fbb5b26569bbe68735fc476e9a1
270a370311bb246a1b54005d05dbb6d51b4f20ac2c3dc19d98e68c20633eeecd
GET /site/templates/global/img/brokerCheck-bar-logo.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 6131
date: Mon, 26 Sep 2022 07:56:43 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:08 GMT
etag: "0a702e6adbbb9c114979785ab0055ff7"
x-amz-server-side-encryption: AES256
x-amz-version-id: WRIlwUHIL.TULAEvAcfk9mDazZEFOkHs
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6sdCYXekRjUEHcqxibn_R_VL8u5ru2YjHmuplzl2vqkzKe4gFmtwmg==
age: 42713
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8b8991cd52713b4bf0784a9f6bc40c54
67b21456edb17c427ac70f4c31e42ff43342d6fc
3b63204a4b244e4bdfcc73f4f9635b6c170228ce4c28eb0cda4198ea4566678e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 19:48:35 GMT
Last-Modified: Mon, 26 Sep 2022 19:08:15 GMT
Server: ECS (dcb/7F82)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VNro5CsHqFUObsMj-2yYzN4adc1L3QI2e6S1JLP43L-9Zmy7VdB2jg==
Age: 2420
s7.addthis.com/js/250/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/250/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116423 bytes)
Hash d5b9b7a3accd3b7b7de639c072ae3ee2
9583b5c046d78af5c6379d844219f828aa2222d0
648dad6716bb917c7d981e7772fca499d9583717fd83ffef47b0534cb9132b60
GET /js/250/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116423
x-check-cacheable: YES
date: Mon, 26 Sep 2022 19:48:35 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-thumbs.css?v=2.86.45.29790.353
200 OK 735 B URL HTTP/2 static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-thumbs.css?v=2.86.45.29790.353
IP
Hash 52ddd84a9f42c1d4cd86d518a7f7e8bc
4ac329c16a5277592fc12a37cca3d72ca4ec292f
d836d81acb5d5e712c55c4f7911d93513fe1d7d0336353085aa5bd0f36b6998c
GET /site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-thumbs.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 735
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:41 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: cZYQVvDgTxI1SGSmuX3qWyesg7SkYxVh
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 16:42:19 GMT
etag: "52ddd84a9f42c1d4cd86d518a7f7e8bc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RdjHBYdqYxWqUnTWXs_kqWKU2sKtSFTXs7ONON50GRpHTVNb0dJHXA==
age: 11177
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash bddecffbabfee51d9960094502eac272
d686a32447a5cab561a0d3272f313e7a9cf01eb7
a57a4fe0e0ce9c4cbd59312ec9b7aa9264ae2cc187beae1a265f031a71f5a52f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5017
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:35 GMT
Last-Modified: Mon, 26 Sep 2022 18:24:58 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
cdnjs.cloudflare.com/ajax/libs/dygraph/1.1.1/dygraph-combined.js
200 OK 32 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/dygraph/1.1.1/dygraph-combined.js
IP
File type ASCII text, with very long lines (32128)
Hash 4c75d6a86c95d0837d29b4556f784f49
4b41af24b00be27d245e5ab41f4b4206c2c8ca0b
2ed3f0ae8a0b3ac2ce806cb4a58623f0d7742189c52f83b359fb525fdce7ff00
GET /ajax/libs/dygraph/1.1.1/dygraph-combined.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 19:48:35 GMT
content-type: application/javascript; charset=utf-8
content-length: 31981
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e3e-1ea17"
last-modified: Mon, 04 May 2020 16:09:34 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 4663564
expires: Sat, 16 Sep 2023 19:48:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4GF7%2BYbkeab83259kC3Pont77apSXR8DIga3Rdt7A6wGLMKOoFcwIvIWoi45xRRAJ66l%2BUJoTSFhRNeLNtdFp7HoTarQlolTDF0JQA8ilF%2Ff7UaQIokq36Q7IJj6nrvdtvV2PqpK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 750e849bbbacb51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8b8991cd52713b4bf0784a9f6bc40c54
67b21456edb17c427ac70f4c31e42ff43342d6fc
3b63204a4b244e4bdfcc73f4f9635b6c170228ce4c28eb0cda4198ea4566678e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 19:48:35 GMT
Server: ECS (dcb/7F7F)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tXrigGYFx0C6jmfwSorCC5Op9ZzWPs6f20cxV20dxxlESHowZVFYdQ==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8b8991cd52713b4bf0784a9f6bc40c54
67b21456edb17c427ac70f4c31e42ff43342d6fc
3b63204a4b244e4bdfcc73f4f9635b6c170228ce4c28eb0cda4198ea4566678e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 19:48:35 GMT
Server: ECS (dcb/7F84)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RaG8ZY4fEtX7KhyE39R9kZhGkHLDVvdr89Ls15s_QewKno0_aixALw==
static.fmgsuite.com/site/templates/006/css/overrides.css?v=2.86.45.29790.353
200 OK 3 B URL HTTP/2 static.fmgsuite.com/site/templates/006/css/overrides.css?v=2.86.45.29790.353
IP
File type Unicode text, UTF-8 text, with no line terminators
Hash ecaa88f7fa0bf610a5a26cf545dcd3aa
57218c316b6921e2cd61027a2387edc31a2d9471
f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
GET /site/templates/006/css/overrides.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 3
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: hmoNDPJdyk7Xzm7DtsalrKhrcNEl8aPI
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 16:42:03 GMT
etag: "ecaa88f7fa0bf610a5a26cf545dcd3aa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GOeRDiQ7HtDtbjysX6TSFPBYzYlaCdtLsenXGNtrQS69VNF0bvU5GQ==
age: 11193
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e1a8e1e39cb8ba365a3e6c3e9f28bcdb
5d08cb6ebad3c0e5038c8a90a9bc43fe453b1887
ba3ab1c6eed4c7210887161a4cde90995eb4c6b28c22caedd9563deb71c76c7d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 19:48:35 GMT
Last-Modified: Mon, 26 Sep 2022 18:55:13 GMT
