racaty.net/3ghkuhxi42yi
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3ghkuhxi42yi HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 14 Sep 2022 04:46:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 14 Sep 2022 05:46:14 GMT
Location: https://racaty.net/3ghkuhxi42yi
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mo5tRvtZ7jR1979AXL6gqzTG5btuKsSCzEemD5xYZWPO78EgimUjkPFhI91NQQfhOFFAxl%2BbnbULexiYhqp9SVUVTmVY9hbEPEgq4pPQmks2kWv3zitvXovTj2ny"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a67a4d1cb9b4f7-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 14 Sep 2022 04:09:26 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3qxcg0NP12KNZIxYjmWJp9JVeYD5-69WH7AZ8wIt2kEac55l9ThrrQ==
Age: 2208
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2695
Expires: Wed, 14 Sep 2022 05:31:09 GMT
Date: Wed, 14 Sep 2022 04:46:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EgzZAnmFmg1WCXDRP1GyZuhIlFR4QOWEvR0iN4t8WMpU962RGI68oA==
age: 659
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
racaty.net/3ghkuhxi42yi
200 OK 42 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (42357)
Hash 9cc6cd5143ea2785c648e0e7da631b99
5c6cb7a02cb2ebc31c050078376c89352b928dd6
9b4b4876e10b9e60dc31b2130d0b8c2d7ba6bac593a67bdc551bf856292435d9
GET /3ghkuhxi42yi HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=0;includeSubDomains;
expires: Tue, 13 Sep 2022 04:46:15 GMT
set-cookie: aff=50273; domain=.racaty.net; path=/; expires=Wed, 28-Sep-2022 04:46:15 GMT
lang=english; domain=.racaty.net; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KSMgyS%2FvQDZXCG5swhcaZZ%2BZKnS3H2jlRwTiV8rxT3sOmRE5MBYZQbp7T2WBJtFsMk5Jo3%2Fvtk61WAnTFKqhE3Mcv%2B5eaonz2Yn5Yqy427A6E1xQ6s2gDoJ2Rj4W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a4efff6b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
racaty.net/racatyph.svg
200 OK 26 kB IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash d111fd24527754bee1f7b4388899e1de
276e46eab9a8d4ab34a89e1fc7de4b12ef29b098
74eb988113d89c6dd3eabd66e98b51c5ebc34c613c2886568a9faeca01a896a3
GET /racatyph.svg HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: image/svg+xml
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
etag: W/"bef-5c4c633ab0dc4-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:14:36 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5905899
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0DG0vV5b3aR530gWWkXYQqEPxWk9TmcaxkPe34RcvxllLH14QPSSWpgSKwaoFEDPDT%2Bl3Eq5P9%2BQ9rCOmGKDDylr9vgXYITO6QuK7KLRNyMpaFClWjRR7Y6o0rdQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a51197ab50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Montserrat|Quicksand:400,500,700&display=swap
200 OK 13 kB URL HTTP/2 fonts.googleapis.com/css?family=Montserrat|Quicksand:400,500,700&display=swap
IP
Hash ea5a32f3bdada81c6781ae30c8bc0589
26f66ec4d373186c6aa5434bfaf0e67f98073968
9affc601b4a4fd0cffb900ef6ce593f581800d8f342a2355386fece5701878db
GET /css?family=Montserrat|Quicksand:400,500,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 14 Sep 2022 04:46:15 GMT
date: Wed, 14 Sep 2022 04:46:15 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 950526447441749ff9aeea01a5eb6c86
a1b93fd37508a8e29092bd3ea3b70badc5f39289
4413eab24fa6020944731573ebb4ec45827878c13b17f6fdeb791875533505d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3577
Cache-Control: max-age=99882
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:15 GMT
Etag: "632031c8-1d7"
Expires: Thu, 15 Sep 2022 08:30:57 GMT
Last-Modified: Tue, 13 Sep 2022 07:31:20 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
racaty.net/racaty_new/css/webfonts/fa-solid-900.woff2
200 OK 118 kB URL HTTP/2 racaty.net/racaty_new/css/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 117616, version 329.31064\012- data
Size 118 kB (117616 bytes)
Hash 00d3012700332144ce43a62a3b7ec4f1
49524191161f278c89e03476289f9c2e3415375d
47c58e41e2f38d9813c39b6641c96e12408522bf774779cb58973f67303875a7
GET /racaty_new/css/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://racaty.net/racaty_new/css/style.min.css?v=3.7
