aafcu3.web.app/
199.36.158.100301 Moved Permanently 0 B IP 199.36.158.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish America First Credit Union
fortinet Phishing
GET / HTTP/1.1
Host: aafcu3.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://aafcu3.web.app/
Accept-Ranges: bytes
Date: Tue, 31 Jan 2023 03:08:19 GMT
X-Served-By: cache-bma1658-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1675134499.180027,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4291
Expires: Tue, 31 Jan 2023 04:19:50 GMT
Date: Tue, 31 Jan 2023 03:08:19 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6457
Expires: Tue, 31 Jan 2023 04:55:56 GMT
Date: Tue, 31 Jan 2023 03:08:19 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21096
Expires: Tue, 31 Jan 2023 08:59:55 GMT
Date: Tue, 31 Jan 2023 03:08:19 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 02:35:51 GMT
content-type: application/json
age: 1948
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: aYEAgTvirVGF/puutn62QmifdHGS7diAIqVEK+KUCCAuiAcGbJbPqIM5XAQkwyVKKw30lQKD3C0=
x-amz-request-id: SYBJ4S5MHGSDGJVT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 02:51:00 GMT
age: 1039
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
aafcu3.web.app/
199.36.158.100200 OK 190 B IP 199.36.158.100:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (512), with no line terminators
Hash 37ab0fd6dc271cce5b75a729df96d578
406de10022668168eca379d1d44d06a1c23bec26
42a9ffc68e983642598ef68e48d1a9d9c43e3c8d9dd3003a09fbc629910dccb4
Analyzer Verdict Alert openphish America First Credit Union
fortinet Phishing
GET / HTTP/1.1
Host: aafcu3.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "a0ffd04569be39957374de62cf5dd2785d8d8549b60e9bd29a373801bff7a90f-br"
last-modified: Mon, 30 Jan 2023 15:25:31 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 31 Jan 2023 03:08:19 GMT
x-served-by: cache-bma1652-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675134499.466013,VS0,VE133
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 190
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 03:08:19 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4int/CgqZOssWAEQ
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/CgqZOssWAEQ
IP 142.250.74.131:0
Hash 7ae05ecbfd275f8bf207c49637315f49
6ec731c22fd017c194871d7a7af00e85d05dd574
0ceddf9b984744e05396792839202d188c6cb36714208d3257a0a57869890f8f
POST /s/gts1d4int/CgqZOssWAEQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:19 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aafcu3.web.app/static/js/main.a7b8f871.js
199.36.158.100200 OK 130 kB URL HTTP/2 aafcu3.web.app/static/js/main.a7b8f871.js
IP 199.36.158.100:0
File type ASCII text, with very long lines (65465)
Size 130 kB (129549 bytes)
Hash 392269895f9be2c8305291bd5b1d8599
d79a2dbd6c02a7f2e4939e99dfb3f6d9c63537c5
6c577c4859e631ded9ca556abaceb3281a3bd6fd3744d357406300b247dc64eb
Analyzer Verdict Alert openphish America First Credit Union
fortinet Phishing
GET /static/js/main.a7b8f871.js HTTP/1.1
Host: aafcu3.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aafcu3.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "713fa47c1b65fe66f5072851a75a6129f69f2703098d643a84e94a4953d0dcb2-br"
last-modified: Mon, 30 Jan 2023 15:25:31 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 31 Jan 2023 03:08:19 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675134500.723972,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 129549
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 02:49:04 GMT
age: 1155
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
aafcu3.web.app/static/css/main.6a11e502.css
199.36.158.100200 OK 24 kB URL HTTP/2 aafcu3.web.app/static/css/main.6a11e502.css
IP 199.36.158.100:0
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
Analyzer Verdict Alert openphish America First Credit Union
GET /static/css/main.6a11e502.css HTTP/1.1
Host: aafcu3.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aafcu3.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "98f4cab0d8076feaaeb53fdb1ec3f3acc2c7fe34a5575051556aeb30738c72f5-br"
last-modified: Mon, 30 Jan 2023 15:25:31 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Tue, 31 Jan 2023 03:08:19 GMT
x-served-by: cache-bma1652-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675134500.724620,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 104770
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4950
Expires: Tue, 31 Jan 2023 04:30:50 GMT
Date: Tue, 31 Jan 2023 03:08:20 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 624ec1892d116932d4c6d861f6eac674
c8b359987387d3b970365ab821f3a8172a4e0616
9a729e57b0c874bad4233b08b005445d108c5bd6942409dd2bd6a2fc982aece7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9A729E57B0C874BAD4233B08B005445D108C5BD6942409DD2BD6A2FC982AECE7"
Last-Modified: Sun, 29 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20659
Expires: Tue, 31 Jan 2023 08:52:39 GMT
Date: Tue, 31 Jan 2023 03:08:20 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 624ec1892d116932d4c6d861f6eac674
c8b359987387d3b970365ab821f3a8172a4e0616
9a729e57b0c874bad4233b08b005445d108c5bd6942409dd2bd6a2fc982aece7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9A729E57B0C874BAD4233B08B005445D108C5BD6942409DD2BD6A2FC982AECE7"
Last-Modified: Sun, 29 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20659
Expires: Tue, 31 Jan 2023 08:52:39 GMT
Date: Tue, 31 Jan 2023 03:08:20 GMT
Connection: keep-alive
apcnt.com/page/init
142.202.191.247200 OK 0 B IP 142.202.191.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /page/init HTTP/1.1
Host: apcnt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-page-name,x-token-id
Referer: https://aafcu3.web.app/
Origin: https://aafcu3.web.app
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 31 Jan 2023 03:08:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Allow: HEAD, OPTIONS, GET, POST
Access-Control-Allow-Origin: https://aafcu3.web.app
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: x-page-name, x-token-id
Access-Control-Allow-Methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT
Vary: Origin
push.services.mozilla.com/
52.40.48.115101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.40.48.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oijQr/IHdgmoN7nVoztIQw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: H8/t+S1p0WL02pFAP3GN3+SIioE=
apcnt.com/page/init
142.202.191.247401 UNAUTHORIZED 35 B IP 142.202.191.247:0
File type JSON data\012- , ASCII text
Hash 85ab59091df1b777ae06fddf917881ce
9e833ae263f15bddb20a6c8786becedab4273f33
c8df23d7c8e90073b944834bdd42b665a14173a7eb38e1bde8fceed940fcdec5
GET /page/init HTTP/1.1
Host: apcnt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-PAGE-NAME: Afcu
X-TOKEN-ID: CQ4G699BBMBg9q5FhA4YAr
Origin: https://aafcu3.web.app
Connection: keep-alive
Referer: https://aafcu3.web.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 401 UNAUTHORIZED
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 31 Jan 2023 03:08:20 GMT
Content-Type: application/json
Content-Length: 35
Connection: keep-alive
Access-Control-Allow-Origin: https://aafcu3.web.app
Access-Control-Allow-Credentials: true
Vary: Origin
ocsp.usertrust.com/
172.64.155.188200 OK 2.2 kB IP 172.64.155.188:0
Hash ae39333ae66accd3f8c0b703536422b3
56276d359bb892b328ad946d38c5198258e7c7a6
fa80d7b61e5d5b84955ab46a8ea06f2661f36614ef81d3e6596dccfa30c9b51b
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:21 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 22:12:16 GMT
Expires: Sat, 04 Feb 2023 22:12:15 GMT
Etag: "56276d359bb892b328ad946d38c5198258e7c7a6"
Cache-Control: max-age=603458,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 458
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791f3e08088db527-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 34c9acda0beb2926c82bbf5831c303a7
766daaf55875a767147f4a9818f047750be966f0
b9588fe97b9d43aba343d4e2a9a302ed53f6a1368b5769e3b607b9d3b1673559
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:21 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 00:26:32 GMT
Expires: Sat, 04 Feb 2023 00:26:31 GMT
Etag: "766daaf55875a767147f4a9818f047750be966f0"
Cache-Control: max-age=335289,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791f3e081d9fb4f1-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10888
Expires: Tue, 31 Jan 2023 06:09:49 GMT
Date: Tue, 31 Jan 2023 03:08:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10888
Expires: Tue, 31 Jan 2023 06:09:49 GMT
Date: Tue, 31 Jan 2023 03:08:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10888
Expires: Tue, 31 Jan 2023 06:09:49 GMT
Date: Tue, 31 Jan 2023 03:08:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10888
Expires: Tue, 31 Jan 2023 06:09:49 GMT
Date: Tue, 31 Jan 2023 03:08:21 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3acb4fe3-f1dd-417b-ac1c-9269bcff18d1.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3acb4fe3-f1dd-417b-ac1c-9269bcff18d1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cbc9f50b0a96fb69fa2e948aa3125413
e7f13a6e81263e73ac5777959d63b567f50848d5
2e3411687a31211dbf0aa732f8d93a3c5a4748afb264e695d36782700c8e8b5d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3acb4fe3-f1dd-417b-ac1c-9269bcff18d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12906
x-amzn-requestid: 4d09cdf1-2b4b-4f72-a313-caf6660774d7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsLoHaHIAMF1uQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d22717-7074bd5202e3aced21ac49e3;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:09:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZkPnGMNVHQUSKvsqXZajTFA6FiOiZvSXHU6QN8zbCrSXKKmSdCWVqQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:47:13 GMT
age: 15668
etag: "e7f13a6e81263e73ac5777959d63b567f50848d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hDjKAMYoVwHdCqS8t08PrWyfQQLiWaosXbi3FOJY8BeV0yAFCGziGw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:58:16 GMT
age: 4205
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2797bfd35b7ec24888de84be14f7f2ec
8e315ac5856967286eaa8769e081d827fb4ca39e
b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lJril-pCQ3MCMoVEFu3kmDuv4T1ABYMFJTuC5dbwxGe1_ydrbUkt8Q==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 03:40:12 GMT
age: 84489
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v9Wphg34UGE5kkZ9RKBcphcpPuCn54oVyepzTW5rZ3J9nkL9J501PA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:03:23 GMT
age: 18298
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 976dda397f9292a498ca9db5599c0378
dad9e9c3462907a2475046aee36d57f8309cd44e
7ed9ccf2ff75ca53f5ba56a1d2127e0f09b0ae941cad8b042e8df01ad01e614b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6844
x-amzn-requestid: 0542cf46-5045-459f-a35f-f6c0d3f5f7b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flZsxH0YIAMF9ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86feb-692d50f710a131df2ee49aa8;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6bbFjAsd03GN8zzBnAFBm7xA8igZ_xHJsOHzw7nwNgRxiWUDLPGjpQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:53:29 GMT
age: 4492
etag: "dad9e9c3462907a2475046aee36d57f8309cd44e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd328471c-fc31-49a3-ae71-21d6171a8237.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd328471c-fc31-49a3-ae71-21d6171a8237.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e575f4c5e3aa793f846cadc8baf386c
f482a4e8e80ea5b6afc29e5cc1a9a2b8c2f0434d
09a5bbe4fb7f23ee43228267f30c1ef0cd8747e515e01c963df0756b866f23ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd328471c-fc31-49a3-ae71-21d6171a8237.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9700
x-amzn-requestid: 059475a7-d7de-4a44-9fc7-11fb24e201b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffB_9G8DIAMF64A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e399-57fea3031d1e93ec02308fac;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vzubP2I1xR5NF1amWIPiIlp6yPykWhz-CEbwDiJOs-eTWkTE-fvfjA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 04:12:11 GMT
age: 82570
etag: "f482a4e8e80ea5b6afc29e5cc1a9a2b8c2f0434d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
