r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4718
Expires: Tue, 22 Nov 2022 23:26:08 GMT
Date: Tue, 22 Nov 2022 22:07:30 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash b59d95402dfb464c176610284ba13f65
1a6c62fb0d48654dd204b66161bb03fefe60f71a
40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5399
Cache-Control: max-age=136424
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 22:07:30 GMT
Etag: "637ca4f3-1d7"
Expires: Thu, 24 Nov 2022 12:01:14 GMT
Last-Modified: Tue, 22 Nov 2022 10:31:15 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18976
Expires: Wed, 23 Nov 2022 03:23:46 GMT
Date: Tue, 22 Nov 2022 22:07:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 22 Nov 2022 21:09:19 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3491
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: St9lZ0uJ5U71KOtYNvETpHQVPKo3CNC4qDQPPPTxaw+97lGQ+8FTf9EfgSDgtQwhdJXUXaUEGhI=
x-amz-request-id: WGXMQJY7X9GKGNB5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 21:42:44 GMT
age: 1486
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
allsolarincentives.com/?reqid=2817292
301 Moved Permanently 707 B URL HTTP/1.1 allsolarincentives.com/?reqid=2817292
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /?reqid=2817292 HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Tue, 22 Nov 2022 22:07:30 GMT
server: LiteSpeed
location: https://allsolarincentives.com/?reqid=2817292
x-turbo-charged-by: LiteSpeed
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 22:07:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 22 Nov 2022 21:08:53 GMT
cache-control: public,max-age=3600
age: 3518
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 87002aba8d04ef7934fedbe5dfd1a9e5
8e1f0bf33faa629f0b6ca8bcbb1c07da148b72ca
27df5ae68dcda7eb76527257923939e850d52a510697c226be1b8deff11d81f5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 22:07:31 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 20 Nov 2022 01:18:40 GMT
Expires: Sun, 27 Nov 2022 01:18:39 GMT
Etag: "8e1f0bf33faa629f0b6ca8bcbb1c07da148b72ca"
Cache-Control: max-age=356467,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e4fa7cdfb20af6-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 8a181d95550cfdf3b1fc4deb71631e40
37866f7293c41fbfb817e321754cae5c5bf59f93
6aa3d2763181cc48d2ad0ce7d227f3cb3324045c3f7858ccdbae675768dcec55
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5097
Cache-Control: max-age=131061
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 22:07:31 GMT
Etag: "637c912f-1d7"
Expires: Thu, 24 Nov 2022 10:31:52 GMT
Last-Modified: Tue, 22 Nov 2022 09:06:55 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
allsolarincentives.com/?reqid=2817292
200 OK 4.9 kB URL HTTP/2 allsolarincentives.com/?reqid=2817292
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (378), with CRLF line terminators
Hash 41048aba39884ecaf0882019bd37c3d2
c3ad37d075bab4aef10cc1a09962a13dd2435148
9f800e5ed431af8277263802f2139b7b27c9f889c809c8724c003159c8e58a24
GET /?reqid=2817292 HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
content-type: text/html; charset=UTF-8
content-length: 4932
content-encoding: br
vary: Accept-Encoding
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 22:07:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 22:07:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
allsolarincentives.com/assets/css/style-top.css
200 OK 265 B URL HTTP/2 allsolarincentives.com/assets/css/style-top.css
IP
Hash 555f3966c8e153a3420ec24c31723735
7f9236f0025cf15258dd1de9f84369ba33dcd710
fc276e693ceb537573d9769ddb2fdadf922b215dce48013aafaca988691d5a39
GET /assets/css/style-top.css HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: text/css
last-modified: Thu, 10 Jun 2021 22:17:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 265
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5BFU2IuzqaWktke04SOG9w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: m+gN9Bonzw81NQzuqPpENnwz5jg=
allsolarincentives.com/assets/form/bootstrap.min.css
200 OK 21 kB URL HTTP/2 allsolarincentives.com/assets/form/bootstrap.min.css
IP
File type ASCII text, with very long lines (65324)
Hash 5934a8d43b72e42a3b7cee2576433c8d
00f3e15c7dd2506f7b8094f4a6fc10c42adeeea0
be4fe5fb8981c681b615d7328f949d20b22ff4344d473ad8f96e0883f868deca
GET /assets/form/bootstrap.min.css HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: text/css
last-modified: Thu, 10 Jun 2021 22:17:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20694
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/form/new.css
200 OK 2.7 kB URL HTTP/2 allsolarincentives.com/assets/form/new.css
IP
Hash 5f4984fda4dbc7199e4c6427709237aa
e9f1b6a3d0b9baa1e8d64f9e068dc93af5a516b5
c009d1a3cd4a5d927aa6a623dfc535bd33eeb4d4cdffbef2c2ab036cab1bdb52
GET /assets/form/new.css HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: text/css
last-modified: Mon, 14 Jun 2021 21:25:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2675
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/form/bootstrap-modal-ios.css