Server: ECS (nyb/1D13)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CiOwnD2Bes_hU_RmConvdFir3-V9_O0A-RnjIZg9dsKZ45DJQndJ0g==
Age: 3202
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586
200 OK 22 kB URL HTTP/1.1 static.site24x7rum.com/beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586
IP
File type ASCII text, with very long lines (32144)
Hash 5869e4aefabe888c591606de2e2f5d78
1533266b9ee27da5a254f6344c8805912e04041f
101990976c44f678463721c36b31539c9382c5a9ef9323fe3765dc99f1f527c9
GET /beacon/site24x7rum-min.js?appKey=bf43c1778f8d741b80145273d2fd6586 HTTP/1.1
Host: static.site24x7rum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=ISO-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 26 Sep 2022 18:33:47 GMT
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Server: ZGS
Vary: accept-encoding
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oba5zuuliw34g-4KKhDF2VHcr4PMdqMpHQbq-rECR9HnY_5GF2sGeg==
Age: 4488
fmg-websites-custom.s3.amazonaws.com/js/video-scroll-play.js
200 OK 1.2 kB URL HTTP/1.1 fmg-websites-custom.s3.amazonaws.com/js/video-scroll-play.js
IP
Hash 50312a38575f9eea8bfdf6137a81fd95
501aaa70d4cdea7e444e7965d687dd0c97f8dc19
df1f6270d9ebba49b2c41c8a1368df421d0acee0f6b02754ca3f3d5aa47ac9e4
GET /js/video-scroll-play.js HTTP/1.1
Host: fmg-websites-custom.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: SuVwTg1dyrHn4XGRaRa0QOhV4Yu6jRDmU9TpFoYQhpEaQoAECG7TA3NapFoYTTHyeM/VrW+PQ0w=
x-amz-request-id: T5TAQA5GBCKT60KZ
Date: Mon, 26 Sep 2022 19:48:36 GMT
Last-Modified: Thu, 04 Oct 2018 13:08:13 GMT
ETag: "50312a38575f9eea8bfdf6137a81fd95"
x-amz-version-id: tiirIdl3u7DFLc7vP_Eo7gHO0KKxD6V8
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 1154
static.fmgsuite.com/site/templates/fancybox/2.1.5/lib/jquery.mousewheel-3.0.6.pack.js?v=2.86.45.29790.353
200 OK 1.2 kB URL HTTP/2 static.fmgsuite.com/site/templates/fancybox/2.1.5/lib/jquery.mousewheel-3.0.6.pack.js?v=2.86.45.29790.353
IP
Hash 5e2934f706d3f24fbbc6cacd99372fed
3e9411d13e07a2cd409aff0574916836404c514e
a159e62519c4201ec2b213abbe80efd234f962bb17e3c49df34230430b59f0be
GET /site/templates/fancybox/2.1.5/lib/jquery.mousewheel-3.0.6.pack.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Sun, 25 Sep 2022 21:01:31 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:40 GMT
etag: W/"fde6509fae2cafdb6d97e4a9a60cce66"
x-amz-server-side-encryption: AES256
x-amz-version-id: xUW3miJjDnssEeS40CUm.4HaOc3.U6V3
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DWNEvrUlthrfoLfpGja5vOovX2HHshF3XVMPwk7crw3qypb2FIzJmg==
age: 82025
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-buttons.js?v=2.86.45.29790.353
200 OK 1.6 kB URL HTTP/2 static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-buttons.js?v=2.86.45.29790.353
IP
Hash 3be135747eda8ce3696d71033d02bfd5
e37ab36c537827ae5094c2ae546fc1bd2ef603e3
d964144ef4c6691d6d31c5c7377c613b99805c0bea87394d03bdf60a8bfd7ae8
GET /site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-buttons.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:41 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: zNfc3o1Swve8lr.Ij0LXW0ECZg0nBzKa
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 02:32:31 GMT
etag: W/"f53c246661fb995a3f12e67fa38e0fa0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s_LWhdBmCLz26oMeQvwiZJGkT61s97mJHNQhX8PfKOPZbcm4W-Uv1g==
age: 62165
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-media.js?v=2.86.45.29790.353
200 OK 2.5 kB URL HTTP/2 static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-media.js?v=2.86.45.29790.353
IP
Hash d5cbc45b51650e0b3d6d4803aacd309a
f1d7ffb0e0162aae438068acf883c4ee4dd5b9c0
9f12eff8975841115693b344c5ae6ac1fde98c67bf24ef91ad821e110a009cbe
GET /site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-media.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Mon, 26 Sep 2022 05:04:48 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:41 GMT
etag: W/"c017067f48d97ec4a077ccdf056e6a2e"
x-amz-server-side-encryption: AES256
x-amz-version-id: jAq5a92YnzB.GhB6SQXU_OkJ2WpmfYqR
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9pDOFCxvIUQgzjFgY6VOXsqPAf6N5SJASA0WCG12CrIYO2iBL52jhA==
age: 53028
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-thumbs.js?v=2.86.45.29790.353
200 OK 2.0 kB URL HTTP/2 static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-thumbs.js?v=2.86.45.29790.353
IP
Hash 40190c02126c868be821dcaa918ff787
b29168bc88334c71e85c00a6aa8b0ed2e527e964
5de528649f9daa9e35ac274889acdbb011b5a1321ccff78abf98d46294a9fcee
GET /site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-thumbs.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:41 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: HrrwSCgRNZPzdspdcNz9INmdi_Eqm7hQ
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 05:27:15 GMT
etag: W/"cf1fc1df534eede4cb460c5cbd71aba6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dGdcdsCjQCRkNEoQkiLSVaHG6AHCRCDf65OREC5W-0q2-3qRlaz8pw==
age: 51681
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/shared/scripts/jquery.validate.js?v=2.86.45.29790.353
200 OK 13 kB URL HTTP/2 static.fmgsuite.com/site/templates/shared/scripts/jquery.validate.js?v=2.86.45.29790.353
IP
Hash 24c96a723912725917f0e862d25ecf9a
cc13b2c26922462da9b8cad64e692d72025e74db
7077264a2ebdb0d9b485bdd83eceadc3b2921a36654c88df558696556e85e841
GET /site/templates/shared/scripts/jquery.validate.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Mon, 26 Sep 2022 05:49:20 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:24 GMT
etag: W/"93326a29b21f3075babcf7f1f2dcef1e"
x-amz-server-side-encryption: AES256
x-amz-version-id: nz_bah1rEZSEapB35n0ZQwCBPioQRC8J