assets.adobedtm.com/launch-EN7ab29dc248554a978d6a43ab5b3b3e8f.min.js
2.18.172.233200 OK 97 kB URL HTTP/2 assets.adobedtm.com/launch-EN7ab29dc248554a978d6a43ab5b3b3e8f.min.js
IP 2.18.172.233:0
File type ASCII text, with very long lines (32715)
Hash 5cc9d4acdd41713ae121b044b2d3fdf6
0fc95d9c6535461e9911d89bd26e1f86b246ce9e
fb126c36a09b71df64b11b91a356b9c7d5086e1b882ec0260c03cc83cfc8a71e
GET /launch-EN7ab29dc248554a978d6a43ab5b3b3e8f.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "bc90c2402668f7fcff8af00f42c06e80:1674584240.268644"
last-modified: Tue, 24 Jan 2023 18:17:20 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 31 Jan 2023 04:08:21 GMT
date: Tue, 31 Jan 2023 03:08:21 GMT
content-length: 97378
access-control-allow-origin: https://www.americafirst.com
timing-allow-origin: *
X-Firefox-Spdy: h2
sc87389896us1.cobrowse.oraclecloud.com/launcher.js
104.110.2.75200 OK 9.5 kB URL HTTP/2 sc87389896us1.cobrowse.oraclecloud.com/launcher.js
IP 104.110.2.75:0
File type C++ source, ASCII text, with very long lines (21806), with CRLF, LF line terminators
Hash f2675c03e6a7139681958ede8c291f34
dee8ba07ce2007a6fd1fd9518d9e316f7611d3e6
e141aba7a3c84fda9f541f0a8336a7a73305a36a290c6a0eb8eb4c51498633cb
GET /launcher.js HTTP/1.1
Host: sc87389896us1.cobrowse.oraclecloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
etag: "2321e235cd1219f0ea1f75a72519efc0:1557866875"
last-modified: Tue, 14 May 2019 20:47:55 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
date: Tue, 31 Jan 2023 03:08:21 GMT
content-length: 9477
content-type: text/javascript; charset=utf-8
X-Firefox-Spdy: h2
www.americafirst.com/services/other-services/atm.html
206.81.136.154200 OK 28 kB URL HTTP/1.1 www.americafirst.com/services/other-services/atm.html
IP 206.81.136.154:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (824)
Hash bffb9be9a318c4b5f5f201cf185cfbbd
965e860b685332b6ea4809e0656d5443cf3822af
c0a78d670f1d732da57d30632ae4057547cca4aad99d41039682bfa839cb2245
GET /services/other-services/atm.html HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aafcu3.web.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:21 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=2
Expires: Tue, 31 Jan 2023 03:08:23 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 27538
Keep-Alive: timeout=5, max=24
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
cdnjs.cloudflare.com/ajax/libs/jquery-ajaxtransport-xdomainrequest/1.0.2/jquery.xdomainrequest.min.js
104.17.24.14200 OK 792 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-ajaxtransport-xdomainrequest/1.0.2/jquery.xdomainrequest.min.js
IP 104.17.24.14:0
File type ASCII text, with very long lines (1605)
Hash 13edf8140d2675abddd5abd0375c61a6
3f4c7b5b315e74accb4c96b3fac756c69600a1c5
fdd2b6d118db42dec69f1eb5775ad1fa4eee0ce1de0817af3d33f490e2668795
GET /ajax/libs/jquery-ajaxtransport-xdomainrequest/1.0.2/jquery.xdomainrequest.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 03:08:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 792
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-727"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1023703
expires: Sun, 21 Jan 2024 03:08:21 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fowaj%2Bb80ToabDlV9Zn%2FzWpXpQ478u%2FGKCHLTDqClGpKD%2FR0ji%2Baa1IK7WicOk4vCuK9PWf51KOQSy3P8gHmbBHH0GFyIUpE7UPsvOCZbKOhi7gGvTTrgnErL%2F6Dc2zB2IC2gS8d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 791f3e0d6b78b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 6c2b176158d7c85cf2c8fd9bdd28930d
483d693fa2ffe3edce0dd65f52f3f1705612ef54
07f3c855155c186a74e02d255cf719072105c72c312248104ff0652c73dc45ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2434
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:22 GMT
Etag: "63d6e9d4-1d7"
Last-Modified: Tue, 31 Jan 2023 02:27:48 GMT
Server: ECS (amb/6B7E)
X-Cache: HIT
Content-Length: 471
ajax.googleapis.com/ajax/libs/yui/2.8.0r4/build/utilities/utilities.js
142.250.74.138200 OK 37 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/yui/2.8.0r4/build/utilities/utilities.js
IP 142.250.74.138:0
File type ASCII text, with very long lines (11284)
Hash d3a2418128f6434c0b8b2bd37ec9832d
58b94b60fedb0db4ffe094146d76596037f221c8
2554d2265affb518693b7d60c49fe22d7fff5ca0116b588e665702fcd1521202
GET /ajax/libs/yui/2.8.0r4/build/utilities/utilities.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 37009
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 19:16:08 GMT
expires: Mon, 29 Jan 2024 19:16:08 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 114734
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/yui/2.8.0r4/build/datasource/datasource-min.js
142.250.74.138200 OK 8.0 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/yui/2.8.0r4/build/datasource/datasource-min.js
IP 142.250.74.138:0
File type ASCII text, with very long lines (6109)
Hash b5597319a33d8a6dc405d6c9ea80b518
e1e0abe7671d8ea2174e3eefc5b92824719617ca
65827ab1400d29599f39266266cef6bb866ddd6df703627383fc0544c0e53c03
GET /ajax/libs/yui/2.8.0r4/build/datasource/datasource-min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 7976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 19:00:58 GMT
expires: Tue, 30 Jan 2024 19:00:58 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 29244
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/yui/2.8.0r4/build/autocomplete/autocomplete-min.js
142.250.74.138200 OK 7.2 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/yui/2.8.0r4/build/autocomplete/autocomplete-min.js
IP 142.250.74.138:0
File type ASCII text, with very long lines (6069)
Hash 11e8a58070c375f6b89929805853f58e
0a6c4e2684d0e9b9889a5bdb0374fe241732845f
f8c5cc4360a468004402e0d214b44ade691375bd085d40ce4fc8bd182649e1fd
GET /ajax/libs/yui/2.8.0r4/build/autocomplete/autocomplete-min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 7240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 19:43:38 GMT
expires: Wed, 24 Jan 2024 19:43:38 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 545084
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.americafirst.com/etc/designs/afcu.css
206.81.136.154200 OK 0 B URL HTTP/1.1 www.americafirst.com/etc/designs/afcu.css
IP 206.81.136.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /etc/designs/afcu.css HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
X-Content-Type-Options: nosniff
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 0
Keep-Alive: timeout=5, max=49
Connection: Keep-Alive
Content-Type: text/css;charset=utf-8
www.americafirst.com/etc/clientlibs/afcu/vendor/bootstrap.min.css?t=10302020
206.81.136.154200 OK 24 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/bootstrap.min.css?t=10302020
IP 206.81.136.154:0
File type ASCII text, with very long lines (759)
Hash b00b4eedd5bf17f29d3654d22c45b8ed
473e2e308348e21d7d7df502a620ff21d22ea0ab
c228f1003616dcdb6f50f389cd7cbee90e76afdfe635a2867a0e4b29a571a974
GET /etc/clientlibs/afcu/vendor/bootstrap.min.css?t=10302020 HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Keep-Alive: timeout=5, max=23
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css;charset=utf-8
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash e3a93a1fc6d125505a1723e93ddd4e94
20972c2e5924d77cd98068d3b66c67af74bd511b
541c5f137967786fb50d6d16170ea25a5ac8ed8a689e07ebb0ec70c98441eb97
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 07:05:39 GMT
Expires: Mon, 06 Feb 2023 07:05:38 GMT
Etag: "20972c2e5924d77cd98068d3b66c67af74bd511b"
Cache-Control: max-age=532035,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791f3e0ee8d3b4f1-OSL
www.americafirst.com/etc/clientlibs/afcu/vendor/bootstrap.min.js
206.81.136.154200 OK 13 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/bootstrap.min.js
IP 206.81.136.154:0
File type ASCII text, with very long lines (586)
Hash 02dfccce6d9a7de6da98d282c4f17e1f
41eb389f7adfeb25cecd4ea3eb09be81d6ae458b
f23dfe5ed4e16dddac960c5bd171c06f90d7eb7e02ed26fd29ded3160a323b72
GET /etc/clientlibs/afcu/vendor/bootstrap.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 12667
Keep-Alive: timeout=5, max=22
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/etc/clientlibs/afcu/vendor/jqueryui.min.css
206.81.136.154200 OK 3.7 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/jqueryui.min.css
IP 206.81.136.154:0
File type ASCII text, with very long lines (1188)
Hash a6fa5ea919fd5af0172540091dd7f2e3
e38c151a85dfe4dcf531078dc417b99ab21cbd38
213df987f8b0ce29ae4df227bec70a1dd54535c6f2f1f09daeb1e1f871618884
GET /etc/clientlibs/afcu/vendor/jqueryui.min.css HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 3717
Keep-Alive: timeout=5, max=54
Connection: Keep-Alive
Content-Type: text/css
www.americafirst.com/etc/clientlibs/afcu/vendor/jqueryui.min.js
206.81.136.154200 OK 11 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/jqueryui.min.js
IP 206.81.136.154:0
File type ASCII text, with very long lines (587)
Hash 2877fededda3f465ad9ea93b980b7253
22a68f52fc9c5123cde8a9e5376507f0fadf9cf2
c7c4a22646b98ee2eb953d58524004c6d72bae9b119d5f0b86a7060436f8d642
GET /etc/clientlibs/afcu/vendor/jqueryui.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 11168
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/etc/clientlibs/afcu/vendor/loader.min.css
206.81.136.154200 OK 128 B URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/loader.min.css
IP 206.81.136.154:0
File type ASCII text, with no line terminators
Hash adb1039e2fdbbd2f0cd7f8b4853c880a
4edbabcfd7af0e4ce929c1d873e42352165f01fe
e62b524db3bef5e4bd24d06e3871ff68384d6b69b2d34ca97404cd5b6497b70c
GET /etc/clientlibs/afcu/vendor/loader.min.css HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 128
Keep-Alive: timeout=5, max=47
Connection: Keep-Alive
Content-Type: text/css
www.americafirst.com/etc/clientlibs/afcu/components/general/loader.min.css
206.81.136.154200 OK 128 B URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/components/general/loader.min.css
IP 206.81.136.154:0
File type ASCII text, with no line terminators
Hash adb1039e2fdbbd2f0cd7f8b4853c880a
4edbabcfd7af0e4ce929c1d873e42352165f01fe
e62b524db3bef5e4bd24d06e3871ff68384d6b69b2d34ca97404cd5b6497b70c
GET /etc/clientlibs/afcu/components/general/loader.min.css HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 128
Keep-Alive: timeout=5, max=48
Connection: Keep-Alive
Content-Type: text/css
www.americafirst.com/etc/clientlibs/afcu/vendor/jquery.min.js
206.81.136.154200 OK 32 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/jquery.min.js
IP 206.81.136.154:0
File type ASCII text, with very long lines (657)
Hash 4ff70b3af60012dc39eb3975d2483cbd
5b2ecc408bf76a628d4c92a6aff21bae63620f63
b85935f2651ce59a567339ad09aa6e9eaec44be595e31d9997235a279c31b4c5
GET /etc/clientlibs/afcu/vendor/jquery.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 32312
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/etc/clientlibs/afcu/vendor/swift.min.css
206.81.136.154200 OK 1.3 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/swift.min.css
IP 206.81.136.154:0
File type ASCII text, with very long lines (755)
Hash bf89f0f71413d9ab3f1f2900b6b292c8
1471be4e9652fe4d8c865a58e29363d94497a6f3
8f47d7932519e20660e758448ccdd4d978bf2cab42157f7fd26c1376271b4971
GET /etc/clientlibs/afcu/vendor/swift.min.css HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 1283
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: text/css
www.americafirst.com/etc/clientlibs/afcu/vendor/swift.min.js
206.81.136.154200 OK 3.0 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/swift.min.js
IP 206.81.136.154:0
File type ASCII text, with very long lines (525)
Hash b933e81a6ffae2a9d9823cb78f111c9a
ccdf99561fbc365320814394ddf304d701cde551
14a5e6a44dd63a2657a870c3b883d7bc90f34c24ffbb3570d5b7a7d50e7a6142
GET /etc/clientlibs/afcu/vendor/swift.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 2993
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/etc/clientlibs/afcu/vendor/jquery_cookie.min.js
206.81.136.154200 OK 793 B URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/jquery_cookie.min.js
IP 206.81.136.154:0
File type ASCII text, with very long lines (506)