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: font/woff2
content-length: 117616
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
etag: "1cb70-5c4c6339e211d"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3190
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HCg%2BK7E94NSfw6SST0kSbuHItKDlo8ey%2FN9YJV41thUpW15HATSi7ldWQxJItZVozRfw4ICq51cItjspZkuq6bxt9oanTEBWVt45opbvODazl8dIzyV6eFFMa1VN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a67a527aaeb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/plugins/like.php?href=https%3A%2F%2Fwww.facebook.com%2FofficialRacaty%2F&width=670&layout=button_count&action=like&size=small&share=true&height=46&appId
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/like.php?href=https%3A%2F%2Fwww.facebook.com%2FofficialRacaty%2F&width=670&layout=button_count&action=like&size=small&share=true&height=46&appId
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?href=https%3A%2F%2Fwww.facebook.com%2FofficialRacaty%2F&width=670&layout=button_count&action=like&size=small&share=true&height=46&appId HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: nGoeasjh5kOMEt2cd1Yt1P+iLtEv+3W9huetyOskr0NfxQGUTN4tZour3MyJhO/V5hEwgT6djymtprDGgPrYOQ==
content-length: 0
date: Wed, 14 Sep 2022 04:46:15 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25672, version 1.0\012- data
Hash fe3e5be2baa0126122ba9367ebab73c8
40bec99106dfab5f3721ed725483eb618a9016cd
8b166007d6f54c33b3ea10ea23572bc3166f55f365840d3cbd6ef7b5dcf6674e
GET /s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://racaty.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25672
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 21:15:54 GMT
expires: Tue, 12 Sep 2023 21:15:54 GMT
cache-control: public, max-age=31536000
age: 113421
last-modified: Mon, 18 Jul 2022 19:12:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.min.js
200 OK 14 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (57791)
Hash f7ec1f608a6644d182a2aef3308d3fc1
504609ff13eb3af8a2364b6753f73bc3ad3b4e1b
398376b9590200f385c71475b834492c281ce9cd34bc137a57f087e7a65bd7fb
GET /ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 13537
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04010-e2d8"
last-modified: Mon, 04 May 2020 16:17:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 14024772
expires: Mon, 04 Sep 2023 04:46:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=38YeqDn7QgW5hmbCGLeLDSdZpJPfL2K%2FfB23pgxvQsjZJzsEODb13x4CT1NHmjZ1ckrXEYmjobSIpLgY7QVL5RyyLC0jGceBKSFuUbI3g1MylzQg8JKCiUAicTBQMbgboBdEqqnk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74a67a52cc8bb521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
racaty.net/racaty_new/css/webfonts/fa-brands-400.woff2
200 OK 72 kB URL HTTP/2 racaty.net/racaty_new/css/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 72124, version 329.31064\012- data
Hash 99f3121dc63babcf368cb6aee3b535f6
b9699e182c5f9a6fb2ef744f3089e3a7960fd4ca
a3eb2d0caf3502359966882d146b1a75e34bf933cbdace1c286395ea3fd1f567
GET /racaty_new/css/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://racaty.net/racaty_new/css/style.min.css?v=3.7
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: font/woff2
content-length: 72124
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:51 GMT
etag: "119bc-5c4c6339bb403"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3190
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L1QvNNoxkMW0oLLtLkHevxtMqEN7PBoRL%2BPPPDRSZRWzd5c%2BVh39%2FCtUzIoT96nP%2BmvM90cprvO8C7H2muYhiNlnan6WEskEUDfgGEO4SGkXj3Ky%2FmtnVrZ2AhrA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a67a52daf5b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
200 OK 6.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
IP
File type ASCII text, with very long lines (20831)
Hash 368c425fc94c424e1688caadefbed981
13d24c22c199ef6668d758434819f44307a65094
ed9c7a83e1c1300a93ecd08807a736ebe7b87ab8262a40bc7e3859d00a46a102
GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 6646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-520c"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2982028