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S1DB99xmTZWE0wyAUX_F5UFMPlfy4kgKYOEpfHWQwxRroTynEin5kw==
age: 50356
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fe8c4f0c70fb6c1f4259eabedc7015e
85e378d0fff856832a8dd01743516b9476fed8c6
508a1c7d350fcf82d1ece0b99f8557b2f300c7c1148f28c3ae9fece20530e4b6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5157
x-amzn-requestid: b5748f49-693f-4bc3-a850-cb68e770de24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUG9GUHIAMF7pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd5f-5d2aaa212cf1be2506593746;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4h9lb_7egxb2hBbxjcS_cpZ5lDq6Lx-c_WUZyRHdUA0YTwr6kgDuiQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:10:16 GMT
age: 77900
etag: "85e378d0fff856832a8dd01743516b9476fed8c6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c11e6fef1be62b971bd9daf378bfc95
ef9d756cbcda72cf7ef5029b7d384cd1fbaed633
b8369f83d6dddcd2355b81d8eb200791788165e56881ce21e1a1e9c8bb1bb2ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13584
x-amzn-requestid: 198bd2b4-d4ae-4f19-a500-463aee52b890
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHgFdNoAMFwEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc9-19a1f7d2102820da4b21f18b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yl8BCwdlIePsc4gIX4IYH0L6NHipn_5fBsa9nyYy14w0m49jPUYXBw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:57:51 GMT
age: 78645
etag: "ef9d756cbcda72cf7ef5029b7d384cd1fbaed633"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.rmcifinancial.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 527895
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ef17205adb2b478d3bff54b048208d22
12aac1bd22e675f09a220de08b4656e801c2e647
620fe39cf421ed3a21e968570f7e863d69224113be867ec2457ed3850ea113f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5980
x-amzn-requestid: fbf0c390-da24-49e2-8492-43e29e5d4bb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHCGJVoAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc6-1f9b1b7d63467c58702e6d7e;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:38 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Iy0oyFx_T6CEuOQckEzvUQOUo307Jm_OgJzomWlMz9BhgD3eOaysdA==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 18:14:05 GMT
age: 5671
etag: "12aac1bd22e675f09a220de08b4656e801c2e647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.rmcifinancial.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 17:10:21 GMT
expires: Wed, 20 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 527895
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d02ede0c964f3346fd53ae2950bf2a62
e49306a3713cb724be024a4ddb5e90645718a718
c0e653d89656016c55aca9b198b9191620f1ae9a3c45742a90744bd74c4f9505
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8637
x-amzn-requestid: 07dc23e0-000f-4f6c-8d2b-0e65d88be270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvvEenoAMFr0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-520803124760abc216152d7b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HCJ483GPdpPhC7oYm1GrA02BqqST9sfqfCBSA93rZqaQYl-jezgP5Q==
via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:20:40 GMT
age: 77276
etag: "e49306a3713cb724be024a4ddb5e90645718a718"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Hash b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rN_8rm10Pxb0AUKW6ECfNulcYxBaS7FgGD15gT14dX-FlsGJfqahxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:37:35 GMT
age: 79861
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 968b9c138702fb5994d1d9eab1a697fa
9660bb2d38079182efbd11d7a687bfc7f9d30751
5ba74820ad451747c8ed25529f06b037bebf4c0616a1f2165c9197c1171db7a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11728
x-amzn-requestid: bf60e58f-c4f4-45c7-923b-0d1539f720f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUCGGw7oAMF3wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd40-32043c1b1411544f5d00edc0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:50:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: H4KXhBaRw3SvzBrbl30mV6R_vJ8bXBkyicb8fQiTp6YSBHjE8iFkNQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:49:56 GMT
etag: "9660bb2d38079182efbd11d7a687bfc7f9d30751"
content-type: image/jpeg
age: 75520
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.fmgsuite.com/media/images/f676b5e0-fa99-48ba-a273-e4d6a162d4f0.jpg
200 OK 76 kB URL HTTP/2 static.fmgsuite.com/media/images/f676b5e0-fa99-48ba-a273-e4d6a162d4f0.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x380, components 3\012- data
Hash c446e21239be68320489a9c903d5957e
5c5244a65aa03d08ebd7d940778c3fdbccc224a0
756a7a1ce7931a68679c2ca3acbcac2d231d07af6ad607b024f5f1c16d02493f
GET /media/images/f676b5e0-fa99-48ba-a273-e4d6a162d4f0.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 75509
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2016 15:39:09 GMT
x-amz-version-id: tN8x5KA.hxjjcfEIpWUhPFs4wFPNkpvw
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 19:48:37 GMT
etag: "c446e21239be68320489a9c903d5957e"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YdyuE9Gq7wwfYP0wCZtnLiO12sZ5vF26df_qrACFJXy24EHiTSy_kQ==
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Mon, 26 Sep 2022 19:48:36 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
static.fmgsuite.com/media/images/34f0d60c-800b-4841-b50c-f6a1e0fff14b.jpg
200 OK 87 kB URL HTTP/2 static.fmgsuite.com/media/images/34f0d60c-800b-4841-b50c-f6a1e0fff14b.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x380, components 3\012- data
Hash 2c66a6afb2d6a9ea94434bf457c26868
10b84b2325847e1fdba1b1ec3b7d51f32349f54f