Hash 9f89be8c9e55c4458eeab10d5668571e
4a9dbe1699f2255a484c6a3bea7ca65c143cd955
c6fd4e7f42656b4a0f7c2d5c43d58f04c54c023e6059886680ed7472566e6dcb
GET /etc/clientlibs/afcu/vendor/jquery_cookie.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 793
Keep-Alive: timeout=5, max=4
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/etc/clientlibs/afcu/vendor/slick.min.css
206.81.136.154200 OK 1.1 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/slick.min.css
IP 206.81.136.154:0
File type Unicode text, UTF-8 text, with very long lines (311)
Hash ceee945acaceeaa45d77eb9ab0edf73c
15d73dde292077e50ad6f75bdbdd435ce24ce6d6
3238846fffcf4dddfd85156359176d382fbad7d1f37b27b38e8f02b0971af635
GET /etc/clientlibs/afcu/vendor/slick.min.css HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 1127
Keep-Alive: timeout=5, max=45
Connection: Keep-Alive
Content-Type: text/css
www.americafirst.com/etc/clientlibs/afcu/vendor/backstretch.min.css
206.81.136.154200 OK 0 B URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/backstretch.min.css
IP 206.81.136.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /etc/clientlibs/afcu/vendor/backstretch.min.css HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 0
Keep-Alive: timeout=5, max=3
Connection: Keep-Alive
Content-Type: text/css
www.americafirst.com/etc/clientlibs/afcu/base.min.css?t=10302020
206.81.136.154200 OK 41 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/base.min.css?t=10302020
IP 206.81.136.154:0
File type ASCII text, with very long lines (686)
Hash bb77f11c9dc3138faa732b4666e96291
0b5d8dcaaef98afa5d06d8219128ee8c160982cb
f88112b1c148b57cfe7dc9e9c282773b7760db248f7f2c312f7996e88f776ed2
GET /etc/clientlibs/afcu/base.min.css?t=10302020 HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Connection: close
Transfer-Encoding: chunked
Content-Type: text/css;charset=utf-8
www.americafirst.com/etc/clientlibs/afcu/vendor/html2canvas.min.js
206.81.136.154200 OK 12 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/html2canvas.min.js
IP 206.81.136.154:0
File type ASCII text, with very long lines (564)
Hash 1598e8ae94bd862ac60ce2ca3ee667a0
95b9e1242259033519025572e443577b9c18066a
cf88575b8e2f460dc9c04e6cd929f68901edbc978c148862b091d122c72570f9
GET /etc/clientlibs/afcu/vendor/html2canvas.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 12329
Keep-Alive: timeout=5, max=47
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/etc/clientlibs/afcu/vendor/slick.min.js
206.81.136.154200 OK 9.9 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/slick.min.js
IP 206.81.136.154:0
File type ASCII text, with very long lines (573)
Hash 1fbfef4765bbbbbb5e71d11866d5ebc9
ec9102bf15c63b471d80689b8e9b6afb599e5bb2
bba09183f6c1c6219819f6d5d5170f883d08817d81e85e4d9cc6ac92f0028151
GET /etc/clientlibs/afcu/vendor/slick.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 9936
Keep-Alive: timeout=5, max=44
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/etc/clientlibs/afcu/vendor/mask.min.js
206.81.136.154200 OK 2.1 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/mask.min.js
IP 206.81.136.154:0
File type ASCII text, with very long lines (574)
Hash b24b3d75f693b844eb6eca9ab8e1623a
bb04eecc43833e4d7606dc075c233a68a2acbb66
7dbba0141c31e2e593ed72f78eea04214cbb07262d3e65278d387e55d8ebc1f0
GET /etc/clientlibs/afcu/vendor/mask.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 2105
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/etc/clientlibs/afcu/vendor/backstretch.min.js
206.81.136.154200 OK 1.8 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/vendor/backstretch.min.js
IP 206.81.136.154:0
File type ASCII text, with very long lines (529)
Hash 0e3967977de38ac9df932eb4f0d041d7
9f4844d8b9e468482a750153f8be6cdd4e63b8da
af2a1133bd2dd371509660def707ad117da17381216b8679f1116f198c85eb5e
GET /etc/clientlibs/afcu/vendor/backstretch.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 1833
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 5f759b96a696e1f82e3d127bb0713981
1d349377de6d064e533f719459c89cacc0e6533f
afd3761306f9abcddcccf5d24bcc8a57a4d02664b969f37128b222a8924da02a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 00:32:54 GMT
Expires: Tue, 07 Feb 2023 00:32:53 GMT
Etag: "1d349377de6d064e533f719459c89cacc0e6533f"
Cache-Control: max-age=594870,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791f3e119a23b4f1-OSL
assets.americafirst.com/js/pm_fp.js
206.81.136.155200 OK 13 kB URL HTTP/1.1 assets.americafirst.com/js/pm_fp.js
IP 206.81.136.155:0
File type ASCII text, with very long lines (12876), with no line terminators
Hash 805e6f717afb1f6a4af203a52f7c569d
939d695b61b5ada21794c1e98de324479de158bf
190f442b064e275022a918a7c555dc26749ae9a5dda27681c0bf097f500b2896
GET /js/pm_fp.js HTTP/1.1
Host: assets.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Last-Modified: Fri, 30 Mar 2018 21:18:47 GMT
ETag: "324c-568a7c9249bc0"
Accept-Ranges: bytes
Content-Length: 12876
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/etc/clientlibs/afcu/base.min.js
206.81.136.154200 OK 45 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/base.min.js
IP 206.81.136.154:0
Hash f27b32ead6526932bd00d8d9b755ac35
6c1de1390199b4797cccbec7ab064f0b3151a511
21d0e72057b3ce20b33682466724c4f5850fd620e39ad3b72dbf4fc1c2b24683
GET /etc/clientlibs/afcu/base.min.js HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:22 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Tue, 07 Feb 2023 03:08:22 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 45180
Keep-Alive: timeout=5, max=1
Connection: Keep-Alive
Content-Type: application/javascript
www.americafirst.com/content/dam/icons/careers-white.png
206.81.136.154200 OK 1.8 kB URL HTTP/1.1 www.americafirst.com/content/dam/icons/careers-white.png
IP 206.81.136.154:0
File type PNG image data, 171 x 161, 8-bit/color RGBA, non-interlaced\012- data
Hash 55a943fbd9790b225523ad51e9dffb60
808c85daf40c6840a5a798b7df3ed6397604cd32
21d908e848b57784f769bbf34c6669460b1c5b2d77d41cedceffc8c4e4930b36
GET /content/dam/icons/careers-white.png HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 1794
Keep-Alive: timeout=5, max=46
Connection: Keep-Alive
Content-Type: image/png
www.americafirst.com/content/dam/icons/find-location-white.png
206.81.136.154200 OK 3.2 kB URL HTTP/1.1 www.americafirst.com/content/dam/icons/find-location-white.png
IP 206.81.136.154:0
File type PNG image data, 171 x 161, 8-bit/color RGBA, non-interlaced\012- data
Hash f347329ac596e314631c4260fb3c0e52
a569c2e0fd0e31dd80cb7caa321a385b3b7340e7
90dbbeb09e5e2bcc6bdda8bfeabf3e968fc71626578eb512a1892b44144e5fb5
GET /content/dam/icons/find-location-white.png HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 3192
Keep-Alive: timeout=5, max=42
Connection: Keep-Alive
Content-Type: image/png
www.americafirst.com/content/dam/icons/become-a-member-white.png
206.81.136.154200 OK 4.0 kB URL HTTP/1.1 www.americafirst.com/content/dam/icons/become-a-member-white.png
IP 206.81.136.154:0
File type PNG image data, 171 x 161, 8-bit/color RGBA, non-interlaced\012- data
Hash ae6f04ea223ca69f073ff3f750af6c26
79c984f108dab1619d58a86ee08c871a18dac1ab
38779672cd3226ed3e5f13be3b79cdab74b55e74bb5fbc96051436e5caa52643
GET /content/dam/icons/become-a-member-white.png HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 3952
Keep-Alive: timeout=5, max=20
Connection: Keep-Alive
Content-Type: image/png
www.americafirst.com/content/dam/nav/nav-accounts-02.jpg
206.81.136.154200 OK 23 kB URL HTTP/1.1 www.americafirst.com/content/dam/nav/nav-accounts-02.jpg
IP 206.81.136.154:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Hash a99514fea1815a6b5ebe648041a2fe71
49b017bd5f63cb5bf37ecfba0b539e91519477f3
f0c59daceffddeadba354ccec9deb0ed3c425b7a0015ead6877fae4b7f5cc907
GET /content/dam/nav/nav-accounts-02.jpg HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 22732
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js
2.18.172.233200 OK 12 kB URL HTTP/2 assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js
IP 2.18.172.233:0
File type ASCII text, with very long lines (32717)
Hash 9edbefe8919a34cc9ec5343e49caf90d
9e8f2b92a35df8e01814e558d10248a928ea2504
c276e66ee697edfb8fbe70a13d6cb8498b21fb998d10d6faaf3999f34f5525cc
GET /extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "dfdd9e1f988805f0c2fbb10cd6b8f034:1663863409.614694"
last-modified: Thu, 22 Sep 2022 16:16:49 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12384
expires: Tue, 31 Jan 2023 04:08:23 GMT
date: Tue, 31 Jan 2023 03:08:23 GMT
cache-control: no-cache
access-control-allow-origin: https://www.americafirst.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js
2.18.172.233200 OK 1.6 kB URL HTTP/2 assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js
IP 2.18.172.233:0
File type ASCII text, with very long lines (3138)
Hash dbb5211703cf7696d634360cc8874fa7
9231e7ebe8096b629c9ac522e41f8c2a8013db99
535a218392da01549f9fd640908f59c213e809c2db778c36094e3a84959106df
GET /extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b89fcb8870ac40eecb6d3cc844d35389:1663863409.92483"
last-modified: Thu, 22 Sep 2022 16:16:49 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1598
expires: Tue, 31 Jan 2023 04:08:23 GMT
date: Tue, 31 Jan 2023 03:08:23 GMT
cache-control: no-cache
access-control-allow-origin: https://www.americafirst.com
timing-allow-origin: *
X-Firefox-Spdy: h2
public.cobrowse.oraclecloud.com/rely/storage/ll_storage_html5.html?context=cr9q4o10xvlldjnualn&version=20230031
104.110.2.75200 OK 12 kB URL HTTP/2 public.cobrowse.oraclecloud.com/rely/storage/ll_storage_html5.html?context=cr9q4o10xvlldjnualn&version=20230031
IP 104.110.2.75:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (43766)
Hash 9466edea5b690a8dcc94a8aee5255448
8200790330fb146fdc254fb694871e0e9d73e974
f59a6c07012c632c6d0014640439abdd1e0de1f6b4cb557c43531c43af88d24c
GET /rely/storage/ll_storage_html5.html?context=cr9q4o10xvlldjnualn&version=20230031 HTTP/1.1
Host: public.cobrowse.oraclecloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "b7b7e70ac037b592aef8c274d8e66a71:1634875896.03281"
last-modified: Thu, 21 Oct 2021 23:11:35 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
date: Tue, 31 Jan 2023 03:08:23 GMT
content-length: 11698
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 81552288bbf68d56287235714f4ff5ab
ce6ce06b1e15f76ef30296a54e2b4520f5d861a8
8a39a876a49e880f31cb2c92563213de594b823302fbf945a737fd7787a19dd6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5944
Cache-Control: max-age=103062
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:23 GMT
Etag: "63d75e85-1d7"
Expires: Wed, 01 Feb 2023 07:46:05 GMT
Last-Modified: Mon, 30 Jan 2023 06:07:01 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
www.americafirst.com/content/dam/nav/nav-learn.jpg
206.81.136.154200 OK 48 kB URL HTTP/1.1 www.americafirst.com/content/dam/nav/nav-learn.jpg
IP 206.81.136.154:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2017 (Windows), datetime=2017:09:20 15:02:31], progressive, precision 8, 300x250, components 3\012- data
Hash a8e23fd69a941262a473447da048ab48
7eeb55c530ab4eb492deffbec84d114434eecde4
991e3d5fa232e5259df67968507cff332947551feedcb1c9e3e70fe3b9900498
GET /content/dam/nav/nav-learn.jpg HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 47901
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&ts=1675134518279
34.251.47.116302 Found 0 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&ts=1675134518279
IP 34.251.47.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&ts=1675134518279 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.americafirst.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v045-0f7e0a58c.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&ts=1675134518279
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=70694746895610213512096710856396299693; Max-Age=15552000; Expires=Sun, 30 Jul 2023 03:08:23 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: rajreyKOQLM=
Content-Length: 0
Connection: keep-alive
www.americafirst.com/content/afcu/en/main-site-configuration/_jcr_content/header/notification.nocache.html