expires: Mon, 04 Sep 2023 04:46:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VX1cK%2F2mjHzz89I8psALocn29zF0MhxPAJl5yzfwA5aOilQI63J9nSX0OyuTr3xyKo0fDD%2FaXtHzDxvOffrVF8kWViLzE1vUekNroWvdHfAsVy3F3WHp0mzAVSzo%2B%2BDje7lBsOJp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74a67a52dca2b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.4/clipboard.min.js
200 OK 3.0 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.4/clipboard.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (10645)
Hash 3a22bcc6c05a8cbf8909ede597f5367d
a230ada58d7db9020ceed9d993b5c9925c162c94
e13ba0e04c4706a07074d16b322d76631e957685ec6d5ca7c5c43e1e84ec87a1
GET /ajax/libs/clipboard.js/2.0.4/clipboard.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 2976
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e29-2a02"
last-modified: Mon, 04 May 2020 16:09:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 475496
expires: Mon, 04 Sep 2023 04:46:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XURTCsDJDmEyxFd8gyo6VLe0yYEqbS4%2FevK3yeEUiZrqLob7bgcWo785Z8NZ9Ctn92l2sSUTe4JYG4ygsjhUWaNtgMS8Bh0iQPajm8ZBVAo%2Bgw2wUNZsAN1UEMTz%2FowpWATsAP%2BN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74a67a52dca8b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.fuseplatform.net/publift/tags/2/2053/fuse.js
200 OK 47 kB URL HTTP/2 cdn.fuseplatform.net/publift/tags/2/2053/fuse.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash bd2da7705d65b4524eb157d54e65d770
10857d5757e358d08a08a62b79ba38cedeb7affc
d38b3a3a04ad74c726a784c6499650200a641fd724bcf369efc25cc74f0b7e7e
GET /publift/tags/2/2053/fuse.js HTTP/1.1
Host: cdn.fuseplatform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "bd2da7705d65b4524eb157d54e65d770:1661488089.57241"
last-modified: Fri, 26 Aug 2022 04:28:09 GMT
server: AkamaiNetStorage
content-length: 46826
content-encoding: gzip
cache-control: max-age=1800
expires: Wed, 14 Sep 2022 05:16:15 GMT
date: Wed, 14 Sep 2022 04:46:15 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-backstretch/2.0.3/jquery.backstretch.min.js
200 OK 1.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-backstretch/2.0.3/jquery.backstretch.min.js
IP
File type ASCII text, with very long lines (3909)
Hash 1767f41cedce70298bf986847f55dbba
307c8be6864bc709e03c3163156aa9e2195de5f5
eb24bf2d83e4b6159f9d0a1732cd66904e66dba2d4bd8544d3385638196b62f3
GET /ajax/libs/jquery-backstretch/2.0.3/jquery.backstretch.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 1478
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-fcf"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 6174124
expires: Mon, 04 Sep 2023 04:46:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B0ryJ3y9XxIarNvMnYqDyzHf7euVR2leY0dGYLyp52PUqSEqcFQmQyZqjKBVASuknogB94HSWq08dQBQ%2FGCpvAm8WMtLYiW8HNd3lJpBh7wKgV8M6v%2BEq4rrj3fdwpqDFL%2BePvzS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74a67a52fcbbb521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c91fd52b1a73b236151d3425c50ed456
42a639ae30945e787d84c2c5f2d82b449bc40e4c
b59abcfea325b49f2f02019f49b525625f26bd6e23bbf3c55585a5d1b72c43a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B59ABCFEA325B49F2F02019F49B525625F26BD6E23BBF3C55585A5D1B72C43A2"
Last-Modified: Tue, 13 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3422
Expires: Wed, 14 Sep 2022 05:43:17 GMT
Date: Wed, 14 Sep 2022 04:46:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c91fd52b1a73b236151d3425c50ed456
42a639ae30945e787d84c2c5f2d82b449bc40e4c
b59abcfea325b49f2f02019f49b525625f26bd6e23bbf3c55585a5d1b72c43a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B59ABCFEA325B49F2F02019F49B525625F26BD6E23BBF3C55585A5D1B72C43A2"
Last-Modified: Tue, 13 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3422
Expires: Wed, 14 Sep 2022 05:43:17 GMT
Date: Wed, 14 Sep 2022 04:46:15 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 950526447441749ff9aeea01a5eb6c86
a1b93fd37508a8e29092bd3ea3b70badc5f39289
4413eab24fa6020944731573ebb4ec45827878c13b17f6fdeb791875533505d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3577
Cache-Control: max-age=99882
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:15 GMT