200 OK 277 B URL HTTP/2 allsolarincentives.com/assets/form/bootstrap-modal-ios.css
IP
Hash 9591038e0025898cc7816767860fdbc1
15fa886da46d62af3a4411d065f0291110ec6e19
20b890c3b0e6047589d61196dcf6fee1593aaf2f20b34d3c4070847af01fb002
GET /assets/form/bootstrap-modal-ios.css HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: text/css
last-modified: Thu, 10 Jun 2021 22:17:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 277
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/css/style-bottom.css
200 OK 3.4 kB URL HTTP/2 allsolarincentives.com/assets/css/style-bottom.css
IP
Hash 2522713bb68abcece7f00f5187206b13
0f014d43144cb36f64feb528d2498d8cd007fde7
dc34e65e141f6c34514a09fe767529f5d507ee770436dda7599063f369fbded8
GET /assets/css/style-bottom.css HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: text/css
last-modified: Wed, 14 Jul 2021 22:32:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3426
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 36a4966d689491a7ded61e4b2170a875
772795765b887e09a2c2a735f59d6914e1ff78f5
9271c908f7ab199ca9bf8cc724ba2b6a6e4eab5fbe7563ad8c2a45e73554ab77
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "9271C908F7AB199CA9BF8CC724BA2B6A6E4EAB5FBE7563AD8C2A45E73554AB77"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5034
Expires: Tue, 22 Nov 2022 23:31:26 GMT
Date: Tue, 22 Nov 2022 22:07:32 GMT
Connection: keep-alive
allsolarincentives.com/assets/images/cropped-logo.png
200 OK 6.7 kB URL HTTP/2 allsolarincentives.com/assets/images/cropped-logo.png
IP
File type PNG image data, 240 x 61, 8-bit/color RGBA, non-interlaced\012- data
Hash ecf5cd152a75ef25812bd215e6b8a015
b49043b0b2570ce79d0cde6787cb57316426dec9
dd1cbb5bbf1158e9f5d0212e0d1dfbde3c8c3e64c2499415992154df0de55fad
GET /assets/images/cropped-logo.png HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/png
last-modified: Thu, 10 Jun 2021 22:18:12 GMT
accept-ranges: bytes
content-length: 6727
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/roof-1.png
200 OK 17 kB URL HTTP/2 allsolarincentives.com/assets/images/roof-1.png
IP
File type PNG image data, 161 x 161, 8-bit/color RGB, non-interlaced\012- data
Hash 31da4638b549918f0628edceaea5e621
d585b21098f25ca441cb38763cbccc9ad2dbb8e4
c0f3ad1e6d1b6cd736bed7e3818e6c74f8c9da0d8b04844a089d6e044503405c
GET /assets/images/roof-1.png HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/png
last-modified: Thu, 10 Jun 2021 22:18:26 GMT
accept-ranges: bytes
content-length: 17258
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/roof-2.png
200 OK 21 kB URL HTTP/2 allsolarincentives.com/assets/images/roof-2.png
IP
File type PNG image data, 161 x 161, 8-bit/color RGB, non-interlaced\012- data
Hash b76be140ead06173b2e5bf4524dd6062
b6bb0a28bbaf91736de6385543ca716c19b75558
b327f19e8b130fb2a69481d2fbeb5d9fd70b04f1ee0590fae7f4252d44b1a44c
GET /assets/images/roof-2.png HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/png
last-modified: Thu, 10 Jun 2021 22:18:30 GMT
accept-ranges: bytes
content-length: 21352
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/roof-3.png
200 OK 23 kB URL HTTP/2 allsolarincentives.com/assets/images/roof-3.png
IP
File type PNG image data, 161 x 161, 8-bit/color RGB, non-interlaced\012- data
Hash 8d769804d9e22071a3eef6eab7be78be
5edb2bb99a3d48b395fedf033f07d046b3f2a444
e7b570a45c96b82165e4d47007cf5ca7037b8adaaca0220c1ba18e2cbe4fbd63
GET /assets/images/roof-3.png HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/png
last-modified: Thu, 10 Jun 2021 22:18:30 GMT
accept-ranges: bytes
content-length: 22879
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/ficon.png
200 OK 3.6 kB URL HTTP/2 allsolarincentives.com/assets/images/ficon.png
IP
File type PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c6f090ac18f8b1381be7d4a38575929
f1ad72f8060d2b6b46d8dd71c731df8fce33c074
57d784eeddb3e5baa0e8e1add4fce2abe87e74a12dedba11def8ae4b6a0add40
GET /assets/images/ficon.png HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/png
last-modified: Thu, 10 Jun 2021 22:18:12 GMT
accept-ranges: bytes
content-length: 3586
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/patner-3.jpg
200 OK 11 kB URL HTTP/2 allsolarincentives.com/assets/images/patner-3.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 216x56, components 3\012- data
Hash 1bd12ea43b64450f2c8c321217ea2c36
f1293ad4e0c43fd05ae0b6eac62f169bd0b2ddc0
3438c64ce188c5d4f2b5d33de91161b4b7d12a8780f69abdaa0d82941a0c31ce
GET /assets/images/patner-3.jpg HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jun 2021 22:18:26 GMT
accept-ranges: bytes
content-length: 11340
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/patner-5.jpg
200 OK 8.1 kB URL HTTP/2 allsolarincentives.com/assets/images/patner-5.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 216x56, components 3\012- data
Hash 61e90b9af1369912a03138ef82f9be26
c70b34cf42ac41a02a429a67a985658cded5756c
eb291a6c9a2662657fe6f90ed9e1da8908334c7a878839261397bcbdbb6452c8