206.81.136.154200 OK 858 B URL HTTP/1.1 www.americafirst.com/content/afcu/en/main-site-configuration/_jcr_content/header/notification.nocache.html
IP 206.81.136.154:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (447)
Hash d344ffcf24451f48cc4a82e1fc7bb8d5
b47e685cb8714da632fb6bd694e18dc116d926d3
b727522f65faca7335b136f99ee635ad087344b582582ab8ce4f73278ce9b230
GET /content/afcu/en/main-site-configuration/_jcr_content/header/notification.nocache.html HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
X-Content-Type-Options: nosniff
Cache-Control: max-age=300, max-age=2
Expires: Tue, 31 Jan 2023 03:08:25 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 858
Keep-Alive: timeout=5, max=45
Connection: Keep-Alive
Content-Type: text/html;charset=utf-8
www.americafirst.com/etc/clientlibs/afcu/fonts/google/fonts/S6uyw4BMUTPHjx4wXiWtFCc.woff2
206.81.136.154200 OK 14 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/fonts/google/fonts/S6uyw4BMUTPHjx4wXiWtFCc.woff2
IP 206.81.136.154:0
File type Web Open Font Format (Version 2), TrueType, length 13944, version 1.0\012- data
Hash b27045292283a12723b217e203986aeb
4f9874233a688abe21c9d0b44223d909ca96ea43
52726fb580d6bffc46615863ddbf4c319524b5a68fb484be2972bdad4fd0310d
GET /etc/clientlibs/afcu/fonts/google/fonts/S6uyw4BMUTPHjx4wXiWtFCc.woff2 HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.americafirst.com/etc/clientlibs/afcu/base.min.css?t=10302020
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 13944
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: font/woff2
www.americafirst.com/etc/clientlibs/afcu/fonts/google/fonts/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2
206.81.136.154200 OK 14 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/fonts/google/fonts/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2
IP 206.81.136.154:0
File type Web Open Font Format (Version 2), TrueType, length 14076, version 1.0\012- data
Hash bf912df22c6dc861e7a01c32fc165187
6918b9cb1fba7d78ce615063203fb5b1eb63ec50
a3b3c4f67bf2b44294215e2be76f12794e6b142edec201e199c93c38739f2bfc
GET /etc/clientlibs/afcu/fonts/google/fonts/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2 HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.americafirst.com/etc/clientlibs/afcu/base.min.css?t=10302020
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 14076
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff2
dpm.demdex.net/id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&ts=1675134518279
34.251.47.116200 OK 124 B URL HTTP/1.1 dpm.demdex.net/id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&ts=1675134518279
IP 34.251.47.116:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f6783349ac4177ec3b3845fd520dca6
d84e7a43a8c8ff6f1a568ad6cb4162767f5b32b7
64bc30aa6a9d9e5396bb67c6af32c31f5ca6610641f0bdea10d759281df6adca
GET /id/rd?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&ts=1675134518279 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.americafirst.com
Content-Type: application/x-www-form-urlencoded
Referer: https://www.americafirst.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.americafirst.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v045-08c859e6d.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Error: 172
X-TID: Z3ZM+XFKSk8=
Content-Length: 124
Connection: keep-alive
public.cobrowse.oraclecloud.com/rely/global_launcher.js
104.110.2.75200 OK 50 kB URL HTTP/2 public.cobrowse.oraclecloud.com/rely/global_launcher.js
IP 104.110.2.75:0
File type Unicode text, UTF-8 text, with very long lines (43236), with NEL line terminators
Hash 17dc36d966a2fcf809a492fa339b7051
f120ede6a2215508d0d28cdd44125d306bcde30a
f73e46f61b0f48545f7c2d75c02c592ccbb78d3f9bf4ea0673f4ef06a3e9770a
GET /rely/global_launcher.js HTTP/1.1
Host: public.cobrowse.oraclecloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "c3f1598b042efa5820d3436290fe48e1:1642746872.088599"
last-modified: Fri, 21 Jan 2022 01:34:30 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
date: Tue, 31 Jan 2023 03:08:23 GMT
content-type: text/javascript; charset=utf-8
X-Firefox-Spdy: h2
www.americafirst.com/etc/clientlibs/afcu/fonts/afcu-icons/css/fonts/afcu-icons.ttf?vjz2zt
206.81.136.154200 OK 9.8 kB URL HTTP/1.1 www.americafirst.com/etc/clientlibs/afcu/fonts/afcu-icons/css/fonts/afcu-icons.ttf?vjz2zt
IP 206.81.136.154:0
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, afcu-icons \012- data
Hash 48e99398ff3cb928d8a206047c748f83
fa541d94e75fca57c118adf7fc30361012d31132
17ba00b0551f829848d9cc73126aae46f3d0d1668432e30bdecffb2bc70f4ae1
GET /etc/clientlibs/afcu/fonts/afcu-icons/css/fonts/afcu-icons.ttf?vjz2zt HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/etc/clientlibs/afcu/base.min.css?t=10302020
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: inline
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 9761
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/x-font-ttf
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 640f4a30c7a616ed917f71dac60884e7
9c433020cf9070cdaaeaf73f8fd972ebf6c0d5bb
b1e1d1f299d80f9ebc18b0bb0568c224ea7287bae1ab87f5f936b670baed4723
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 31 Jan 2023 03:08:23 GMT
Etag: "63d76f6a-1d7"
Last-Modified: Tue, 31 Jan 2023 02:04:39 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _jml3-bUI4pb8NZ5-_vXHVsPkXl60uo-f1ZKpaLQpbBOAB39Rllzdg==
Age: 3824
www.americafirst.com/content/dam/icons/apply-for-loan-white.png
206.81.136.154200 OK 2.9 kB URL HTTP/1.1 www.americafirst.com/content/dam/icons/apply-for-loan-white.png
IP 206.81.136.154:0
File type PNG image data, 171 x 161, 8-bit/color RGBA, non-interlaced\012- data
Hash 312e291b178453932dfb5beef551903f
ff74f2bbb372130309e5e521f4370fbc2ee65242
5ae41c9124cae5796f2b2f3730d17e75e9ca046468f4813863a079ded3baa4b6
GET /content/dam/icons/apply-for-loan-white.png HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 2894
Keep-Alive: timeout=5, max=40
Connection: Keep-Alive
Content-Type: image/png
www.americafirst.com/content/dam/nav/nav-services-03.jpg
206.81.136.154200 OK 26 kB URL HTTP/1.1 www.americafirst.com/content/dam/nav/nav-services-03.jpg
IP 206.81.136.154:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Hash a5f8703ff8569c481686dee7efdfbe71
359441bc385f5d9fbb236fc97616df5a3ebcd701
ab8da6f834b214aa136841d1652d27f3bfbc5cee47bff31ccdf0e5a08f026906
GET /content/dam/nav/nav-services-03.jpg HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 26264
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
public.cobrowse.oraclecloud.com/rely/client/ui/livelook_ui_manager.bundle.js
104.110.2.75200 OK 21 kB URL HTTP/2 public.cobrowse.oraclecloud.com/rely/client/ui/livelook_ui_manager.bundle.js
IP 104.110.2.75:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash c71817d4d41ad2a3069aa18ed35afdee
177989b846b7f092036daa1f1e5b26f245e8c576
0cdedffe5d8f066d5401afa0f96159649d2296d49a48339cf093c9d9677e3bc6
GET /rely/client/ui/livelook_ui_manager.bundle.js HTTP/1.1
Host: public.cobrowse.oraclecloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "619ea4c083a27523d708e062b444ad6b:1648187515.534791"
last-modified: Fri, 25 Mar 2022 00:51:52 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
date: Tue, 31 Jan 2023 03:08:23 GMT
content-length: 20968
content-type: text/javascript; charset=utf-8
X-Firefox-Spdy: h2
www.americafirst.com/content/dam/visa/visa-card-signature-mega.jpg
206.81.136.154200 OK 73 kB URL HTTP/1.1 www.americafirst.com/content/dam/visa/visa-card-signature-mega.jpg
IP 206.81.136.154:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2019:12:05 09:57:21], baseline, precision 8, 300x250, components 3\012- data
Hash 654623c1eca99226260d4088c59f5769
daf39810839c151ad081ffb21cb48dcec37684ef
b576be4e253bd51d928168804d9584916507a203d920c9208dfe132621018f12
GET /content/dam/visa/visa-card-signature-mega.jpg HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 72575
Keep-Alive: timeout=5, max=18
Connection: Keep-Alive
Content-Type: image/jpeg
www.googletagmanager.com/gtag/js?id=AW-791415936&l=dataLayer
142.250.74.40200 OK 51 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-791415936&l=dataLayer
IP 142.250.74.40:0
File type ASCII text, with very long lines (1759)
Hash 4f228521019859a4fdb9f908af794ddf
fb9495f60f77c290432339da9418373f533ed911
ffd99e237b42c7b052916a9fa1e90fc1bf96cc100770477c41d5d7ace2567db1
GET /gtag/js?id=AW-791415936&l=dataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 31 Jan 2023 03:08:23 GMT
expires: Tue, 31 Jan 2023 03:08:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 50832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
public.cobrowse.oraclecloud.com/rely/resources/images/v4llpanel/wait.gif
104.110.2.75200 OK 56 kB URL HTTP/2 public.cobrowse.oraclecloud.com/rely/resources/images/v4llpanel/wait.gif
IP 104.110.2.75:0
File type GIF image data, version 89a, 220 x 24\012- data
Hash 9c93dd978bd0230c76e230af8fd04c02
e1c9a00f267d3ed3435de98ce008788e2349fd91
527a1ec8fe47ac6533dad4bccbfc1e2ea49f6cf0fac6bcabf1dc896cfa7b5e0f
GET /rely/resources/images/v4llpanel/wait.gif HTTP/1.1
Host: public.cobrowse.oraclecloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/gif
etag: "9c93dd978bd0230c76e230af8fd04c02:1666988500.023083"
last-modified: Fri, 28 Oct 2022 20:21:40 GMT
server: AkamaiNetStorage
content-length: 55779
date: Tue, 31 Jan 2023 03:08:23 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
listen.audiohook.com/62bca906-f665-4c3f-ba78-eecdf2220bf5/pixel.png
107.21.145.22200 OK 42 B URL HTTP/2 listen.audiohook.com/62bca906-f665-4c3f-ba78-eecdf2220bf5/pixel.png
IP 107.21.145.22:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /62bca906-f665-4c3f-ba78-eecdf2220bf5/pixel.png HTTP/1.1
Host: listen.audiohook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 03:08:23 GMT
content-type: image/gif
content-length: 42
server: meinheld/1.0.2
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.americafirst.com/content/dam/afcu/logo/logo-desktop-inverse.png
206.81.136.154200 OK 10 kB URL HTTP/1.1 www.americafirst.com/content/dam/afcu/logo/logo-desktop-inverse.png
IP 206.81.136.154:0
File type PNG image data, 390 x 134, 8-bit/color RGBA, non-interlaced\012- data
Hash 55a1e45732b0d0cb9435fcf2c85914a8
8f9ebea0799281fa44904feee3dab6041b467d2a
96b761c941e24fe52b008c62e966aef6e6c8e8a60578cf473914cf94b16adde6
GET /content/dam/afcu/logo/logo-desktop-inverse.png HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Cookie: AMCV_A7873BC75245AD770A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19389%7CvVersion%7C5.5.0; mbox=session#aa713c79c9da423792f2783b6c2a86ca#1675136379; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 9957
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
www.americafirst.com/content/dam/business/20_03_AFCU_SBAPPP_Forgive_Message.jpg
206.81.136.154200 OK 21 kB URL HTTP/1.1 www.americafirst.com/content/dam/business/20_03_AFCU_SBAPPP_Forgive_Message.jpg
IP 206.81.136.154:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 300x250, components 3\012- data
Hash 56a4d6e72dbcb720820272077b6db785
796c589c3b12f4b27d4508149000edf51a02a3af
4cc97dc3a3d6faa8e866600202b98af8fd7008e93d3463d6a04b380f26f0d573
GET /content/dam/business/20_03_AFCU_SBAPPP_Forgive_Message.jpg HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 20583
Keep-Alive: timeout=5, max=39
Connection: Keep-Alive
Content-Type: image/jpeg
www.americafirst.com/content/dam/nav/nav-about-02.jpg
206.81.136.154200 OK 34 kB URL HTTP/1.1 www.americafirst.com/content/dam/nav/nav-about-02.jpg
IP 206.81.136.154:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Hash 6f3cd2c29035f40678a77eb275e92a24
c2ae338b5b20e2784eb52b5940dd994d6c3903d0
9b026865527a86a69ccecccbc65f7d93361a6ca8c58ab92470cdf8cd2de5724e
GET /content/dam/nav/nav-about-02.jpg HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 34420
Keep-Alive: timeout=5, max=38
Connection: Keep-Alive
Content-Type: image/jpeg
www.americafirst.com/content/dam/services/hbg-atm-services.jpg
206.81.136.154200 OK 144 kB URL HTTP/1.1 www.americafirst.com/content/dam/services/hbg-atm-services.jpg
IP 206.81.136.154:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1920x350, components 3\012- data