3879844c017fa83442e17dfe25c0f1a8d29be59bf4fc8d5a33a0372a48e9a779
GET /media/images/34f0d60c-800b-4841-b50c-f6a1e0fff14b.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 87105
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2016 15:35:06 GMT
x-amz-version-id: xmlwkBy9ZzzEq_3mwquNiDKQLAR4G75e
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 19:48:37 GMT
etag: "2c66a6afb2d6a9ea94434bf457c26868"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B8_U4Xv28w3W8HT224BpSscUfJAol7j31ggNsWVjX5yIpG_wkUMAEQ==
X-Firefox-Spdy: h2
static.fmgsuite.com/media/images/a1cf9a71-1489-49ae-b6ec-554b628b1a87.jpg
200 OK 48 kB URL HTTP/2 static.fmgsuite.com/media/images/a1cf9a71-1489-49ae-b6ec-554b628b1a87.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x380, components 3\012- data
Hash f7f658847439cc1a6297f508bb0d3756
afad031c40809897e8e3e295a5df669eafc24b21
837ccb00a9dc4fb920e0649cef67f8aa930f8337b2a444cda3e22f8514e042f3
GET /media/images/a1cf9a71-1489-49ae-b6ec-554b628b1a87.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 48434
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Aug 2016 16:02:23 GMT
x-amz-version-id: MaUZbtmqEVTPyoXJuNesUHkWkzO8Bvdt
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 19:48:37 GMT
etag: "f7f658847439cc1a6297f508bb0d3756"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z6rjBWR6In6poan4IloBOPTXmJFw0zFcdmnzw9VvuaImialooMTR7w==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.fmgsuite.com/media/images/9fc904a9-58f7-4498-bd44-483b604f1acd.png
200 OK 96 kB URL HTTP/2 static.fmgsuite.com/media/images/9fc904a9-58f7-4498-bd44-483b604f1acd.png
IP
File type PNG image data, 1198 x 182, 8-bit/color RGBA, non-interlaced\012- data
Hash 2fa787ecabc02861120566210cd97abf
7830d21d7f222c32aa4ded7b7ca8924d3f4686b6
93062d9a9b7c4ffb521a5c03783313aa4e693c1c4929efa3a30637cf9bf459e5
GET /media/images/9fc904a9-58f7-4498-bd44-483b604f1acd.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 95793
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Jul 2016 13:28:52 GMT
x-amz-version-id: Clu9J8VQT7Sf79BM2w16fjORd8ec2LT9
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 19:48:37 GMT
etag: "2fa787ecabc02861120566210cd97abf"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FPZVyY62HZVEeGaBexvkGD78UJe9fExNH4mpOqNm24YBK6GnzTCebw==
X-Firefox-Spdy: h2
static.fmgsuite.com/media/images/c604c550-0929-42d2-ba76-caf2cbe192d0.jpg
200 OK 130 kB URL HTTP/2 static.fmgsuite.com/media/images/c604c550-0929-42d2-ba76-caf2cbe192d0.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 848x564, components 3\012- data
Size 130 kB (130205 bytes)
Hash 9aba61101922c19d44dca12bb8deecf8
d46269969526095ab50359befbe0477f2470edfb
de6c1f0da5b6cc0473c7f99e3fb4de05285000cea2389a01553be46d7a70e51f
GET /media/images/c604c550-0929-42d2-ba76-caf2cbe192d0.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 130205
x-amz-replication-status: COMPLETED
last-modified: Tue, 19 Jul 2016 15:02:00 GMT
x-amz-version-id: sJHVPIU1yZiZjH8JCSQ2175zmxtUdzCZ
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 19:48:37 GMT
etag: "9aba61101922c19d44dca12bb8deecf8"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _7Y-bwTwviJxj_dhkMSbxrTVmoTBvgpnThuZAK3EMYxd-aSMEXghzg==
X-Firefox-Spdy: h2
static.fmgsuite.com/media/images/043c7bd3-9d9c-4dbf-af0d-c8f3180831b7.png
200 OK 1.2 MB URL HTTP/2 static.fmgsuite.com/media/images/043c7bd3-9d9c-4dbf-af0d-c8f3180831b7.png
IP
File type PNG image data, 1200 x 585, 8-bit/color RGB, non-interlaced\012- data
Size 1.2 MB (1213374 bytes)
Hash f47b0ac95e0bd22ecd177079e5a8ec4b
4013bf9831e9731ac53f6a3e78d055e258f750ec
2f602d6aca58e316b0a0bcc9cdcd70f5ea46bf1124242e16025679eec1858b9a
GET /media/images/043c7bd3-9d9c-4dbf-af0d-c8f3180831b7.png HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1213374
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2016 17:22:59 GMT
x-amz-version-id: EBmBS6SasIhXiiKYWb4PvrWRLIdArNyJ
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 19:48:37 GMT
etag: "f47b0ac95e0bd22ecd177079e5a8ec4b"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DTeIxeQHnAB7K29udj0surot-13BTfd-u2AYRnZj0zUbiFWY6GtJbA==
X-Firefox-Spdy: h2
static.fmgsuite.com/media/images/b8dfafab-65b9-4160-8ccf-42d3a68515e1.jpg
200 OK 25 kB URL HTTP/2 static.fmgsuite.com/media/images/b8dfafab-65b9-4160-8ccf-42d3a68515e1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 960x180, components 3\012- data
Hash 3c29f06b518aad278dfcc147e60f5652
177ba3cf48e216cecf90ce187b6d351f528c0a21
bf85e2d800e1406a5fde1331edda3545e4f848b8d3b404ed9d928129b5dc30fc
GET /media/images/b8dfafab-65b9-4160-8ccf-42d3a68515e1.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 24695
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2016 17:27:39 GMT
x-amz-version-id: M0DiqGhtmlYTrXwVFprTJNSswZZcyPTw
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 19:48:37 GMT
etag: "3c29f06b518aad278dfcc147e60f5652"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BOwSm-8MXRde7QbkUiRMBuoCAyFdP4Cs4-joSflj_hT_wF2VKagOiA==
X-Firefox-Spdy: h2
static.fmgsuite.com/media/images/1b4cd92f-a017-4cc3-aaf3-1caf3d5e2eaf.jpg
200 OK 264 kB URL HTTP/2 static.fmgsuite.com/media/images/1b4cd92f-a017-4cc3-aaf3-1caf3d5e2eaf.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1200x758, components 3\012- data
Size 264 kB (263452 bytes)
Hash 6c48c53fca3ff4b20b6b6e4cf43f60f9
9d0340e65df7a4b7dc7e3b66fa8146450ba78f02
f133fbd4c20b11db9e3fdf397e4f7c55bef4107111f56389b3fa1e9853694411
GET /media/images/1b4cd92f-a017-4cc3-aaf3-1caf3d5e2eaf.jpg HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 263452
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2016 17:26:21 GMT