Etag: "632031c8-1d7"
Expires: Thu, 15 Sep 2022 08:30:57 GMT
Last-Modified: Tue, 13 Sep 2022 07:31:20 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4a68e0856575d52f7778bc821b5c881b
0956533f660fd0e7096540292f9b60451f60f148
0fde07586af73476634e76ed5badfce43d8b4ec078fd0f172d80c28ad98e3d27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 14 Sep 2022 04:03:22 GMT
Cache-Control: max-age=3600
Expires: Wed, 14 Sep 2022 04:57:03 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1KTy36FGLcr3j5zn4ZpBfvCQXNjmtPxdH-s8TQsCjrEUwEH6XwNoYA==
Age: 2573
louchees.net/tag.min.js
200 OK 23 kB IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5fa1c250224e12edd0a6f60d23e20295
22970072c94fedec3bc9d5de8bbb12c921289fa3
5290b453bd4d8482f84c6b2f2b0a79f82029daadf620f09d0cd382d15d87e04c
GET /tag.min.js HTTP/1.1
Host: louchees.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: text/javascript; charset=utf-8
content-length: 22984
content-encoding: br
x-trace-id: d836157e4ff2a157d03cf95c84970b4f
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Tue, 13 Sep 2022 09:00:14 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 81182f4b684635f6bdcbdd907ee66f25
a1f2f151df72ede41397c8131bd47a3ce85575b3
be40946c98d9a78a3c7c9ad097d379ab12549a195bd7a4766919a1d3fd987396
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 15:53:22 GMT
expires: Wed, 13 Sep 2023 15:53:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 46373
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e96dbe1b54932c8f447bbbfc9d31cfb0
b15d4a54fbdf95b0af8bd34b6f8ef03055eef0cd
427326963ac1ef6ddeeaf52ab07807c694b82effa6111671ada8270b1faecdae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4735
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:15 GMT
Last-Modified: Wed, 14 Sep 2022 03:27:20 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4a68e0856575d52f7778bc821b5c881b
0956533f660fd0e7096540292f9b60451f60f148
0fde07586af73476634e76ed5badfce43d8b4ec078fd0f172d80c28ad98e3d27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c8aadb0ef23d816f930b15dae83d6d07
59467b8f053b147c839993fc26a9debf9bf4bcd8
459ce6eb3335348483a648a283f6a4aa2f4bcd4b0453a5d6c1da03f02db89f7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "459CE6EB3335348483A648A283F6A4AA2F4BCD4B0453A5D6C1DA03F02DB89F7F"
Last-Modified: Mon, 12 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2908
Expires: Wed, 14 Sep 2022 05:34:44 GMT
Date: Wed, 14 Sep 2022 04:46:16 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Cs+WJE0TENs9xFaZXNnxbA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sU/twfygPQ36aY3LxcTnJ8FRy7k=
cdn.fuseplatform.net/prebid/prebid-9cbcb6f4920c081422575671a6900740.js
200 OK 73 kB URL HTTP/2 cdn.fuseplatform.net/prebid/prebid-9cbcb6f4920c081422575671a6900740.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65423)
Hash 001f78b26e08c47a9eca8ceb14449936
3de12b0d828f274bb078a2e68c31da66f7c3d4af
5b6cd392225ca4e87e0f7f39709c84b707d5d082f5bc9bdb5eecc99456caf16f
GET /prebid/prebid-9cbcb6f4920c081422575671a6900740.js HTTP/1.1
Host: cdn.fuseplatform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "001f78b26e08c47a9eca8ceb14449936:1661488089.479447"
last-modified: Fri, 26 Aug 2022 04:28:09 GMT
server: AkamaiNetStorage
content-length: 73300
content-encoding: gzip
cache-control: max-age=86400000
expires: Tue, 10 Jun 2025 04:46:16 GMT
date: Wed, 14 Sep 2022 04:46:16 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.fuseplatform.net/telemetry/noconsent?v=1&ttm=1663130762427&cookie=true&res=1280x1024&device=desktop&browser=firefox&fuuid=3236524f-5a04-5f7f-8273-c49179078a1d&fid=2053&pubid=5&url=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&sid=e32c56ca857822b70426&srate=100&adserver=gpt&etm=1609&e=fuse-load
200 OK 1 B URL HTTP/2 cdn.fuseplatform.net/telemetry/noconsent?v=1&ttm=1663130762427&cookie=true&res=1280x1024&device=desktop&browser=firefox&fuuid=3236524f-5a04-5f7f-8273-c49179078a1d&fid=2053&pubid=5&url=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&sid=e32c56ca857822b70426&srate=100&adserver=gpt&etm=1609&e=fuse-load
IP
ASN #20940 Akamai International B.V.