Size 144 kB (144232 bytes)
Hash affe84eae9bfd543485baae9838ed46f
d379f76098d93614d9e103c3972d937d78e6f743
441e8035b9b3c7ff1308eefadaf29aa740f0ba261ae4c2601582cf6bb58a296c
GET /content/dam/services/hbg-atm-services.jpg HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Cookie: AMCV_A7873BC75245AD770A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19389%7CvVersion%7C5.5.0; mbox=session#aa713c79c9da423792f2783b6c2a86ca#1675136379; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 144232
Keep-Alive: timeout=5, max=44
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d3c5444c58d6fcf1b2fb3bcff10311a7
9f610e32a917333e0f8d8dd646e4a36b568d440e
ad04ad784518cf27fc8b57e9a8f76b1bc29dd92a7c134314021ff16548b1e9f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:24 GMT
Etag: "63d7077a-1d7"
Server: ECS (amb/6B7E)
Content-Length: 471
sstats.americafirst.com/id?d_visid_ver=5.5.0&d_fieldgroup=MC&mcorgid=A7873BC75245AD770A490D4D%40AdobeOrg&ts=1675134518689
15.236.117.205200 OK 48 B URL HTTP/2 sstats.americafirst.com/id?d_visid_ver=5.5.0&d_fieldgroup=MC&mcorgid=A7873BC75245AD770A490D4D%40AdobeOrg&ts=1675134518689
IP 15.236.117.205:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b5c35f7f0f5f73bd85f140193e0fbd6
d3f6760e29ee0495500f4a20dbae2324d41dc6df
dfbbd4088ee8ee139a7e9977063cefaa38a38acf6f7f6b943c3715efccbb014a
GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&mcorgid=A7873BC75245AD770A490D4D%40AdobeOrg&ts=1675134518689 HTTP/1.1
Host: sstats.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Cookie: AMCV_A7873BC75245AD770A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19389%7CvVersion%7C5.5.0; mbox=session#aa713c79c9da423792f2783b6c2a86ca#1675136379; at_check=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://www.americafirst.com
access-control-allow-credentials: true
date: Tue, 31 Jan 2023 03:08:24 GMT
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: AMCV_A7873BC75245AD770A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19389%7CvVersion%7C5.5.0%7CMCMID%7C51907228541660218431132311050829955112; Path=/; Domain=americafirst.com; Max-Age=63072000; Expires=Thu, 30 Jan 2025 03:08:08 GMT;
s_ecid=MCMID%7C51907228541660218431132311050829955112; Path=/; Domain=americafirst.com; Max-Age=63072000; Expires=Thu, 30 Jan 2025 03:08:08 GMT; SameSite=Lax;
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 48
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.americafirst.com/content/dam/nav/nav-loans-02.jpg
206.81.136.154200 OK 30 kB URL HTTP/1.1 www.americafirst.com/content/dam/nav/nav-loans-02.jpg
IP 206.81.136.154:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Hash 075c8ddbe10da377b9e0fa000cbd6923
9545743e2c7add002c66d2b7a474dd3fa4be0f2c
fadbf02e0f7b34d1da7e0791c2398e5abaf27b914d5825088adcd6af5071a6b7
GET /content/dam/nav/nav-loans-02.jpg HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:23 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:23 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 29739
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&d_mid=51907228541660218431132311050829955112&ts=1675134519067
34.251.47.116200 OK 897 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&d_mid=51907228541660218431132311050829955112&ts=1675134519067
IP 34.251.47.116:0
File type JSON data\012- , ASCII text, with very long lines (2321), with no line terminators
Hash efaf21ea7922d9aa4f7a822988883c36
7bb2011e5a47ebfaa2ea4ac9ac3833e6df9358aa
ca04142635cdf54faafc8135552edbdd616ff79d97931d33125473b19afcf924
GET /id?d_visid_ver=5.5.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=A7873BC75245AD770A490D4D%40AdobeOrg&d_nsid=0&d_mid=51907228541660218431132311050829955112&ts=1675134519067 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.americafirst.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-0ed41892e.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=47933936707678731190376734655360060068; Max-Age=15552000; Expires=Sun, 30 Jul 2023 03:08:24 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: 28B6eBcRQ20=
Content-Length: 897
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f8ea24ecb6a19ffdd8ccbccc43eeb6b8
6ffba8f506cbf135ce001d1ab10aa88aae7eb738
29314c2367f53dbcad9155f39a5f71e9f1e70abfc36f0bb525ed1ee4a52428d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5676
Cache-Control: max-age=144197
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:24 GMT
Etag: "63d80041-1d7"
Expires: Wed, 01 Feb 2023 19:11:41 GMT
Last-Modified: Mon, 30 Jan 2023 17:37:05 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
www.americafirst.com/content/dam/fraud-alert.png
206.81.136.154200 OK 9.3 kB URL HTTP/1.1 www.americafirst.com/content/dam/fraud-alert.png
IP 206.81.136.154:0
File type PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data
Hash dd7bdf0aaaf27f83c082611b017b95ea
bd8154d11973b6135b7f03c9084311628241e8cf
04b1df5dce9cfce88abc012067950b7c579a7f7922cd10ce5994261794ff4a79
GET /content/dam/fraud-alert.png HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Cookie: AMCV_A7873BC75245AD770A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19389%7CvVersion%7C5.5.0; mbox=session#aa713c79c9da423792f2783b6c2a86ca#1675136379; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:24 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:24 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 9298
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
js.adsrvr.org/up_loader.1.1.0.js
54.230.241.118200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP 54.230.241.118:0
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8014ea74946aee77ef2f3b9a264be553
fda85fc27ac2f811e543c11436cf5623cbd46bb2
271b1db0f8cff912a931b78cedb32fd59adeb60025dbcbd7cc5add7d03c82f7c
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 30 Jan 2023 08:26:11 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yLOGrhXrRDPgWIe7BOm5FvQx4Vn9ZmtTWiyT_V0jfb1n140hD5SyaA==
Age: 67334
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4fa4e3a6c0ea0d843f6f77af6a290fca
965944af181e8d47677e5b428e8a3233c942cf99
801765bb2eb7f84e39a58691c4798b32ccd9e6ed22e924754d26277f4f2e0b11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5687
Cache-Control: max-age=103170
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:24 GMT
Etag: "63d75ff3-1d7"
Expires: Wed, 01 Feb 2023 07:47:54 GMT
Last-Modified: Mon, 30 Jan 2023 06:13:07 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 31 Jan 2023 01:46:59 GMT
expires: Tue, 31 Jan 2023 03:46:59 GMT
cache-control: public, max-age=7200
age: 4885
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
americafirstcreditunion.demdex.net/dest5.html?d_nsid=0
34.250.119.25200 OK 2.8 kB URL HTTP/1.1 americafirstcreditunion.demdex.net/dest5.html?d_nsid=0
IP 34.250.119.25:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: americafirstcreditunion.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Tue, 31 Jan 2023 03:08:24 GMT
DCS: dcs-prod-irl1-1-v045-0e6039550.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Fri, 28 Oct 2022 11:02:57 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: 9NUbN7ohQkU=
Content-Length: 2791
Connection: keep-alive
americafirstcreditun.tt.omtrdc.net/rest/v1/delivery?client=americafirstcreditun&sessionId=aa713c79c9da423792f2783b6c2a86ca&version=2.10.0
52.31.125.76200 OK 28 kB URL HTTP/2 americafirstcreditun.tt.omtrdc.net/rest/v1/delivery?client=americafirstcreditun&sessionId=aa713c79c9da423792f2783b6c2a86ca&version=2.10.0
IP 52.31.125.76:0
File type JSON data\012- , ASCII text, with very long lines (63985)
Hash 673e3f32bd9ca64898417efa2c416ff0
9b5bd448cdc0d03093c323681222241bb9d664a8
5df3c9ad8d25afd5752150f826a2e0adee0f11d52a0967df623344ffefe3a57a
POST /rest/v1/delivery?client=americafirstcreditun&sessionId=aa713c79c9da423792f2783b6c2a86ca&version=2.10.0 HTTP/1.1
Host: americafirstcreditun.tt.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 968
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 03:08:24 GMT
content-type: application/json;charset=UTF-8
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
access-control-allow-origin: https://www.americafirst.com
access-control-allow-credentials: true
x-request-id: b0ecdac26faaf8d81860dbfe6099b78a
timing-allow-origin: *
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List
content-encoding: gzip
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=260760357&t=pageview&_s=1&dl=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&dr=https%3A%2F%2Faafcu3.web.app%2F&ul=en-us&de=UTF-8&dt=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YCDACAABBAAAAC~&jid=1179654586&gjid=765775476&cid=244699461.1675134519&tid=UA-18557726-1&_gid=1859039929.1675134519&_r=1&_slc=1&z=142846490
142.250.74.110200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=260760357&t=pageview&_s=1&dl=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&dr=https%3A%2F%2Faafcu3.web.app%2F&ul=en-us&de=UTF-8&dt=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YCDACAABBAAAAC~&jid=1179654586&gjid=765775476&cid=244699461.1675134519&tid=UA-18557726-1&_gid=1859039929.1675134519&_r=1&_slc=1&z=142846490
IP 142.250.74.110:0
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=260760357&t=pageview&_s=1&dl=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&dr=https%3A%2F%2Faafcu3.web.app%2F&ul=en-us&de=UTF-8&dt=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YCDACAABBAAAAC~&jid=1179654586&gjid=765775476&cid=244699461.1675134519&tid=UA-18557726-1&_gid=1859039929.1675134519&_r=1&_slc=1&z=142846490 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.americafirst.com
date: Tue, 31 Jan 2023 03:08:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4fa4e3a6c0ea0d843f6f77af6a290fca
965944af181e8d47677e5b428e8a3233c942cf99
801765bb2eb7f84e39a58691c4798b32ccd9e6ed22e924754d26277f4f2e0b11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5687
Cache-Control: max-age=103170
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:24 GMT
Etag: "63d75ff3-1d7"
Expires: Wed, 01 Feb 2023 07:47:54 GMT
Last-Modified: Mon, 30 Jan 2023 06:13:07 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
www.americafirst.com/etc/designs/afcu/favicon.ico
206.81.136.154200 OK 539 B URL HTTP/1.1 www.americafirst.com/etc/designs/afcu/favicon.ico
IP 206.81.136.154:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash cf6a37e110a617a3e7413b77d97289b8
801be9f2564697765c78184bddd08c62742dc718
d6ef48fc93e655c8b777ffee311f873fd3fb0ebc156b18ac0f34b73c93119045
GET /etc/designs/afcu/favicon.ico HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Cookie: AMCV_A7873BC75245AD770A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19389%7CMCMID%7C51907228541660218431132311050829955112%7CMCAID%7CNONE%7CMCOPTOUT-1675141719s%7CNONE%7CMCAAMLH-1675739319%7C6%7CMCAAMB-1675739319%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C5.5.0; mbox=session#aa713c79c9da423792f2783b6c2a86ca#1675136380; at_check=true; _gcl_au=1.1.540155075.1675134519; _ga_880V30VXTN=GS1.1.1675134518.1.0.1675134518.0.0.0; _ga=GA1.1.244699461.1675134519; s_ecid=MCMID%7C51907228541660218431132311050829955112; AMCVS_A7873BC75245AD770A490D4D%40AdobeOrg=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:24 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For,Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:24 GMT
Content-Encoding: gzip
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 539
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 86cf818bffb8cb761f821e913e733777
375370821dbcce4c6dfd417d06aa4ba20aaa52c7
4eaed581a78493e17ebb7ac7d947de065e7cbe567ebc57f6d61ce967f1dd369a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 31 Jan 2023 03:08:24 GMT
Last-Modified: Tue, 31 Jan 2023 02:49:46 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JwBxosvnUAlQT5NK7cljQsixxXDQXXdaz_4J9kbfPATAzMTe4Z154g==
Age: 1118
www.americafirst.com/etc/designs/afcu/app-icon.png
206.81.136.154200 OK 22 kB URL HTTP/1.1 www.americafirst.com/etc/designs/afcu/app-icon.png
IP 206.81.136.154:0
File type PNG image data, 175 x 175, 8-bit/color RGB, non-interlaced\012- data
Hash 932d24e68290973a7aca51f7d75aa1ec
79f9906573424ec3c8c14e14c98afcf82e82fa21