GET /assets/images/patner-5.jpg HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jun 2021 22:18:26 GMT
accept-ranges: bytes
content-length: 8073
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/patner-2.jpg
200 OK 8.4 kB URL HTTP/2 allsolarincentives.com/assets/images/patner-2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 216x56, components 3\012- data
Hash 5af08e760f249ec0d47ea4d968f92730
a6c87372ae9e8f05a3a44ad9e77d2106a1c620dc
5543541017a9411fda32aff2515bdc566908318fb4f04f5d861f47a780b5ec93
GET /assets/images/patner-2.jpg HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jun 2021 22:18:22 GMT
accept-ranges: bytes
content-length: 8381
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/patner-1.jpg
200 OK 9.5 kB URL HTTP/2 allsolarincentives.com/assets/images/patner-1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 216x56, components 3\012- data
Hash 9eb88a6fc34c17d1585d6c363b1b21ff
7586ac76617f1325f632c6ce560c7b291224c7b8
b1226072d8321954731801a8d20fb22cc1eb73718724c66354a043bf9b22ef7e
GET /assets/images/patner-1.jpg HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jun 2021 22:18:22 GMT
accept-ranges: bytes
content-length: 9502
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/sicon.png
200 OK 2.2 kB URL HTTP/2 allsolarincentives.com/assets/images/sicon.png
IP
File type PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash c88aa5bae8f109ac105899b7b7923eca
da8e04827bba4d4f3f2499dd555de409befa19bb
422ffd9f8d6441e2d990c594c803432b98e10a05caaca520164861915ac197e3
GET /assets/images/sicon.png HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/png
last-modified: Thu, 10 Jun 2021 22:18:32 GMT
accept-ranges: bytes
content-length: 2201
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/patner-4.jpg
200 OK 11 kB URL HTTP/2 allsolarincentives.com/assets/images/patner-4.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 216x56, components 3\012- data
Hash 3a2a271f4e7bd94e0a6f0d67d5ed9209
c024d6506c2327f840aaddc5bb7fe3ab5772f5ca
6a0ed5e5d1c6686958d0c14ec53d2862aac4b213f8b2086cc335b4c077df2ab3
GET /assets/images/patner-4.jpg HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jun 2021 22:18:26 GMT
accept-ranges: bytes
content-length: 11350
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/js/additional-methods.min.js
200 OK 5.2 kB URL HTTP/2 allsolarincentives.com/assets/js/additional-methods.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (17654)
Hash fd1c3af9125934e4777da94567b82194
4704df75bb22aab0fc112c40b6db369ae563d888
f7f11307ed51bab10893095c162b47dd76dcaf39cbbd118220cfcf323b86dfff
Analyzer Verdict Alert fortinet Malware
GET /assets/js/additional-methods.min.js HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: application/javascript
last-modified: Thu, 10 Jun 2021 22:18:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5158
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/js/jquery.validate.min.js
200 OK 6.5 kB URL HTTP/2 allsolarincentives.com/assets/js/jquery.validate.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (20952)
Hash b64e76f99d74d19f9fc755b4f19a0141
8f7d328986f13d9700fa2e676306e3952c31b36f
39bcf6ec0c7b9ff847fc220cb9bb10b2e7d326eb816916e83462dd80a586564e
Analyzer Verdict Alert fortinet Malware
GET /assets/js/jquery.validate.min.js HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: application/javascript
last-modified: Thu, 10 Jun 2021 22:18:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6547
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 36a4966d689491a7ded61e4b2170a875
772795765b887e09a2c2a735f59d6914e1ff78f5
9271c908f7ab199ca9bf8cc724ba2b6a6e4eab5fbe7563ad8c2a45e73554ab77
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "9271C908F7AB199CA9BF8CC724BA2B6A6E4EAB5FBE7563AD8C2A45E73554AB77"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5034
Expires: Tue, 22 Nov 2022 23:31:26 GMT
Date: Tue, 22 Nov 2022 22:07:32 GMT
Connection: keep-alive
allsolarincentives.com/assets/js/form.js
200 OK 723 B URL HTTP/2 allsolarincentives.com/assets/js/form.js
IP
File type ASCII text, with CRLF line terminators
Hash 111103e48cb02fdd2995c7f47e2defe2
872ef039475ada7a432a3f47e6151730eb924376
577325399f6d6f7bdd53862ca2e3fc1b3d895a4cac4e33d2d34c3e5ee42321f1
Analyzer Verdict Alert fortinet Malware
GET /assets/js/form.js HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: application/javascript
last-modified: Tue, 15 Nov 2022 12:54:05 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 723
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/js/bootstrap.min.js
200 OK 14 kB URL HTTP/2 allsolarincentives.com/assets/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (59895)
Hash 794d41c91c335425af557dd64d85b3d5
0412c5076a39eaf56200e560751e00d32e344f8e
3c5b97ff1a55efa7dd01be8ba08b98169903eab02f6ba1a7e3ff4ea86379cc78
Analyzer Verdict Alert fortinet Malware
GET /assets/js/bootstrap.min.js HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: application/javascript
last-modified: Thu, 10 Jun 2021 22:18:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 14245