File type very short file (no magic)
Hash 9dd4e461268c8034f5c8564e155c67a6
11f6ad8ec52a2984abaafd7c3b516503785c2072
2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881
GET /telemetry/noconsent?v=1&ttm=1663130762427&cookie=true&res=1280x1024&device=desktop&browser=firefox&fuuid=3236524f-5a04-5f7f-8273-c49179078a1d&fid=2053&pubid=5&url=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&sid=e32c56ca857822b70426&srate=100&adserver=gpt&etm=1609&e=fuse-load HTTP/1.1
Host: cdn.fuseplatform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 1
content-type: text/plain
etag: "9dd4e461268c8034f5c8564e155c67a6:1660131111.248793"
last-modified: Wed, 10 Aug 2022 11:31:51 GMT
server: AkamaiNetStorage
cache-control: max-age=1800
expires: Wed, 14 Sep 2022 05:16:16 GMT
date: Wed, 14 Sep 2022 04:46:16 GMT
access-control-allow-origin: https://racaty.net
vary: Origin
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 41f9179e59a25f47d57ee44aedba74e7
0fc36a87fcedb98f3748739cc0718470de2f59c2
b4a615e3b1606fa2e99cbfca9a7a7b93257ebcf5957c308cfbaf7f8d4f37415a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 04:46:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 01:21:26 GMT
Expires: Tue, 20 Sep 2022 01:21:25 GMT
Etag: "0fc36a87fcedb98f3748739cc0718470de2f59c2"
Cache-Control: max-age=505508,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74a67a563c830b06-OSL
my.rtmark.net/gid.js?userId=2ed3413661e349df947b7dec828da0f9
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=2ed3413661e349df947b7dec828da0f9
IP
File type JSON data\012- , ASCII text
Hash 5a3a8e21775382336f5fbe704bdebe63
21dfcf1f2f6b6a32d7161de03c2e7ad1709849ed
689c9f0edc613a75411eb33201525f43f320bb79f6d7ba8a48d000457cda6af2
GET /gid.js?userId=2ed3413661e349df947b7dec828da0f9 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:16 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2ed3413661e349df947b7dec828da0f9; expires=Thu, 14 Sep 2023 04:46:16 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c79a6d9219e52788c0288a4288601f0b
a55c74c35279d08872bb4b0805d3f8ff684bc322
345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Wed, 14 Sep 2022 04:17:11 GMT
expires: Wed, 14 Sep 2022 06:17:11 GMT
cache-control: public, max-age=7200
age: 1745
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 89dc4294d8e50675a5cb111e84d38452
993b0be337e43de62b8a33bef20c972881c8a646
27e6f64589d2befddc951fc27b83d03e1113bcfe301c76a2e412a20d2558a0c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 29 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (45046)
Hash c9c119027f6b8afa561b27d1c40dda65
83218cd14ba72880e3be411ff36deb15efb35762
29dfe3bf9a1e32bf12e0d7e7ed29a8663b7001f1027b099b8161d0a54def7f3c
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 29129
date: Wed, 14 Sep 2022 04:46:16 GMT
expires: Wed, 14 Sep 2022 04:46:16 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1333 / 703 of 1000 / last-modified: 1663109561"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c79a6d9219e52788c0288a4288601f0b
a55c74c35279d08872bb4b0805d3f8ff684bc322
345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 89dc4294d8e50675a5cb111e84d38452
993b0be337e43de62b8a33bef20c972881c8a646
27e6f64589d2befddc951fc27b83d03e1113bcfe301c76a2e412a20d2558a0c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2353ad8463ffd0e6081316879a0af3a
a4ad874fd5fd46854eb4ef0ab0dbe90684508c33
ed457f158fe62b8388e6eb9620946c128219db1fe14a4f8aeccffe27ef7b53cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED457F158FE62B8388E6EB9620946C128219DB1FE14A4F8AECCFFE27EF7B53CC"
Last-Modified: Mon, 12 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14868