a4c742b8570790ea5039e38793f3dd9a46b3d2be81eb9fc9797b31515dd861b6
GET /etc/designs/afcu/app-icon.png HTTP/1.1
Host: www.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/services/other-services/atm.html
Cookie: AMCV_A7873BC75245AD770A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19389%7CMCMID%7C51907228541660218431132311050829955112%7CMCAID%7CNONE%7CMCOPTOUT-1675141719s%7CNONE%7CMCAAMLH-1675739319%7C6%7CMCAAMB-1675739319%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C5.5.0; mbox=session#aa713c79c9da423792f2783b6c2a86ca#1675136380; at_check=true; _gcl_au=1.1.540155075.1675134519; _ga_880V30VXTN=GS1.1.1675134518.1.0.1675134518.0.0.0; _ga=GA1.1.244699461.1675134519; s_ecid=MCMID%7C51907228541660218431132311050829955112; AMCVS_A7873BC75245AD770A490D4D%40AdobeOrg=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 03:08:24 GMT
Server: Apache
Content-Security-Policy: frame-ancestors https://*.americafirst.com;
Vary: X-Forwarded-For
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 02 Mar 2023 03:08:24 GMT
Content-Disposition: inline
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: ALLOW-FROM https://apps.americafirst.com
Content-Length: 21908
Keep-Alive: timeout=5, max=15
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 69ffc0a3f7ca2b025a6b99f9c38889be
1b436bda66cd246a1024f8c3d8e91e3aeef31eaa
9aaaf6c2a570c6a73a623f4fdfb0e1dfd5f16f086ae5d9c8d5b2403b0d016e4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cm.everesttech.net/cm/dd?d_uuid=47933936707678731190376734655360060068
54.229.62.148302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=47933936707678731190376734655360060068
IP 54.229.62.148:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=47933936707678731190376734655360060068 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 31 Jan 2023 03:08:24 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y9iGKAAAAM1XTAMx; Domain=.everesttech.net; Expires=Wed, 31-Jan-2024 03:08:24 GMT; Path=/
everest_session_v2=Y9iGKAAAAM1XTQMx; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y9iGKAAAAM1XTAMx
Server: AMO-cookiemap/1.1
static.ads-twitter.com/uwt.js
151.101.244.157200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP 151.101.244.157:0
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Tue, 31 Jan 2023 03:08:24 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/614375826/?random=1675134519480&cv=11&fst=1675134519480&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&auid=540155075.1675134519&data=event%3Dgtag.config&rfmt=3&fmt=4
142.250.74.66200 OK 962 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/614375826/?random=1675134519480&cv=11&fst=1675134519480&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&auid=540155075.1675134519&data=event%3Dgtag.config&rfmt=3&fmt=4
IP 142.250.74.66:0
File type ASCII text, with very long lines (2153), with no line terminators
Hash 5effad3a37f9e9d78e47b925382c97d5
8827ec616cb5045cf62e1b976246e4fe3319e122
1a6251b444ccf3104c045d575a930b94fd5cd8809aa8a8bd1fae60a31e1bfd4e
GET /pagead/viewthroughconversion/614375826/?random=1675134519480&cv=11&fst=1675134519480&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&auid=540155075.1675134519&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 03:08:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 962
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 31-Jan-2023 03:23:24 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/791415936/?random=1675134519382&cv=11&fst=1675134519382&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&auid=540155075.1675134519&data=event%3Dgtag.config&rfmt=3&fmt=4
142.250.74.66200 OK 963 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/791415936/?random=1675134519382&cv=11&fst=1675134519382&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&auid=540155075.1675134519&data=event%3Dgtag.config&rfmt=3&fmt=4
IP 142.250.74.66:0
File type ASCII text, with very long lines (2155), with no line terminators
Hash 39a50657c05e31b67441fc66525c29e7
cadea182a0e6f3390d9568248f3c0eb4a7380afa
71c31678462bb79cf4cdbef89a1430f0a4bf3099e90f6a837baab3eac06c0114
GET /pagead/viewthroughconversion/791415936/?random=1675134519382&cv=11&fst=1675134519382&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&auid=540155075.1675134519&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 03:08:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 963
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 31-Jan-2023 03:23:24 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=411&dpuuid=Y9iGKAAAAM1XTAMx
34.251.47.116302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y9iGKAAAAM1XTAMx
IP 34.251.47.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y9iGKAAAAM1XTAMx HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americafirst.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-0a4852727.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y9iGKAAAAM1XTAMx
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=47949109389988534982635603231698141869; Max-Age=15552000; Expires=Sun, 30 Jul 2023 03:08:24 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: h+8VEvrPSOg=
Content-Length: 0
Connection: keep-alive
s.yimg.com/wi/ytc.js
87.248.119.251200 OK 5.9 kB IP 87.248.119.251:0
ASN #203220 Yahoo! UK Services Limited
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: SMyZ5G+7oRL/Ono+swPUF/iDQ6VWvd+mp7SpCrX7MS8e8VUwbW6TEZXCVsEwadY70WZdIsyxZgc=
x-amz-request-id: RWHR4M0NQDQA56AR
date: Tue, 31 Jan 2023 03:08:06 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 19
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-880V30VXTN>m=2oe1p0&_p=260760357&cid=244699461.1675134519&ul=en-us&sr=1280x1024&uaW=1&_s=1&uid=&sid=1675134518&sct=1&seg=0&dl=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&dr=https%3A%2F%2Faafcu3.web.app%2F&dt=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=&ep.anonymize_ip=false
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-880V30VXTN>m=2oe1p0&_p=260760357&cid=244699461.1675134519&ul=en-us&sr=1280x1024&uaW=1&_s=1&uid=&sid=1675134518&sct=1&seg=0&dl=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&dr=https%3A%2F%2Faafcu3.web.app%2F&dt=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=&ep.anonymize_ip=false
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-880V30VXTN>m=2oe1p0&_p=260760357&cid=244699461.1675134519&ul=en-us&sr=1280x1024&uaW=1&_s=1&uid=&sid=1675134518&sct=1&seg=0&dl=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&dr=https%3A%2F%2Faafcu3.web.app%2F&dt=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=&ep.anonymize_ip=false HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.americafirst.com
date: Tue, 31 Jan 2023 03:08:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 69ffc0a3f7ca2b025a6b99f9c38889be
1b436bda66cd246a1024f8c3d8e91e3aeef31eaa
9aaaf6c2a570c6a73a623f4fdfb0e1dfd5f16f086ae5d9c8d5b2403b0d016e4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 314 B IP 93.184.220.29:0
Hash 6061660d0c8c8a3292454cb1c819259e
54ac533237acc8ff7624f460b91d50657322bdcf
2d7e1e8fe3615783905c47576f05b5cd9189a3cc4e15996dbe66e4388dac190c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4410
Cache-Control: max-age=122386
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:24 GMT
Etag: "63d7b000-13a"
Expires: Wed, 01 Feb 2023 13:08:10 GMT
Last-Modified: Mon, 30 Jan 2023 11:54:40 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 314
sstats.americafirst.com/b/ss/afcu.global/1/JS-2.23.0-LCXS/s53101700537570?AQB=1&ndh=1&pf=1&t=31%2F0%2F2023%203%3A8%3A39%202%200&sdid=303834EBF686B791-42BBA1EE8F706671&mid=51907228541660218431132311050829955112&aamlh=6&ce=UTF-8&ns=americafirstcreditunion&cdp=2&fpCookieDomainPeriods=2&pageName=www%3Apersonal%3Aservices%3Aother-services%3Aatm&g=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&r=https%3A%2F%2Faafcu3.web.app%2F&cc=USD&ch=personal&events=prodView&products=%3Baccounts%3B&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&v1=www&c2=services&c3=other-services&v3=user%3A%20age&c4=%20&v5=en&c6=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&v17=desktop&v18=landscape&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=A7873BC75245AD770A490D4D%40AdobeOrg&AQE=1
15.236.117.205200 OK 43 B URL HTTP/2 sstats.americafirst.com/b/ss/afcu.global/1/JS-2.23.0-LCXS/s53101700537570?AQB=1&ndh=1&pf=1&t=31%2F0%2F2023%203%3A8%3A39%202%200&sdid=303834EBF686B791-42BBA1EE8F706671&mid=51907228541660218431132311050829955112&aamlh=6&ce=UTF-8&ns=americafirstcreditunion&cdp=2&fpCookieDomainPeriods=2&pageName=www%3Apersonal%3Aservices%3Aother-services%3Aatm&g=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&r=https%3A%2F%2Faafcu3.web.app%2F&cc=USD&ch=personal&events=prodView&products=%3Baccounts%3B&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&v1=www&c2=services&c3=other-services&v3=user%3A%20age&c4=%20&v5=en&c6=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&v17=desktop&v18=landscape&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=A7873BC75245AD770A490D4D%40AdobeOrg&AQE=1
IP 15.236.117.205:0
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/afcu.global/1/JS-2.23.0-LCXS/s53101700537570?AQB=1&ndh=1&pf=1&t=31%2F0%2F2023%203%3A8%3A39%202%200&sdid=303834EBF686B791-42BBA1EE8F706671&mid=51907228541660218431132311050829955112&aamlh=6&ce=UTF-8&ns=americafirstcreditunion&cdp=2&fpCookieDomainPeriods=2&pageName=www%3Apersonal%3Aservices%3Aother-services%3Aatm&g=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&r=https%3A%2F%2Faafcu3.web.app%2F&cc=USD&ch=personal&events=prodView&products=%3Baccounts%3B&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&v1=www&c2=services&c3=other-services&v3=user%3A%20age&c4=%20&v5=en&c6=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&v17=desktop&v18=landscape&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=A7873BC75245AD770A490D4D%40AdobeOrg&AQE=1 HTTP/1.1
Host: sstats.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Cookie: AMCV_A7873BC75245AD770A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19389%7CMCMID%7C51907228541660218431132311050829955112%7CMCAID%7CNONE%7CMCOPTOUT-1675141719s%7CNONE%7CMCAAMLH-1675739319%7C6%7CMCAAMB-1675739319%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C5.5.0; mbox=session#aa713c79c9da423792f2783b6c2a86ca#1675136380|PC#aa713c79c9da423792f2783b6c2a86ca.37_0#1738379320; at_check=true; _gcl_au=1.1.540155075.1675134519; _ga_880V30VXTN=GS1.1.1675134518.1.0.1675134518.0.0.0; _ga=GA1.2.244699461.1675134519; s_ecid=MCMID%7C51907228541660218431132311050829955112; AMCVS_A7873BC75245AD770A490D4D%40AdobeOrg=1; _gid=GA1.2.1859039929.1675134519; _gat=1; s_ppv=www%253Apersonal%253Aservices%253Aother-services%253Aatm%2C38%2C38%2C939%2C1%2C2; s_ips=939; s_tp=2486; s_cc=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Tue, 31 Jan 2023 03:08:24 GMT
expires: Mon, 30 Jan 2023 03:08:24 GMT
last-modified: Wed, 01 Feb 2023 03:08:24 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C51907228541660218431132311050829955112; Path=/; Domain=americafirst.com; Max-Age=63072000; Expires=Thu, 30 Jan 2025 03:08:08 GMT;
etag: 3597323956660404224-4619867667005050867
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 8cde1b9e3a55e5871ccbcf93372695c9
13e2b6067daeabaeabdbfe34c408dbcfe1510692
4ebc62deedd05ca63afce78fa3d38c4eafa6c3d6916cf8510343228dd570db99
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102309
Date: Tue, 31 Jan 2023 03:08:24 GMT
Etag: "63d75a5c-1d7"
Expires: Wed, 01 Feb 2023 07:33:33 GMT
Last-Modified: Mon, 30 Jan 2023 05:49:16 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YbsSJ0RLMs4ei0FYfFJ3S6AEyTy4lfklZTcXX_2c04xW3EGq3jZM3w==
Age: 6257
api.glia.com/salemove_integration.js
54.230.111.22200 OK 8.8 kB URL HTTP/2 api.glia.com/salemove_integration.js
IP 54.230.111.22:0
File type ASCII text, with very long lines (8817), with no line terminators
Hash 8fbf3720d25bde79ccad301ab0a57770
284c0580081d07ce07cb228a426b282d1c23ef50
4996a669924fcb34708faf10f65ed249873a10eaf1270391ac0d426477d1a391
GET /salemove_integration.js HTTP/1.1
Host: api.glia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 8817
last-modified: Mon, 30 Jan 2023 18:09:34 GMT