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/js/jquery.min.js
200 OK 24 kB URL HTTP/2 allsolarincentives.com/assets/js/jquery.min.js
IP
File type ASCII text, with very long lines (65245)
Hash 10e9fb124ae79240559c555c4f5ad003
78a665be9dc0584d9fffd4b3666ad763653d6320
06be215c7cec84ae63d4a745aa979c940ec92c83f958f09f8c69b2579d8bf237
Analyzer Verdict Alert fortinet Malware
GET /assets/js/jquery.min.js HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: application/javascript
last-modified: Thu, 10 Jun 2021 22:18:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 24162
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
allsolarincentives.com/assets/js/jquery.inputmask.bundle.js
200 OK 25 kB URL HTTP/2 allsolarincentives.com/assets/js/jquery.inputmask.bundle.js
IP
File type ASCII text, with very long lines (400)
Hash 5c608c2ce3ddafffc0cc4e19b7041f15
92a74d091e4b29a8ea69bdc5860943730ccb2dc6
8d75a0e8d04d80b18c5801ac8d88bc151fb0b588a759f5f0acffe1ced271d44e
Analyzer Verdict Alert fortinet Malware
GET /assets/js/jquery.inputmask.bundle.js HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/?reqid=2817292
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:31 GMT
content-type: application/javascript
last-modified: Thu, 10 Jun 2021 22:18:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 24791
date: Tue, 22 Nov 2022 22:07:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash b46bf62de45cb29407a60feecbfc0704
404dff3e852c5d64fc555fec3c347b9ea90b9296
2416462d975749ef96be88eb0a36c687d545715d852a2c879222e773b9e633a6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4297
Cache-Control: max-age=169878
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 22:07:32 GMT
Etag: "637d2bf1-117"
Expires: Thu, 24 Nov 2022 21:18:50 GMT
Last-Modified: Tue, 22 Nov 2022 20:07:13 GMT
Server: ECS (amb/6BC3)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b46bf62de45cb29407a60feecbfc0704
404dff3e852c5d64fc555fec3c347b9ea90b9296
2416462d975749ef96be88eb0a36c687d545715d852a2c879222e773b9e633a6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 987
Cache-Control: max-age=166568
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 22:07:32 GMT
Etag: "637d2bf1-117"
Expires: Thu, 24 Nov 2022 20:23:40 GMT
Last-Modified: Tue, 22 Nov 2022 20:07:13 GMT
Server: ECS (amb/6B8B)
X-Cache: HIT
Content-Length: 279
allsolarincentives.com/assets/images/arrow_right.png
200 OK 233 B URL HTTP/2 allsolarincentives.com/assets/images/arrow_right.png
IP
File type PNG image data, 17 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fb5ca6fbd2f9949fb5d68e5c8966ea9
7e4ec4275d47cea2801513e43826fc6c12325e05
bcbbec70db90a7e20c1142c535c5be0c3db1934a8efa45a6d1510093644c15f0
GET /assets/images/arrow_right.png HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/assets/css/style-bottom.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:32 GMT
content-type: image/png
last-modified: Thu, 10 Jun 2021 22:18:04 GMT
accept-ranges: bytes
content-length: 233
date: Tue, 22 Nov 2022 22:07:32 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13957
Expires: Wed, 23 Nov 2022 02:00:09 GMT
Date: Tue, 22 Nov 2022 22:07:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13957
Expires: Wed, 23 Nov 2022 02:00:09 GMT
Date: Tue, 22 Nov 2022 22:07:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13957
Expires: Wed, 23 Nov 2022 02:00:09 GMT
Date: Tue, 22 Nov 2022 22:07:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 804755c7e438531c9ba2e781947e1640
7a93c31638ee89a561bac2174482a5d12aa62d63
aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13957
Expires: Wed, 23 Nov 2022 02:00:09 GMT
Date: Tue, 22 Nov 2022 22:07:32 GMT
Connection: keep-alive
allsolarincentives.com/service-worker.js
404 Not Found 1.2 kB URL HTTP/2 allsolarincentives.com/service-worker.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert fortinet Malware
GET /service-worker.js HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 22 Nov 2022 22:07:32 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e8d7af3a5d030774447a0f71c7824f0
663cace8681891ad55943dd0273493aa9474d102
22068df04672281e392caa485259df103d591ab247c3eb5e0ccba10ffd8a9ef0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9766
x-amzn-requestid: ca8b7a9f-3c1a-419d-953e-2944bf820e5e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcR_Hd4IAMFWUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d40d9-4ca5e9b2476a47cd199b9cba;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:36:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RZqqB_Aaam7hYpdAB2fbx-i3iQth9M-OgA25IgCB5Uz0swqVi3-bVg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:48:19 GMT
age: 1153
etag: "663cace8681891ad55943dd0273493aa9474d102"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
allsolarincentives.com/assets/images/banner.v2.jpg
200 OK 210 kB URL HTTP/2 allsolarincentives.com/assets/images/banner.v2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1280, components 3\012- data