x-amz-version-id: CM9Voy8NgS8wBBqxijFtOxzPK3f_24NZ
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 19:48:37 GMT
etag: "6c48c53fca3ff4b20b6b6e4cf43f60f9"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: htyicAqmn_3r7moms_l9oyrMPkS7_fcwKeheGQgUDB38v8Dalv579w==
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=51127
date: Mon, 26 Sep 2022 19:48:36 GMT
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Mon, 26 Sep 2022 18:41:09 GMT
expires: Mon, 26 Sep 2022 20:41:09 GMT
cache-control: public, max-age=7200
age: 4047
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/fancybox/2.1.5/source/jquery.fancybox.css?v=2.86.45.29790.353
200 OK 1.4 kB URL HTTP/2 static.fmgsuite.com/site/templates/fancybox/2.1.5/source/jquery.fancybox.css?v=2.86.45.29790.353
IP
Hash bdbef86ceaff00921666b2cb533c3a73
d87febc41ec3c2799540712a12e1457267eb9004
afa2d8badf7474ebb3d44682589c62d3a91a0ddebc3642369a127be2dabab33f
GET /site/templates/fancybox/2.1.5/source/jquery.fancybox.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 26 Sep 2022 07:18:54 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:41 GMT
etag: W/"6c55951ce1e3115711f63f99b7501f3a"
x-amz-server-side-encryption: AES256
x-amz-version-id: nlyDpaCUma.T19lPFzDIp0UXftHpVPCn
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZMvvqopmvwwlsJn3EtckyYIAvwvel1I4k4F1hsuYcXZQt7pUIcG8PQ==
age: 44982
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/ra-4dac6baa77f4cfd0/_ate.track.config_resp
200 OK 47 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-4dac6baa77f4cfd0/_ate.track.config_resp
IP
File type ASCII text, with no line terminators
Hash 24c668b115f75423506f2ea21d1b49c2
14f956ddb2d9e8b072cd5f605c3f39526490b391
b542daef470a9730029174f975ce3ce236b3e58bf9183b11956acce994b13a16
GET /live/boost/ra-4dac6baa77f4cfd0/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 47
cache-control: public, max-age=51, s-maxage=86400
date: Mon, 26 Sep 2022 19:48:36 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300lo.json?si=633202121f33c61a&bkl=0&bl=1&pdt=1657&sid=633202121f33c61a&pub=ra-4dac6baa77f4cfd0&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=www.rmcifinancial.com&fp=%3FredirectUrl%3D%2Fenote%2Fxchange%2Flogin.php&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1664221714290&jsl=1&uvs=63320212a7d077d5000&skipb=1&callback=addthis.cbs.jsonp__82733274172796080
200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=633202121f33c61a&bkl=0&bl=1&pdt=1657&sid=633202121f33c61a&pub=ra-4dac6baa77f4cfd0&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=www.rmcifinancial.com&fp=%3FredirectUrl%3D%2Fenote%2Fxchange%2Flogin.php&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1664221714290&jsl=1&uvs=63320212a7d077d5000&skipb=1&callback=addthis.cbs.jsonp__82733274172796080
IP
File type ASCII text, with no line terminators
Hash 8678e01da01b384dbd7bc112bdfe8b2c
220d64a114055338aefe16648328ecf60cca43d9
7e7bb523f968c680993a63a9a8afec69da53951ac710a632ebe0799a40a3f679
GET /live/red_lojson/300lo.json?si=633202121f33c61a&bkl=0&bl=1&pdt=1657&sid=633202121f33c61a&pub=ra-4dac6baa77f4cfd0&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=www.rmcifinancial.com&fp=%3FredirectUrl%3D%2Fenote%2Fxchange%2Flogin.php&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1664221714290&jsl=1&uvs=63320212a7d077d5000&skipb=1&callback=addthis.cbs.jsonp__82733274172796080 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Mon, 26 Sep 2022 19:48:36 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d095ec6a56142cb2084481b06881ef4
82ff236023008fbfb871aaa7c1e976e0cf15e91a
791ac45152415413d4af27f3dde61a021c9c57dcf7ca5b0e65300ebc3cd8815d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-24680519-10&cid=788748041.1664221715&jid=255987671&gjid=1169022739&_gid=2058823429.1664221715&_u=YEDAAUABAAAAAC~&z=1536809883
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-24680519-10&cid=788748041.1664221715&jid=255987671&gjid=1169022739&_gid=2058823429.1664221715&_u=YEDAAUABAAAAAC~&z=1536809883
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-24680519-10&cid=788748041.1664221715&jid=255987671&gjid=1169022739&_gid=2058823429.1664221715&_u=YEDAAUABAAAAAC~&z=1536809883 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.rmcifinancial.com
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.rmcifinancial.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 26 Sep 2022 19:48:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d095ec6a56142cb2084481b06881ef4
82ff236023008fbfb871aaa7c1e976e0cf15e91a
791ac45152415413d4af27f3dde61a021c9c57dcf7ca5b0e65300ebc3cd8815d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.fmgsuite.com/site/templates/bootstrap/3.3.4/css/bootstrap.min.css?v=2.86.45.29790.353
200 OK 20 kB URL HTTP/2 static.fmgsuite.com/site/templates/bootstrap/3.3.4/css/bootstrap.min.css?v=2.86.45.29790.353
IP
Hash 8fa7741e6a6ad6c568e7c588a1b51cff
072e25dbe644f9ffde3d66e891fc8929e4f2d8be
d0da1441873a5f6df3f11c5c7aefd0cd96d416b1c45e15748a88ba2f85081184
GET /site/templates/bootstrap/3.3.4/css/bootstrap.min.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:38 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: yhwdyEvwkhcbOgB1QHSbP0SN1har1nXo
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 05:36:14 GMT
etag: W/"eedf9ee80c2faa4e1b9ab9017cdfcb88"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Kc-8haXYs_RX9JJdtlQXagjwhUr2Llk6d1OAZS6_q1vLNDHWv2BXPQ==
age: 51142
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=788748041.1664221715&jid=255987671&_u=YEDAAUABAAAAAC~&z=263271300