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=63072000; includeSubdomains; preload
date: Tue, 31 Jan 2023 03:06:08 GMT
etag: "8fbf3720d25bde79ccad301ab0a57770"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mXiraW56pZtZVv-9n87UqIEJe6kz5CdDvvU5TwnCkBQd8PRSDhax6A==
age: 273
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=56a2938c-ab64-4024-9bd8-67bb6d92eef8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=24c979a7-9ef6-4aae-a5fc-e4d5793d99a6&tw_document_href=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1epw&type=javascript&version=2.3.29
104.244.42.69200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=56a2938c-ab64-4024-9bd8-67bb6d92eef8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=24c979a7-9ef6-4aae-a5fc-e4d5793d99a6&tw_document_href=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1epw&type=javascript&version=2.3.29
IP 104.244.42.69:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=56a2938c-ab64-4024-9bd8-67bb6d92eef8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=24c979a7-9ef6-4aae-a5fc-e4d5793d99a6&tw_document_href=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1epw&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 03:08:24 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=55e3eadc-bc0d-4fe3-80a5-4e12502ae751; Max-Age=63072000; Expires=Thu, 30 Jan 2025 03:08:24 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 0435a6dce0e206c1
strict-transport-security: max-age=0
x-response-time: 105
x-connection-hash: c7dc6de656c81b272884f6c04a6640bd1d26260e23d9149b30434ce1e615a36a
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y9iGKAAAAM1XTAMx
34.251.47.116200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y9iGKAAAAM1XTAMx
IP 34.251.47.116:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y9iGKAAAAM1XTAMx HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americafirst.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-06cd512cb.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: xB9dc1BGQx4=
Content-Length: 59
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2ac1bcdceabf1fc4e07017906aa8a815
ba00b737325fc50b35af8d851ced0fe13d1cba22
c6c54f5dbbfc40b454b9c67a7972827f500d83b10a1594f7cb56c69158278c08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 73d6f94eec5f7bf78dc11951011af215
2d7941713a82a83c174bf782b618a6f86a8ab2d7
9de1920abadb3501bcf9f787608807f13a266efea69f12fc811bc7cac14a3552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 73d6f94eec5f7bf78dc11951011af215
2d7941713a82a83c174bf782b618a6f86a8ab2d7
9de1920abadb3501bcf9f787608807f13a266efea69f12fc811bc7cac14a3552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2ac1bcdceabf1fc4e07017906aa8a815
ba00b737325fc50b35af8d851ced0fe13d1cba22
c6c54f5dbbfc40b454b9c67a7972827f500d83b10a1594f7cb56c69158278c08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-18557726-1&cid=244699461.1675134519&jid=1179654586&gjid=765775476&_gid=1859039929.1675134519&_u=YCDACAAABAAAAC~&z=78565188
173.194.220.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-18557726-1&cid=244699461.1675134519&jid=1179654586&gjid=765775476&_gid=1859039929.1675134519&_u=YCDACAAABAAAAC~&z=78565188
IP 173.194.220.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-18557726-1&cid=244699461.1675134519&jid=1179654586&gjid=765775476&_gid=1859039929.1675134519&_u=YCDACAAABAAAAC~&z=78565188 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.americafirst.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 31 Jan 2023 03:08:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash beba92ff0bc5737791ba6982e7b0dba5
712af102d8a29ef26a49a16f95e8e90e3d9067b6
a778a2a369102dfbf4c67d64ff337d136f1ae79b4c1f72d0d4d7c0cfb3704e37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4764
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:25 GMT
Last-Modified: Tue, 31 Jan 2023 01:49:01 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 313
www.google.com/pagead/1p-user-list/614375826/?random=1675134519480&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=783067040&rmt_tld=0&ipr=y
142.250.74.132200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/614375826/?random=1675134519480&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=783067040&rmt_tld=0&ipr=y
IP 142.250.74.132:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/614375826/?random=1675134519480&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=783067040&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 03:08:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/614375826/?random=1675134519480&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=783067040&rmt_tld=1&ipr=y
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/614375826/?random=1675134519480&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=783067040&rmt_tld=1&ipr=y
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/614375826/?random=1675134519480&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=783067040&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 03:08:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/791415936/?random=1675134519382&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1127780023&rmt_tld=1&ipr=y
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/791415936/?random=1675134519382&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1127780023&rmt_tld=1&ipr=y
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/791415936/?random=1675134519382&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1127780023&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 03:08:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/791415936/?random=1675134519382&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1127780023&rmt_tld=0&ipr=y
142.250.74.132200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/791415936/?random=1675134519382&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1127780023&rmt_tld=0&ipr=y
IP 142.250.74.132:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/791415936/?random=1675134519382&cv=11&fst=1675134000000&bg=ffffff&guid=ON&async=1>m=2oa1p0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&ref=https%3A%2F%2Faafcu3.web.app%2F&tiba=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1127780023&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 03:08:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10143434.json
87.248.119.251200 OK 2 B URL HTTP/2 s.yimg.com/wi/config/10143434.json
IP 87.248.119.251:0
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10143434.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: MX6HVQ8A6FTER8DY
x-amz-id-2: rlystxY/2rnqyRb3i0oRHV4sq5TVvqFwof4XvWknA6tfiYiB9hQn0tjyY2YX245Nf/eMxh9tupg=
content-type: application/json
date: Tue, 31 Jan 2023 02:52:44 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 941
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10167917.json
87.248.119.251200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10167917.json
IP 87.248.119.251:0
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 8b08aa3cd19296abc9c1cfeae2333513
9e7d06f8e9346c2263604128c15b9ec6260c332d
6da0ae189c7faa7916c49c526ad974e168c11453983976d043c524e95259a764
GET /wi/config/10167917.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: MNN6dXi+zj0jU+EdRx9w1vtcLTr9O0C9GyG1xv6Y/Zc7UEZYbnhuE2oLwjRWaANHzLhE2Yln1+g=
x-amz-request-id: G9ESGQGSDAZGV36R
date: Mon, 30 Jan 2023 19:24:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Mon, 28 Nov 2022 03:55:17 GMT
x-amz-expiration: expiry-date="Wed, 03 Jan 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: pjplgioVNTBgfwmKGmtHTBYrV44ASrCq
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
etag: "8b08aa3cd19296abc9c1cfeae2333513"
age: 27830
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.glia.com/visitor_config?referrer=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&
54.230.111.22200 OK 9.8 kB URL HTTP/2 api.glia.com/visitor_config?referrer=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&
IP 54.230.111.22:0
File type JSON data\012- , ASCII text, with very long lines (9846), with no line terminators
Hash e11bd27707ca08670ee7c0543e2b0b4e
a9c88da0101b686776301222f4eadbd2d528320c
32e5cd7b712c753bb8c06772ed9f00f8551c4cb9d7ea83f2badfe0c3424cd231
POST /visitor_config?referrer=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html& HTTP/1.1
Host: api.glia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://www.americafirst.com
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 9846
date: Tue, 31 Jan 2023 03:08:25 GMT
access-control-allow-origin: https://www.americafirst.com
access-control-allow-methods: ["GET, POST, PUT, PATCH, OPTIONS, HEAD, DELETE"]
access-control-expose-headers:
access-control-max-age: 7200
access-control-allow-headers: Content-Type, Accept, Authorization
strict-transport-security: max-age=15724800; includeSubDomains
x-content-type-options: nosniff
x-site-visitor-config: true
access-control-allow-credentials: true
cache-control: no-cache, no-store, must-revalidate, max-age=0
set-cookie: visitor_session=eyJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE2NzUxMzQ1MDUsInZpc2l0b3JfaWQiOiI1NGVjYWNiMy05NWM2LTRiMzUtYTFkYy1mNzNhMGM4MWRiMTIiLCJpc3MiOiJHbGlhIFNpdGUgVmlzaXRvciBDb25maWciLCJraWQiOiI1ODRhNzJlNy1mZTI0LTQyMjAtODMzMi00NjBjNmU0MzhkZjEifQ.X6eSRjIPpnq_e7F9WCi9uUMaSyI-uau5P8IxgpUrwjcZYeBkZELUnObsz5DG5l7XhnZXnyzys3mlPUF7lW6GmQ; path=/; expires=Wed, 31 Jan 2024 03:08:25 -0000; secure; HttpOnly; SameSite=None
incompat_visitor_session=eyJhbGciOiJFUzI1NiJ9.eyJpYXQiOjE2NzUxMzQ1MDUsInZpc2l0b3JfaWQiOiI1NGVjYWNiMy05NWM2LTRiMzUtYTFkYy1mNzNhMGM4MWRiMTIiLCJpc3MiOiJHbGlhIFNpdGUgVmlzaXRvciBDb25maWciLCJraWQiOiI1ODRhNzJlNy1mZTI0LTQyMjAtODMzMi00NjBjNmU0MzhkZjEifQ.X6eSRjIPpnq_e7F9WCi9uUMaSyI-uau5P8IxgpUrwjcZYeBkZELUnObsz5DG5l7XhnZXnyzys3mlPUF7lW6GmQ; path=/; expires=Wed, 31 Jan 2024 03:08:25 -0000; secure; HttpOnly
vary: Origin
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JMXS9l1reSsvOuZC6nogpLaRw1Ep8dP8U1SqcfwpDV9rG87Ffi-fAA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 73d6f94eec5f7bf78dc11951011af215
2d7941713a82a83c174bf782b618a6f86a8ab2d7
9de1920abadb3501bcf9f787608807f13a266efea69f12fc811bc7cac14a3552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash a5ff07b9b81cdf319f4a57d8d6dbbd6d
736ae15d0ed2068580d35a7cff8b33c0ec87af52
24406eda914ef8f78e1f60d6b54237ea6311f2fdf54b2b63647d84b397b41de0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 03:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-18557726-1&cid=244699461.1675134519&jid=1179654586&_u=YCDACAAABAAAAC~&z=302824341
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-18557726-1&cid=244699461.1675134519&jid=1179654586&_u=YCDACAAABAAAAC~&z=302824341
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-18557726-1&cid=244699461.1675134519&jid=1179654586&_u=YCDACAAABAAAAC~&z=302824341 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 03:08:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-18557726-1&cid=244699461.1675134519&jid=1179654586&_u=YCDACAAABAAAAC~&z=302824341
142.250.74.132200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-18557726-1&cid=244699461.1675134519&jid=1179654586&_u=YCDACAAABAAAAC~&z=302824341
IP 142.250.74.132:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-18557726-1&cid=244699461.1675134519&jid=1179654586&_u=YCDACAAABAAAAC~&z=302824341 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 03:08:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=335590106865602&ev=PageView&dl=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&rl=https%3A%2F%2Faafcu3.web.app%2F&if=false&ts=1675134519929&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=28&fbp=fb.1.1675134519928.2002037161&it=1675134519403&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=335590106865602&ev=PageView&dl=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&rl=https%3A%2F%2Faafcu3.web.app%2F&if=false&ts=1675134519929&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=28&fbp=fb.1.1675134519928.2002037161&it=1675134519403&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=335590106865602&ev=PageView&dl=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&rl=https%3A%2F%2Faafcu3.web.app%2F&if=false&ts=1675134519929&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=28&fbp=fb.1.1675134519928.2002037161&it=1675134519403&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 31 Jan 2023 03:08:25 GMT