Expires: Wed, 14 Sep 2022 08:54:04 GMT
Date: Wed, 14 Sep 2022 04:46:16 GMT
Connection: keep-alive
racaty.net/racaty_new/img/onehund.min.png
200 OK 9.1 kB URL HTTP/2 racaty.net/racaty_new/img/onehund.min.png
IP
File type PNG image data, 120 x 120, 8-bit colormap, non-interlaced\012- data
Hash 71c19b89b0ea3fec44987152bc9a0988
f07e39210b32afbad12bf2aaccc5070a858bab9b
cf3c10158720d8e59560ccc276bd5a83865d8a78e42a0acd55791ad1b419fd20
GET /racaty_new/img/onehund.min.png HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: image/png
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:51 GMT
etag: W/"144c-5c4c633965ccd-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:14:36 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5905899
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fOOOh4YiMPztdNBGCWOVXMhjFZf1Z60Lz%2F67BVyYySD7oJP7%2F4LPdujAG50TQ4xiAJ1VoaZ%2FhRcgUepwC8JwBpAJpI%2B2CUNJVPq8fOcV40uKd2A3aINhJL7Jx0z8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a511979b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tovanillitechan.com/27/55dfd372293146a7ca113106d0d608dd
200 OK 264 kB URL HTTP/2 tovanillitechan.com/27/55dfd372293146a7ca113106d0d608dd
IP
File type ASCII text, with very long lines (65523)
Size 264 kB (264249 bytes)
Hash 5111601ffbda251af6a6e47a3cae8a17
66068d3fca2862b6f329890be78608c90541e49b
77b6b9b228d8050634e345405d54ab3306f2f8ffd82376d2dfb9386ae999a487
Analyzer Verdict Alert quad9 Sinkholed
GET /27/55dfd372293146a7ca113106d0d608dd HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Cookie: scm=1; OAID=8ac4649b70f749598235d4d31677fe95; oaidts=1663130776
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:16 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
cache-control: max-age:290304000, public
last-modified: Wed, 07 Sep 2022 05:02:06 GMT
expires: Wed, 07 Oct 2082 05:02:06 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
tovanillitechan.com/9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&oaid=2ed3413661e349df947b7dec828da0f9
204 No Content 0 B URL HTTP/2 tovanillitechan.com/9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&oaid=2ed3413661e349df947b7dec828da0f9
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&oaid=2ed3413661e349df947b7dec828da0f9 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://racaty.net/
Origin: https://racaty.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 14 Sep 2022 04:46:17 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
tovanillitechan.com/9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&oaid=2ed3413661e349df947b7dec828da0f9
200 OK 47 kB URL HTTP/2 tovanillitechan.com/9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&oaid=2ed3413661e349df947b7dec828da0f9
IP
Hash d899fa535740a87be5fd022a93982349
75c27206588bb50987906c73a5a588dd2e8bee4c
37588db881a743d42e091767a5b59d170f8fd878e28514976eb5bbc5a42ba6c8
Analyzer Verdict Alert quad9 Sinkholed
POST /9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&oaid=2ed3413661e349df947b7dec828da0f9 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 261
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Cookie: scm=1; OAID=8ac4649b70f749598235d4d31677fe95; oaidts=1663130776
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 47de5db3a424a2041cef114723b64c93
access-control-expose-headers: X-Sc
set-cookie: OAID=2ed3413661e349df947b7dec828da0f9; expires=Thu, 14 Sep 2023 04:46:17 GMT; secure; SameSite=None
oaidts=1663130776; expires=Thu, 14 Sep 2023 04:46:17 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=2