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=788748041.1664221715&jid=255987671&_u=YEDAAUABAAAAAC~&z=263271300
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=788748041.1664221715&jid=255987671&_u=YEDAAUABAAAAAC~&z=263271300 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 26 Sep 2022 19:48:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=788748041.1664221715&jid=255987671&_u=YEDAAUABAAAAAC~&z=263271300
200 OK 745 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=788748041.1664221715&jid=255987671&_u=YEDAAUABAAAAAC~&z=263271300
IP
File type gzip compressed data, from Unix\012- data
Hash 10b244740fbe1438666e2a9ea82b11da
a8f8d6321035b448f3c851f2be66eeb04c1e62ce
c41ef29765031e0d19874840b3ceb0bfe60157ce49526a2a68ac563185fe1bde
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-24680519-10&cid=788748041.1664221715&jid=255987671&_u=YEDAAUABAAAAAC~&z=263271300 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 26 Sep 2022 19:48:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4538701cf9bc34d908f50370beb922f4
df141b9c3ec626ecaba7c1899073a48b811c4113
61497b93eb237687a8fff5845a7a81aff2f2f53dc56f2d0818bfb98dd1256d6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 19:48:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.fmgsuite.com/site/templates/global/js/popup-form.js?v=2.86.45.29790.353
200 OK 6.2 kB URL HTTP/2 static.fmgsuite.com/site/templates/global/js/popup-form.js?v=2.86.45.29790.353
IP
Hash f31c290f9c0b76de6f7a75d0512cc5f8
bb550cf396f1844314dc002cd22a20085f16e0b7
ede5d8f6fd9afc03637d313428a2e751154a82b3876f12f2bc2fb7f988c36c6d
GET /site/templates/global/js/popup-form.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:16 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: D0BxntQSB4RxW1RyyTPwjYtyNWBIfsaZ
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 16:15:36 GMT
etag: W/"ff183398f2af66106edd0dae0f08da3c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _S2rMlkDC_TyNZt8u4t2qdOt-n3MQzbBPPJ8icAqs-nWPRH8NZzR-w==
age: 12780
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e87e073013e066216e6d8eb88bfcdba8
b0d1424ab2cb5b0f498d6829183a91c33c4255d5
00a9ad4bb6439a5a7f8b8169982664772baf677582d6879acfe610c7952e4dc9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 19:48:37 GMT
Last-Modified: Mon, 26 Sep 2022 19:08:16 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tXOfEVSH6xs7Dl0X5deDBXkraXaV4EIJq98V57g4Dl9pbESQsxPXVg==
Age: 2421
col.site24x7rum.com/rum/data
200 OK 0 B URL HTTP/2 col.site24x7rum.com/rum/data
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /rum/data HTTP/1.1
Host: col.site24x7rum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2906
Origin: https://www.rmcifinancial.com
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 19:48:37 GMT
content-type: application/json;charset=ISO-8859-1
content-length: 0
access-control-allow-methods: POST,OPTIONS
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-headers: request-id, request-context, Origin, Accept-Language
set-cookie: s247cname=406b5ee2-d0cc-402f-bd6c-e51325c22ce5;path=/;SameSite=None;Secure;priority=high
_zcsr_tmp=406b5ee2-d0cc-402f-bd6c-e51325c22ce5;path=/;SameSite=Strict;Secure;priority=high
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
vary: Origin
server: ZGS
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d79a3a5bd7dc7aa6cab306176fafd11
0d5cb1f3e3ea510308034a5e569c0e65fae30835
57979dfcf6fdc76f04e4790c2b94b876e188ac780aa49d9bfc8a58c498dc4203
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7185
x-amzn-requestid: e7b997d7-f9ce-40c6-b9bb-372ee10d8ad0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTAfEX5oAMFcHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb9c-31e295e33ead940f381121a1;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:43:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YW8Pk1qXdq3DBNRDO3abND1HGTqhUInN2Wo3N8Uzb0zzyXrsKPCvYg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:48:52 GMT
age: 79190
etag: "0d5cb1f3e3ea510308034a5e569c0e65fae30835"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.rmcifinancial.com/?redirectUrl=/enote/xchange/login.php
200 OK 0 B URL HTTP/2 www.rmcifinancial.com/?redirectUrl=/enote/xchange/login.php
IP
GET /?redirectUrl=/enote/xchange/login.php HTTP/1.1
Host: www.rmcifinancial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __cf_bm=del7PDz8dUt20GLA2eOMPk4rK_j7V6NH5sbeCoHvmSI-1664221715-0-AReqGYeKPBEbU/ZgOP5HrESTSMwXHZHFU30jmG7Or6OWhbHLV7C4P9DSvuhKHboUHU14yvwul9b64i4iJmVczx4HulM+WdAHt9LsUTrZnCDN
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 19:48:35 GMT
content-type: text/html; charset=utf-8
cache-control: private
vary: Accept-Encoding
x-stackifyid: V2|ac32c9a1-29d7-4bf1-aa06-963693541640|C78253|CD19162
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 750e84970fdfb4ee-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/shared/css/fmg-awesomplete.css?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/shared/css/fmg-awesomplete.css?v=2.86.45.29790.353
IP
GET /site/templates/shared/css/fmg-awesomplete.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: COMPLETED
last-modified: Thu, 23 Feb 2017 03:33:19 GMT
x-amz-version-id: zPkAXLaas50upi8dnP1WHY2zHCHL0UX7
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 02:32:30 GMT
etag: W/"e5183cb7d29ee40610fabccc8596e34c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -QnxKlk8OIEosKL8e5oK8QwLbPPg9cf386yTNm_9e8qTtmUjaOjDHw==
age: 62166
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/shared/scripts/template006.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/shared/scripts/template006.js?v=2.86.45.29790.353
IP