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=56a2938c-ab64-4024-9bd8-67bb6d92eef8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=24c979a7-9ef6-4aae-a5fc-e4d5793d99a6&tw_document_href=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1epw&type=javascript&version=2.3.29
104.244.42.3200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=56a2938c-ab64-4024-9bd8-67bb6d92eef8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=24c979a7-9ef6-4aae-a5fc-e4d5793d99a6&tw_document_href=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1epw&type=javascript&version=2.3.29
IP 104.244.42.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=56a2938c-ab64-4024-9bd8-67bb6d92eef8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=24c979a7-9ef6-4aae-a5fc-e4d5793d99a6&tw_document_href=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o1epw&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 03:08:24 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_jxeg7zKZ5GDsSChOmHbxJQ=="; Max-Age=63072000; Expires=Thu, 30 Jan 2025 03:08:25 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 6148020b61c04220
strict-transport-security: max-age=631138519
x-response-time: 108
x-connection-hash: 38e893219bc07739a76830a17f01888619abf0db747455714d7a2646b8a7c49a
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&.yp=10167917&f=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&e=https%3A%2F%2Faafcu3.web.app%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm%2Cadobe
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&.yp=10167917&f=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&e=https%3A%2F%2Faafcu3.web.app%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm%2Cadobe
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&.yp=10167917&f=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&e=https%3A%2F%2Faafcu3.web.app%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm%2Cadobe HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 03:08:25 GMT
expires: Tue, 31 Jan 2023 03:08:25 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBCmG2GMCEKtA95xuWWsCGkNEDiw1H28FEgEBAQHX2WPiYwAAAAAA_eMAAA&S=AQAAAusvIKr2v6nFN3y1sZpMnRI; Expires=Wed, 31 Jan 2024 09:08:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2031%20Jan%202023%2003%3A08%3A40%20GMT&n=0&b=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&.yp=10143434&f=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&e=https%3A%2F%2Faafcu3.web.app%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm%2Cadobe
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2031%20Jan%202023%2003%3A08%3A40%20GMT&n=0&b=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&.yp=10143434&f=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&e=https%3A%2F%2Faafcu3.web.app%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm%2Cadobe
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Tue%2C%2031%20Jan%202023%2003%3A08%3A40%20GMT&n=0&b=Free%20ATM%20Machine%20Locations%20in%20Utah%20and%20Nevada-%20America%20First%20Credit%20Union&.yp=10143434&f=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&e=https%3A%2F%2Faafcu3.web.app%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm%2Cadobe HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 03:08:25 GMT
expires: Tue, 31 Jan 2023 03:08:25 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBCmG2GMCEJsKEUpffIgSBpW2j-NXWgsFEgEBAQHX2WPiYwAAAAAA_eMAAA&S=AQAAApHU2lrSveGm93EDTqltKO0; Expires=Wed, 31 Jan 2024 09:08:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
libs.salemove.com/visitor/webcomponents_es5-b699746e7.js
54.230.111.92200 OK 936 B URL HTTP/2 libs.salemove.com/visitor/webcomponents_es5-b699746e7.js
IP 54.230.111.92:0
File type ASCII text, with very long lines (390)
Hash f86098c5208655efb405300993461936
a0a5b6aea7bbb6a51940f8c874aee109477c7b56
832dbd199f70ade357e88a3f5d32920c8c63e69258dc173d3b261686320895db
GET /visitor/webcomponents_es5-b699746e7.js HTTP/1.1
Host: libs.salemove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 936
date: Tue, 17 Jan 2023 05:31:50 GMT
last-modified: Wed, 11 Jan 2023 09:37:33 GMT
etag: "f86098c5208655efb405300993461936"
x-amz-meta-s3cmd-attrs: md5:f86098c5208655efb405300993461936
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=63072000; includeSubdomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: df1cARg6Sil8lzVilhuOY5S5g2HM6QA76Ga02A2k1c2FJEaEokk1Pg==
age: 1200996
X-Firefox-Spdy: h2
libs.salemove.com/visitor-app.37823f27.min.js
54.230.111.92200 OK 247 kB URL HTTP/2 libs.salemove.com/visitor-app.37823f27.min.js
IP 54.230.111.92:0
Size 247 kB (247127 bytes)
Hash b2a8a5e86baf8e02f9cd7dc68060a848
9145dd34b46c7edb81498f71ad657f9c7e7a44d9
7427eb287944020e7111ed22b1daf30adf13942d26339156646c00f1924e70ef
GET /visitor-app.37823f27.min.js HTTP/1.1
Host: libs.salemove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 11 Jan 2023 12:01:51 GMT
last-modified: Wed, 11 Jan 2023 10:17:48 GMT
etag: W/"950058b651ed103cd653c72cc9bc8d61"
x-amz-meta-s3cmd-attrs: md5:950058b651ed103cd653c72cc9bc8d61
cache-control: max-age=31536000
server: AmazonS3
strict-transport-security: max-age=63072000; includeSubdomains; preload
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AajUFD-dl7YaFHJRwxzof8qiDXFac0OUCpfDZebuOvHl36MxKm9G2Q==
age: 1695995
X-Firefox-Spdy: h2
pubsub.salemove.com/notifications/websocket?access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiIsImtpZCI6IjBmMjFmMmMxLTIzMzgtNDg0OS05ZTIxLWJiZGJiNmM5OGUwNiJ9.eyJpYXQiOjE2NzUxMzQ1MDUsImV4cCI6MTY3NjM0NDEwNSwiaXNzIjoiR2xpYSBTaXRlIFZpc2l0b3IgQ29uZmlnIiwic3ViIjoidmlzaXRvcjo1NGVjYWNiMy05NWM2LTRiMzUtYTFkYy1mNzNhMGM4MWRiMTIiLCJyb2xlcyI6W3sidHlwZSI6InZpc2l0b3IiLCJ2aXNpdG9yX2lkIjoiNTRlY2FjYjMtOTVjNi00YjM1LWExZGMtZjczYTBjODFkYjEyIn0seyJ0eXBlIjoic2l0ZV92aXNpdG9yIiwic2l0ZV9pZCI6ImUxNDU2MjFmLWUxZjUtNGRhZi05MWIxLWE5ZmU5MWZlZjJmNiIsImVuZ2FnZW1lbnRfc2l0ZV9pZHMiOlsiZTE0NTYyMWYtZTFmNS00ZGFmLTkxYjEtYTlmZTkxZmVmMmY2Il19XX0.ssL26i5olUuiAclzHIAhaRnqoACbC5fVRsuEvg0IOz8ZAZYSkJsDayJz2XcfE67jgAH8gWycniIEU4ONa5o2ZQ&priority=low&vsn=2.0.0
34.226.49.141101 Switching Protocols 0 B URL HTTP/1.1 pubsub.salemove.com/notifications/websocket?access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiIsImtpZCI6IjBmMjFmMmMxLTIzMzgtNDg0OS05ZTIxLWJiZGJiNmM5OGUwNiJ9.eyJpYXQiOjE2NzUxMzQ1MDUsImV4cCI6MTY3NjM0NDEwNSwiaXNzIjoiR2xpYSBTaXRlIFZpc2l0b3IgQ29uZmlnIiwic3ViIjoidmlzaXRvcjo1NGVjYWNiMy05NWM2LTRiMzUtYTFkYy1mNzNhMGM4MWRiMTIiLCJyb2xlcyI6W3sidHlwZSI6InZpc2l0b3IiLCJ2aXNpdG9yX2lkIjoiNTRlY2FjYjMtOTVjNi00YjM1LWExZGMtZjczYTBjODFkYjEyIn0seyJ0eXBlIjoic2l0ZV92aXNpdG9yIiwic2l0ZV9pZCI6ImUxNDU2MjFmLWUxZjUtNGRhZi05MWIxLWE5ZmU5MWZlZjJmNiIsImVuZ2FnZW1lbnRfc2l0ZV9pZHMiOlsiZTE0NTYyMWYtZTFmNS00ZGFmLTkxYjEtYTlmZTkxZmVmMmY2Il19XX0.ssL26i5olUuiAclzHIAhaRnqoACbC5fVRsuEvg0IOz8ZAZYSkJsDayJz2XcfE67jgAH8gWycniIEU4ONa5o2ZQ&priority=low&vsn=2.0.0
IP 34.226.49.141:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /notifications/websocket?access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiIsImtpZCI6IjBmMjFmMmMxLTIzMzgtNDg0OS05ZTIxLWJiZGJiNmM5OGUwNiJ9.eyJpYXQiOjE2NzUxMzQ1MDUsImV4cCI6MTY3NjM0NDEwNSwiaXNzIjoiR2xpYSBTaXRlIFZpc2l0b3IgQ29uZmlnIiwic3ViIjoidmlzaXRvcjo1NGVjYWNiMy05NWM2LTRiMzUtYTFkYy1mNzNhMGM4MWRiMTIiLCJyb2xlcyI6W3sidHlwZSI6InZpc2l0b3IiLCJ2aXNpdG9yX2lkIjoiNTRlY2FjYjMtOTVjNi00YjM1LWExZGMtZjczYTBjODFkYjEyIn0seyJ0eXBlIjoic2l0ZV92aXNpdG9yIiwic2l0ZV9pZCI6ImUxNDU2MjFmLWUxZjUtNGRhZi05MWIxLWE5ZmU5MWZlZjJmNiIsImVuZ2FnZW1lbnRfc2l0ZV9pZHMiOlsiZTE0NTYyMWYtZTFmNS00ZGFmLTkxYjEtYTlmZTkxZmVmMmY2Il19XX0.ssL26i5olUuiAclzHIAhaRnqoACbC5fVRsuEvg0IOz8ZAZYSkJsDayJz2XcfE67jgAH8gWycniIEU4ONa5o2ZQ&priority=low&vsn=2.0.0 HTTP/1.1
Host: pubsub.salemove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.americafirst.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: s+WSEO8gH3ZUEPH90FyR7A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
cache-control: max-age=0, private, must-revalidate
connection: Upgrade
date: Tue, 31 Jan 2023 03:08:25 GMT
sec-websocket-accept: bbx0PM7aN1IfIFPA79vI4Z4dKoU=
server: envoy
upgrade: websocket
libs.salemove.com/visitor-app.37823f27.default.css
54.230.111.92200 OK 0 B URL HTTP/2 libs.salemove.com/visitor-app.37823f27.default.css
IP 54.230.111.92:0
GET /visitor-app.37823f27.default.css HTTP/1.1
Host: libs.salemove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Mon, 23 Jan 2023 05:56:57 GMT
last-modified: Wed, 11 Jan 2023 10:17:48 GMT
etag: W/"e3c368308d2549c22efd3b5cf7add0ae"
x-amz-meta-s3cmd-attrs: md5:e3c368308d2549c22efd3b5cf7add0ae
cache-control: max-age=31536000
server: AmazonS3
strict-transport-security: max-age=63072000; includeSubdomains; preload
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2EMK6AhbvCd611tfEe0S4LQZYDaUhOgKTFsaHfcJteqopjX3_75xdQ==
age: 681089
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=w9sdam5&ref=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&upid=y1mqx27&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=w9sdam5&ref=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&upid=y1mqx27&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=w9sdam5&ref=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&upid=y1mqx27&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 03:08:25 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
integration.silvercloudinc.com/js/silvercloudjs/silvercloud.js
54.230.111.17200 OK 0 B URL HTTP/2 integration.silvercloudinc.com/js/silvercloudjs/silvercloud.js
IP 54.230.111.17:0
GET /js/silvercloudjs/silvercloud.js HTTP/1.1
Host: integration.silvercloudinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 18 Jan 2023 01:49:03 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 30 Jan 2023 05:26:13 GMT
etag: W/"80f213d3a2f208a7129b19b16ceaefaa"
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vvt0iBMr1MPzaKOBpfFHhW-V3udRe-VPsqNKghZ2H8iehQVqh_IiNA==
age: 78130
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
calcs.americafirst.com/scripts/tipped/comboTipped.js
148.66.212.61200 OK 0 B URL HTTP/2 calcs.americafirst.com/scripts/tipped/comboTipped.js
IP 148.66.212.61:0
GET /scripts/tipped/comboTipped.js HTTP/1.1
Host: calcs.americafirst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
vary: accept-encoding
content-type: application/javascript
content-encoding: gzip
strict-transport-security: max-age=31622400; includeSubDomains
date: Tue, 31 Jan 2023 03:08:19 GMT
x-xss-protection: 1; mode=block
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
etag: W/"66987-1555013214000"
last-modified: Thu, 11 Apr 2019 20:06:54 GMT
access-control-allow-headers: Charset, Content-Type, Accept
X-Firefox-Spdy: h2
libs.salemove.com/visitor/bootstrapper-b699746e7.js
54.230.111.92200 OK 0 B URL HTTP/2 libs.salemove.com/visitor/bootstrapper-b699746e7.js
IP 54.230.111.92:0
GET /visitor/bootstrapper-b699746e7.js HTTP/1.1
Host: libs.salemove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 24 Jan 2023 01:31:22 GMT
last-modified: Wed, 11 Jan 2023 09:37:32 GMT
etag: W/"2165cd2f7e440e8923eb5db1f3658f0e"
x-amz-meta-s3cmd-attrs: md5:2165cd2f7e440e8923eb5db1f3658f0e
cache-control: max-age=31536000
server: AmazonS3
strict-transport-security: max-age=63072000; includeSubdomains; preload
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5s0Q9N-iaIKnfExCSEclqnQoGXIPhRLF3Pj7rl_-RrSpOpEOdbd89A==
age: 610624
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=ejwe9j2&ref=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&upid=rvp9pzq&upv=1.1.0
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=ejwe9j2&ref=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&upid=rvp9pzq&upv=1.1.0
IP 15.197.193.217:0
GET /track/up?adv=ejwe9j2&ref=https%3A%2F%2Fwww.americafirst.com%2Fservices%2Fother-services%2Fatm.html&upid=rvp9pzq&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.americafirst.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 03:08:25 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2