Size 210 kB (210342 bytes)
Hash 4b11f1626dddcb4a6b47eacf3b2a5766
2b24b3d70069492411a7aaa24f7a0c679deb8f2e
2e08e8101b4758a905961741a383b0a54cd8feaa9abe08291c5bda54e99f1865
GET /assets/images/banner.v2.jpg HTTP/1.1
Host: allsolarincentives.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/assets/css/style-bottom.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 22:07:32 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jun 2021 22:18:08 GMT
accept-ranges: bytes
content-length: 210342
date: Tue, 22 Nov 2022 22:07:32 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto
200 OK 12 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto
IP
Hash 4c6d98917b4a9c74e1ba1374a83e4a2d
1837802b5ebc08df51783d6cc5ce9def6a1cbdc1
0bda9ba9cadf85b7a246ffa2aa3c227a195de0eb5b3da85a67b32d9ad09ea2b1
GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 22 Nov 2022 22:07:31 GMT
date: Tue, 22 Nov 2022 22:07:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe1bda54-5235-4786-bafa-a111a9acd500.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe1bda54-5235-4786-bafa-a111a9acd500.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 448adf31ef3a09f7d8a45e1c038fe1d8
88e9613f90c14dca0b2c0b60103d0c8e4d859cc8
cedf0f3bd94dfde56b90f130fc960fe73d0131594b9b4ff0e8dbbe27d76b0926
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe1bda54-5235-4786-bafa-a111a9acd500.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8000
x-amzn-requestid: 9761ee4c-6da2-4b57-8fab-4d94ec810717
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bn1pXGrCIAMFe3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63730308-7628d58a621de956205e1f9c;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 03:10:00 GMT
x-amz-cf-pop: SFO5-C3, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XlHerM1xe1mm1PGiw1jao15GRW9b1qemXZ3aLODebRK-nZnRMyMfbA==
via: 1.1 100e7eca600d702a8613a94cb0899fe8.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:53 GMT
age: 640
etag: "88e9613f90c14dca0b2c0b60103d0c8e4d859cc8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f511ad5-51d1-4115-92e3-f9ab3e54b37d.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f511ad5-51d1-4115-92e3-f9ab3e54b37d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fa20882d7dc00765a2a196dd6a477c39
5cefba54fd9950f867063642b6791d805b429337
6dcfd316c6f91cf6b4a190ab30d529b093bf773950e6d8e796f0e8e91dd6b7d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f511ad5-51d1-4115-92e3-f9ab3e54b37d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9748
x-amzn-requestid: 0eb0f9e1-b028-4ec3-9025-2cead2debfce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBb_iEqYoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4063-5f709cbf08b34c2700d2ddce;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eUy7rrEHVX-vazNbPIMcnuXyPSW50R3eFOw0WoQEUoNiSmwe2Hjczw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:48 GMT
age: 766
etag: "5cefba54fd9950f867063642b6791d805b429337"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0cc111ba6ae699fca7fbff3490640960
18084197b48ea3b4a143636250396e8791d0285f
34fbba92e665ad371ea2bd1a871251cf0c5b7832d6f4661b21b2cfbd7f786923
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4977
x-amzn-requestid: 3e56de91-7ed1-4b1e-b230-5f19b2cc6601
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bxQKBHzdIAMFpUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376c70c-41c572d27999534d3c198372;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 23:43:08 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 414rX74hOWUS2W1d9SVHs7McxZ4QDE249cjU-1EyIe0nMkZrQz2rrQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:48 GMT
age: 645
etag: "18084197b48ea3b4a143636250396e8791d0285f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 309227dc1b5f9193c6be8f5a010fa348
dff12e88a784a954012f257d3689862c52251d01
2d52b83ff0a58c41bf2e38abf8fce13eb87b5ecfce144ff0edc1bfadd254b452
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f13f0a4-9e67-4f61-9165-83b87312d9cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8081
x-amzn-requestid: cafd3337-7bb8-4e2d-91d4-a33439a32b80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcAMEwgoAMFl-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d4067-6074dcae15d9194513916d48;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:34:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0qleUIXFjvOqr3SeTpnFnVnhacI-ps0Fc33zsWp3eynFDhYOasUpPw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:48 GMT
age: 828
etag: "dff12e88a784a954012f257d3689862c52251d01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash af7b3370fd44cec407b6cf3035154105
bcb18466444282a417d28c87a7b9bb12ee2f7b53
be334097c0fec46c748841beb0cbed23ea8125ad40be3d9cfe545be07b86ac5e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=92058
Date: Tue, 22 Nov 2022 22:07:32 GMT
Etag: "637bf3c5-1d7"
Expires: Wed, 23 Nov 2022 23:41:50 GMT
Last-Modified: Mon, 21 Nov 2022 21:55:17 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vhPswWvhH-76s7jajhgtDGtPz6mKB_iQm1q12FK7Pfoh_f-nAXGCMA==