GET /site/templates/shared/scripts/template006.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: H3ZgGobH3IpMt.PEbqAUooZmnu3VdkWq
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 03:07:46 GMT
etag: W/"b392370d775c58bd915fe4cc0013a14d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CCcjJ79WadWWA_oJzFyPuIndPqB3CWOX0hjSKQFfgw7fJb2YSseQcg==
age: 60050
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/global/js/jquery-migrate-1.2.1.min.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/global/js/jquery-migrate-1.2.1.min.js?v=2.86.45.29790.353
IP
GET /site/templates/global/js/jquery-migrate-1.2.1.min.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Mon, 26 Sep 2022 17:08:47 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:15 GMT
etag: W/"eb05d8d73b5b13d8d84308a4751ece96"
x-amz-server-side-encryption: AES256
x-amz-version-id: 8HZsvh6nOshj2aCCupnHd0FlqZiALsJL
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ns2DjEAyd3GE3R0mBj356k3bCKukEjr1OtUJ_yjeTN-ASXw19Xu0Cg==
age: 9589
X-Firefox-Spdy: h2
www.rmcifinancial.com/enote/xchange/login.php
302 Found 0 B URL HTTP/2 www.rmcifinancial.com/enote/xchange/login.php
IP
Analyzer Verdict Alert fortinet Phishing
GET /enote/xchange/login.php HTTP/1.1
Host: www.rmcifinancial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Mon, 26 Sep 2022 19:48:35 GMT
content-type: text/html; charset=utf-8
location: https://www.rmcifinancial.com/?redirectUrl=/enote/xchange/login.php
x-stackifyid: V2|feacd0aa-fe6c-4758-84d3-fefb55b1035b|C78253|CD45445
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=del7PDz8dUt20GLA2eOMPk4rK_j7V6NH5sbeCoHvmSI-1664221715-0-AReqGYeKPBEbU/ZgOP5HrESTSMwXHZHFU30jmG7Or6OWhbHLV7C4P9DSvuhKHboUHU14yvwul9b64i4iJmVczx4HulM+WdAHt9LsUTrZnCDN; path=/; expires=Mon, 26-Sep-22 20:18:35 GMT; domain=.www.rmcifinancial.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 750e84940affb4ee-OSL
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/shared/scripts/jquery.validate.unobtrusive.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/shared/scripts/jquery.validate.unobtrusive.js?v=2.86.45.29790.353
IP
GET /site/templates/shared/scripts/jquery.validate.unobtrusive.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 97S3Qu1Cuc5Hi4uBZUDNHLY.8VVSpYds
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 03:15:56 GMT
etag: W/"dc96da5413de9249fee6448f4a01899b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E-qOpL9PRMQ7Ao4ctS1STuL5dH23HY7333nQlvfqIQxy316FVqL5Sw==
age: 59560
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/006/css/6.css?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/006/css/6.css?v=2.86.45.29790.353
IP
GET /site/templates/006/css/6.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Mon, 26 Sep 2022 06:02:35 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:29 GMT
etag: W/"8140fd82269fff29f56005d7a90676e4"
x-amz-server-side-encryption: AES256
x-amz-version-id: Evt0n5UEdhzDNWSHEvdYBpi5HIeCsqo3
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uJ3lk_8PWFsOwGXxoCEbfdnSxM3RqFn8Yp0giipkzOSrcb_UvNtxCg==
age: 49561
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:400,700
IP
GET /css?family=Lato:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Sep 2022 19:48:35 GMT
date: Mon, 26 Sep 2022 19:48:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/global/js/index.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/global/js/index.js?v=2.86.45.29790.353
IP
GET /site/templates/global/js/index.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Mon, 26 Sep 2022 07:43:52 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:14 GMT
etag: W/"b259ba4db5a3a405f2e58ca0e4565f4c"
x-amz-server-side-encryption: AES256
x-amz-version-id: pwltpwmXv8CH3ORq4Kb8TZ445RiW73yt
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 61ROUs0GH_TKulceEYCXSf9H6xqSfTC248rl3phWLXIKVBQvUfKlVw==
age: 43484
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/global/js/global.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/global/js/global.js?v=2.86.45.29790.353
IP
GET /site/templates/global/js/global.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Mon, 26 Sep 2022 06:14:42 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:14 GMT
etag: W/"7f9a1efe6344e43258698d25460ef299"
x-amz-server-side-encryption: AES256
x-amz-version-id: fmO2Kc3hBPda0ERyOASLLKyhy.XbqJh1
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L-BrqHufQVZ5ld-3mrNZLwlZegSvxm7SEXNLipuSjKLSAA0-wYEQYA==
age: 48834
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/006/css/6a1.css?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/006/css/6a1.css?v=2.86.45.29790.353
IP
GET /site/templates/006/css/6a1.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 26 Sep 2022 06:13:01 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:30 GMT
etag: W/"92cd17d4b327f089721d512862505f7a"
x-amz-server-side-encryption: AES256
x-amz-version-id: vPTyP6qusIqvw.kwX_AYS0oPZYk6Asq6
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XXA6mnwJFxqxRdz9VRMHqUNJszeUd5-2BiPYN1xVAB3VHoZ3e-MnuQ==
age: 48935
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/global/js/leadgen.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/global/js/leadgen.js?v=2.86.45.29790.353
IP
GET /site/templates/global/js/leadgen.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Mon, 26 Sep 2022 06:26:51 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:15 GMT
etag: W/"47f8dbd9907c44d05c874f20293d732b"
x-amz-server-side-encryption: AES256
x-amz-version-id: _p3Pys9U9AmhpQKAIaQHzISUcYSaS3sF
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sLAp8XSft0USiCt-EgukRy4V4gLMpHnYAgglcC_ijHmXRj2iRQ8i3g==