Age: 6393
api.trustedform.com/trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16691548524230.37567335595066575
301 Moved Permanently 134 B URL HTTP/2 api.trustedform.com/trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16691548524230.37567335595066575
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /trustedform.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16691548524230.37567335595066575 HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: awselb/2.0
date: Tue, 22 Nov 2022 22:07:33 GMT
content-type: text/html
content-length: 134
location: https://cdn.trustedform.com:443/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16691548524230.37567335595066575
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 13357f2e2d91f2e06cbdcd530ff17461
f5bfab8c49fcc5ccdb0a9e37ec3f6cf24d711a4f
bdbfbb18272ff8d283a166db9ad8ed7363987f78f390d9847bfafa9e32e6dccc
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 22 Nov 2022 22:07:33 GMT
Etag: "637c4542-1d7"
Server: ECS (dcb/7F7F)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DzesgOS7ZDExiB1olr6EYnSym9WagJM01VR4ydJ2dsF33tv11vMvew==
event.trk-keingent.com/register/event_log/l4ev5rz2g1
200 OK 0 B URL HTTP/2 event.trk-keingent.com/register/event_log/l4ev5rz2g1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/l4ev5rz2g1 HTTP/1.1
Host: event.trk-keingent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://allsolarincentives.com/
Origin: https://allsolarincentives.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:33 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://allsolarincentives.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aL4Fvcva4Vxx2qX%2FNK2qmDNh9B6H9l5iodOXM6A6bh0nrse0ePpX7Bvr4RCBcMutWfBURazm4nXtOmgAExEJqI6R%2F5D%2B%2BZG09fSRX2XDFo0iPlzoAwrVj%2Bsgc4hzogNgDVe8K06tcsEE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e4fa87ff7472f1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
create.lidstatic.com/campaign/ab1e69ed-e8bb-83d1-7ed3-96e3e663c438.js?snippet_version=2
200 OK 40 kB URL HTTP/2 create.lidstatic.com/campaign/ab1e69ed-e8bb-83d1-7ed3-96e3e663c438.js?snippet_version=2
IP
Hash 01abf0cb0bf72c0afb48453ef1cf4f99
ea37f1246e651b1c7bcacd2758ed4211176d341a
19fa2d139fed51c5506442e094bd5ee585f78c49ad368065922673218a336833
GET /campaign/ab1e69ed-e8bb-83d1-7ed3-96e3e663c438.js?snippet_version=2 HTTP/1.1
Host: create.lidstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:33 GMT
content-type: text/javascript
x-amz-id-2: kub2SS/dM2J+dx0sh+xXU8H/KcqUc/tUnR9KnB4bZo4j48HhKHBpjw2TQEn+ksAThOO4tEt6JN8=
x-amz-request-id: XENV5E85MGQPM8GZ
x-amz-replication-status: COMPLETED
last-modified: Fri, 12 Nov 2021 01:04:08 GMT
etag: W/"92009d655f15883690eb08e4789b3fbc"
cache-control: max-age=1800
x-amz-version-id: MP6u_s_mhViOgBnCmvJMe8MBN4AykkRK
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e4fa861fe00a35-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
create.lidstatic.com/campaign/fc0690c0-0564-e295-a5f5-a161835c894f.js?snippet_version=2
200 OK 42 kB URL HTTP/2 create.lidstatic.com/campaign/fc0690c0-0564-e295-a5f5-a161835c894f.js?snippet_version=2
IP
Hash 3f8cf05d9cff6e9d8949984a8692ee39
e76d3e268c0bd4b9375f9d433c6801664c496af9
966b6700f2d6381d190fcea46f6e3029ccad783426ffed696af3a65bac8f3cd9
GET /campaign/fc0690c0-0564-e295-a5f5-a161835c894f.js?snippet_version=2 HTTP/1.1
Host: create.lidstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:33 GMT
content-type: text/javascript
x-amz-id-2: 2RLLTJfBc3zUpRD0A5QH3MxR9wXo2C9FAalmmq9REIzskLQ6EUa48SIkAL+2nTzqKnnRaneRKjk=
x-amz-request-id: XENXS46Z9MTC47JB
x-amz-replication-status: COMPLETED
last-modified: Fri, 12 Nov 2021 01:29:28 GMT
etag: W/"a6c7ac3853f405ee86360e1e7cae6877"
cache-control: max-age=1800
x-amz-version-id: 9eo3W8._zntZ4j.NDzuhZaRXb.6ja.Q2
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e4fa862ff90a35-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/GenerateToken?msn=1&pid=9886ec3c-85f6-430b-b369-4e78074a3936&_=933012576
200 OK 1.5 kB URL HTTP/2 create.leadid.com/2.11.9/GenerateToken?msn=1&pid=9886ec3c-85f6-430b-b369-4e78074a3936&_=933012576
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 48f45f3674e701be81d1729c6d2f221c
46beb1a23b13fea46b72ae6b4e6d39a408fc216c
b71613c46e483480e612c8ff9ab49c6cfb8c3c3b5c313f0f50fb623e5b458c15
POST /2.11.9/GenerateToken?msn=1&pid=9886ec3c-85f6-430b-b369-4e78074a3936&_=933012576 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 188
Origin: https://allsolarincentives.com
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:33 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
rguserid=1c0e780e-e0aa-41f2-8ada-d1649ebfd8aa; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
event.trk-keingent.com/register/event_log/l4ev5rz2g1
200 OK 0 B URL HTTP/2 event.trk-keingent.com/register/event_log/l4ev5rz2g1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/l4ev5rz2g1 HTTP/1.1
Host: event.trk-keingent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://allsolarincentives.com/
Content-type: application/json
Origin: https://allsolarincentives.com
Content-Length: 313
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:33 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://allsolarincentives.com
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a%2F4yC4ezqcAJKjW0yS0qCascBMpXN3xzIdBaVSAkSXy8mDCzRKwpHykqPd8vXRDLFgi1XegsQ3RIX9%2Fzx1G00ybRxW5kxbojMCF3FtxLaVs3ZwNhH4xn%2Bfp2iTDaUeTtNp0TzG2f6YYh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e4fa8a2a5a72f1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.trustedform.com/certs
201 Created 475 B URL HTTP/2 api.trustedform.com/certs
IP
File type JSON data\012- , ASCII text, with very long lines (475), with no line terminators
Hash 67fc1d20a5d51fb596adc51d440c3cfa
6775ae370423d644abf0355aa8c648f41a6161fc
126f4883f9d8ce7b6da865d580ca36bce667adb878e8bd3c1a806363c3e89956
POST /certs HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 604
Origin: https://allsolarincentives.com
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Tue, 22 Nov 2022 22:07:33 GMT
content-type: application/json; charset=utf-8
content-length: 475
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6ebd55cf80af48722b9cc4a75b5d238d
a23573ac18dd7a4cff8d4023405644326c2a7120
5e7a5a578669fc857c4f21deb08f46f92705098aa936be1003dcecf6ec3f1281
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88208
Date: Tue, 22 Nov 2022 22:07:34 GMT
Etag: "637be716-1d7"
Expires: Wed, 23 Nov 2022 22:37:42 GMT
Last-Modified: Mon, 21 Nov 2022 21:01:10 GMT
Server: ECS (dcb/7F16)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yvOAAAJsnkKq3NIRMGNJVi0Xufr33SyJM625HgXMIgTvv7DJ-0UWLg==
Age: 5792
cdn.trustedform.com/trustedform-1.8.30.js
200 OK 37 kB URL HTTP/2 cdn.trustedform.com/trustedform-1.8.30.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 14487f8960e61adf6ea2ea56a2c0fc4b
95c5c211d96b16b85dd2e7e73ea2074181af33a1
1af41182c48fe7c1f3603dafa7c97803ed41b063a7ee84f566a7eaaff374e41d
GET /trustedform-1.8.30.js HTTP/1.1
Host: cdn.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 24 Oct 2022 17:48:28 GMT
x-amz-version-id: C4KqA2Ml8NtIH1tcFWoBNv3GWDN3hi8K
server: AmazonS3
content-encoding: gzip
date: Tue, 22 Nov 2022 22:07:34 GMT
etag: W/"a5b5dad6197e972a745a719bfccfb334"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SFtXNFf_aleRX0yYEXTD6KnhZjh4pCs05tD2AYm5D0a7DH1HvI83fQ==
age: 6
X-Firefox-Spdy: h2
api.trustedform.com/certs/b52dc08902c4f76dafbab733119dfb9333b03b68/events
204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/b52dc08902c4f76dafbab733119dfb9333b03b68/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/b52dc08902c4f76dafbab733119dfb9333b03b68/events HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 626
Origin: https://allsolarincentives.com
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 22:07:34 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 81b57482dfac87d7cc73b8057ada169a
57000edb1ddf6f2ba37b27963213186ee81a5c4c
7a9d9d64ea3eb50e72d147b4242f662b2fdc003486c73669471dd32ab62b7fb2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122112
Date: Tue, 22 Nov 2022 22:07:35 GMT
Etag: "637c7ac0-1d7"
Expires: Thu, 24 Nov 2022 08:02:47 GMT
Last-Modified: Tue, 22 Nov 2022 07:31:12 GMT
Server: ECS (dcb/7EC9)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Adi5Y0kYjSbGLAui61T6nFALe02Jqng6jwJQwzUyWy9mfSKUPhaWfg==
Age: 1895
api.trustedform.com/certs/b52dc08902c4f76dafbab733119dfb9333b03b68/events
204 No Content 0 B URL HTTP/2 api.trustedform.com/certs/b52dc08902c4f76dafbab733119dfb9333b03b68/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /certs/b52dc08902c4f76dafbab733119dfb9333b03b68/events HTTP/1.1
Host: api.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 222
Origin: https://allsolarincentives.com
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 22:07:35 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/InitFormData?msn=3&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012578
200 OK 5.9 kB URL HTTP/2 create.leadid.com/2.11.9/InitFormData?msn=3&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012578
IP
Hash 8cca60d00f0c5098918035b205ad0e76
c2a34d8800e40f92bfc9db1680c4b710bb3e7a4e
d82b29a8382848fd5ad7f2809fec544fa3fc877c17ea6692c4b1161f0fee74b8
POST /2.11.9/InitFormData?msn=3&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012578 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 5553
Origin: https://allsolarincentives.com
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:33 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
rguserid=9b1d6f04-f875-4646-941f-1a06bdd0b762; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
trk-keingent.com/scripts/push/script/l3e4o5mdvy?url=allsolarincentives.com&alturl=/
200 OK 0 B URL HTTP/2 trk-keingent.com/scripts/push/script/l3e4o5mdvy?url=allsolarincentives.com&alturl=/
IP
GET /scripts/push/script/l3e4o5mdvy?url=allsolarincentives.com&alturl=/ HTTP/1.1
Host: trk-keingent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:32 GMT
content-type: application/javascript;charset=UTF-8