age: 48105
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/modernizr/2.8.3/js/modernizr.custom.12650.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/modernizr/2.8.3/js/modernizr.custom.12650.js?v=2.86.45.29790.353
IP
GET /site/templates/modernizr/2.8.3/js/modernizr.custom.12650.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Mon, 26 Sep 2022 05:04:45 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:16 GMT
etag: W/"eca3745aa5582f76eaa8fc437868d349"
x-amz-server-side-encryption: AES256
x-amz-version-id: 57bcs4kpBvBrLfy0KTtPjoRpiCPYAw5p
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D-zJFSqO_5rGVSR_RA2EpFnkiOwbuYT-yqbHc-SrUqsQdlXDC0JLwg==
age: 53031
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/fancybox/2.1.5/source/jquery.fancybox.pack.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/fancybox/2.1.5/source/jquery.fancybox.pack.js?v=2.86.45.29790.353
IP
GET /site/templates/fancybox/2.1.5/source/jquery.fancybox.pack.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:41 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: ORR.VIRRAGoBXdBScvn2OhOsXPksOLmo
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 02:32:31 GMT
etag: W/"cc9e759f24ba773aeef8a131889d3728"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IFW_aybhOMKZ2oIJ7vSsaufVjtaJunQbQIXCc5lxrXGlM_t4cTVH4g==
age: 62165
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 19:48:35 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 2021-03-10 20:26:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 121d365db7a9aba3915641185d93b963
cdn-cache: HIT
cf-cache-status: HIT
age: 13532522
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 750e849a7a830b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-buttons.css?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-buttons.css?v=2.86.45.29790.353
IP
GET /site/templates/fancybox/2.1.5/source/helpers/jquery.fancybox-buttons.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 26 Sep 2022 05:04:43 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:41 GMT
etag: W/"cac75538c2e3ddfadef839feaca8e356"
x-amz-server-side-encryption: AES256
x-amz-version-id: IKoKUIgz0YYTOX_bbZFaRB0ZU0cg4wM5
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1WTex2A7AGYGqzMyQ_GUqAM4Y6oy4_W4H0bL1kBDA5pljbaOk55lMQ==
age: 53033
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/006/css/6a.css?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/006/css/6a.css?v=2.86.45.29790.353
IP
GET /site/templates/006/css/6a.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:29 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: bOisWwljulE36ugeIiRW6Svn5JZd_Oww
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 02:32:30 GMT
etag: W/"4e1efa5f8eea9c8cac46265843418236"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cuICnyaGqchpcsIt8qAXAaZ2B7qMXjLNfRjloB6Rti96lfWf6lZVag==
age: 62166
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/bootstrap/3.3.4/js/bootstrap.min.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/bootstrap/3.3.4/js/bootstrap.min.js?v=2.86.45.29790.353
IP
GET /site/templates/bootstrap/3.3.4/js/bootstrap.min.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:38 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: vy9Jy83xJxR9U9UbUWSst23P6vawtXoQ
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 05:36:13 GMT
etag: W/"8c237312864d2e4c4f03544cd4f9b195"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jBmHf5UzIgGeuKeY3YZUZNYYr12aMRsc5UvzvumUz7ICElCPaiuoyg==
age: 51143
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/shared/scripts/jquery.stellar.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/shared/scripts/jquery.stellar.js?v=2.86.45.29790.353
IP
GET /site/templates/shared/scripts/jquery.stellar.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
date: Mon, 26 Sep 2022 07:43:51 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:24 GMT
etag: W/"6bc994172518faace00197fb53db9378"
x-amz-server-side-encryption: AES256
x-amz-version-id: V18au.WSW2LXE_SDyYQ.EEDBBOm2ZaWm
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 76z2RVaDC-RBIdVD2O_atdFabp4hHl0y9Q7fggP1uKSCybKszs1ZSg==
age: 43485
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/global/js/contact.js?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/global/js/contact.js?v=2.86.45.29790.353
IP
GET /site/templates/global/js/contact.js?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:55:12 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: cptGZH4vxfWvUTLPdT_JNxU_CeYAcLRC
server: AmazonS3
content-encoding: gzip
date: Mon, 26 Sep 2022 12:27:16 GMT
etag: W/"ef7ad9997351997657c8e5135c7692de"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Giz9-ACgLzxTZg7JQppXamh-7rW5uqA4GX7KjUqCm6WmGiAGP1Vcng==
age: 26480
X-Firefox-Spdy: h2
static.fmgsuite.com/site/templates/global/css/global.css?v=2.86.45.29790.353
200 OK 0 B URL HTTP/2 static.fmgsuite.com/site/templates/global/css/global.css?v=2.86.45.29790.353
IP
GET /site/templates/global/css/global.css?v=2.86.45.29790.353 HTTP/1.1
Host: static.fmgsuite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rmcifinancial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Mon, 26 Sep 2022 05:45:18 GMT
x-amz-replication-status: FAILED
last-modified: Thu, 25 Aug 2022 01:54:45 GMT
etag: W/"7b6fd16df6125a62bceb773d8c81d992"
x-amz-server-side-encryption: AES256
x-amz-version-id: p7yLseJvWQRrg3I5ISa1P2nV1iIrOnhb
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CRnZ8-GYwYDfTGrcFH8rKuuh_ddvhWbHQIBx7V0Xu9gQ82YErFgCrw==
age: 50598
X-Firefox-Spdy: h2
54.164.9.107
93.184.220.29
23.38.200.123
104.17.25.14