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IQfVN5miH5IuO20leMCKk%2Bw3Zn1aDvnR%2Fo2NiQnvcDvCggRsENAKqZ9jwT9Kocv7hEAAqMlj3kkCQv1zGXBQnQphdM%2Bebv99%2FRI116XMhSRahIbJgPR0v0iKSy0Qlvpmpuz7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76e4fa81fdd18873-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/Snap?msn=6&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012582
200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/Snap?msn=6&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012582
IP
POST /2.11.9/Snap?msn=6&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012582 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 44299
Origin: https://allsolarincentives.com
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:35 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Thu, 22-Dec-2022 22:07:35 GMT; Max-Age=2592000; path=/
rguserid=b50236d3-a81f-4366-a54e-3d2ee1614743; expires=Thu, 22-Dec-2022 22:07:35 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Thu, 22-Dec-2022 22:07:35 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Thu, 22-Dec-2022 22:07:35 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
deviceid.trueleadid.com/iframe.html?token=462C837E-936E-6E31-9ED5-2827FEFB4B49&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=FC0690C0-0564-E295-A5F5-A161835C894F&lac=F40D8E20-41F1-B4BD-E8A5-306E058A694D
200 OK 0 B URL HTTP/2 deviceid.trueleadid.com/iframe.html?token=462C837E-936E-6E31-9ED5-2827FEFB4B49&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=FC0690C0-0564-E295-A5F5-A161835C894F&lac=F40D8E20-41F1-B4BD-E8A5-306E058A694D
IP
GET /iframe.html?token=462C837E-936E-6E31-9ED5-2827FEFB4B49&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=FC0690C0-0564-E295-A5F5-A161835C894F&lac=F40D8E20-41F1-B4BD-E8A5-306E058A694D HTTP/1.1
Host: deviceid.trueleadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d2m2wsoho8qq12.cloudfront.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:34 GMT
content-type: text/html
server: nginx
last-modified: Thu, 22 Sep 2022 15:32:09 GMT
etag: W/"632c7ff9-1049"
expires: Wed, 23 Nov 2022 22:07:34 GMT
p3p: CP="NOI DSP COR NID CUR ADM DEV OUR BUS"
cache-control: max-age=86400, public
content-encoding: gzip
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/Snap?msn=5&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012581
200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/Snap?msn=5&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012581
IP
POST /2.11.9/Snap?msn=5&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012581 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 163727
Origin: https://allsolarincentives.com
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:35 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Thu, 22-Dec-2022 22:07:35 GMT; Max-Age=2592000; path=/
rguserid=d3fe53b1-808c-45b5-863a-6b773e424493; expires=Thu, 22-Dec-2022 22:07:35 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Thu, 22-Dec-2022 22:07:35 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Thu, 22-Dec-2022 22:07:35 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
create.leadid.com/2.11.9/SaveDom?msn=2&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012577
200 OK 0 B URL HTTP/2 create.leadid.com/2.11.9/SaveDom?msn=2&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012577
IP
POST /2.11.9/SaveDom?msn=2&pid=9886ec3c-85f6-430b-b369-4e78074a3936&token=462C837E-936E-6E31-9ED5-2827FEFB4B49&_=933012577 HTTP/1.1
Host: create.leadid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 512
Origin: https://allsolarincentives.com
Connection: keep-alive
Referer: https://allsolarincentives.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 22:07:33 GMT
content-type: text/plain;charset=UTF-8
server: nginx
set-cookie: rgisanonymous=false; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
rguserid=d2099eaf-6b07-44c6-95df-297d16b8253f; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
rguuid=true; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
rgisanonymous=true; expires=Thu, 22-Dec-2022 22:07:33 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.trustedform.com/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16691548524230.37567335595066575
200 OK 0 B URL HTTP/2 cdn.trustedform.com/bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16691548524230.37567335595066575
IP
GET /bootstrap.js?provide_referrer=false&field=xxTrustedFormCertUrl&l=16691548524230.37567335595066575 HTTP/1.1
Host: cdn.trustedform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://allsolarincentives.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 22 Nov 2022 22:07:34 GMT
last-modified: Mon, 24 Oct 2022 17:48:28 GMT
x-amz-version-id: zf4ijuzvSsU0Tal.ZZJLDHqE7VqwjEi9
etag: W/"647d5353b63df3b4ed201da87c98cc2d"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JM9mW4013XD6608yfvqM5s0X46YVEecLZgXVQl7I6gHaCsB8fj6xRA==
X-Firefox-Spdy: h2
66.29.146.34
93.184.220.29
104.22.38.182
23.36.76.226