200 OK 43 B URL HTTP/2 ad-delivery.net/px.gif?ch=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdt6VCtqtIBnBTdsF1vvDPQfLazGd9ibEd203R5L043lLiuyTx5erfdDBO4fPOmvTjQfhaq1ovVTvyGIn5JVehsmeQ
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
expires: Sun, 04 Sep 2022 17:35:10 GMT
cache-control: public, max-age=86400
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
age: 818101
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ov%2FmFJlNVJ2z9rSqPcIvZecwvOwmr25tqGnFpp6v7VbgmjDG%2BIgk%2FjP2n98x8kcmknAL%2F1toEbnC3%2FJzaMKTFesFJSGlUzvE9v5bDO2%2F93pnAmf3x%2FBbukIXJO03rWsQuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a67a5cfccbb511-OSL
X-Firefox-Spdy: h2
tovanillitechan.com/11?rnd=2123284580&z=3976876&b=14566426&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A==&ruid=dd5fc0ce-56f4-4684-8dca-c7b5b515d85b&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&ot=132
200 OK 0 B URL HTTP/2 tovanillitechan.com/11?rnd=2123284580&z=3976876&b=14566426&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A==&ruid=dd5fc0ce-56f4-4684-8dca-c7b5b515d85b&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&ot=132
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /11?rnd=2123284580&z=3976876&b=14566426&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A==&ruid=dd5fc0ce-56f4-4684-8dca-c7b5b515d85b&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&ot=132 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Cookie: scm=1; OAID=2ed3413661e349df947b7dec828da0f9; oaidts=1663130776
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: cb8ce3e541de80d5de6b9d16825f55fa
access-control-expose-headers: X-Sc
set-cookie: OAID=2ed3413661e349df947b7dec828da0f9; expires=Thu, 14 Sep 2023 04:46:17 GMT; secure; SameSite=None
oaidts=1663130776; expires=Thu, 14 Sep 2023 04:46:17 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
publift-com.videoplayerhub.com/galleryplayer.js
301 Moved Permanently 3.0 kB URL HTTP/2 publift-com.videoplayerhub.com/galleryplayer.js
IP
Hash 1fb80c4568e22b7b1647c37adb01a7a7
1633024ead3c7d9ffc4c2eba671a80af9a00e208
c9f01fb4a421bfb9ae7c5049f828baa0289990eef79574bbbc37f48599f64b15
GET /galleryplayer.js HTTP/1.1
Host: publift-com.videoplayerhub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 14 Sep 2022 04:46:17 GMT
location: https://btloader.com/tag?h=publift-com&upapi=true
cache-control: max-age=3600
expires: Wed, 14 Sep 2022 05:46:17 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q9b%2BBCb7qVza%2F6d1aFjdQ2IIzhKEVofjxHdk8T%2F7R8PfSLBIUlU%2F86Lqvhw%2B9aBY3Cr0JEJJnvjbaUcBn2X5owMZ3Jmqpdq4cS%2B1JvaIPpbggL0MnkMBzusPG9Wl%2F7jtRXV92PL%2FQheB0oP%2BfmvH1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a67a5c7dacb503-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f10e52e7c009ed53f663305c40724f00
7a48ee8b14286efa008df417f849581f34d328cc
c5e2e5fef374f7a9b473aafac1a8c819a1552d4150199420f93fcf670e02f8c4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5E2E5FEF374F7A9B473AAFAC1A8C819A1552D4150199420F93FCF670E02F8C4"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14728
Expires: Wed, 14 Sep 2022 08:51:45 GMT
Date: Wed, 14 Sep 2022 04:46:17 GMT
Connection: keep-alive
ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
200 OK 104 B URL HTTP/2 ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
IP
File type MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors\012- data
Hash 32ac8a9b81788b981a3a7e13c14082d4
fbfd48a2bfe8d4247a975176f88d18c3c2ad1952
00cc7617e054596ff0aaabd8a93a9214dc5304bfe317316022dbf4fb3ea073d2
GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 104
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 19:35:31 GMT
expires: Wed, 14 Sep 2022 19:35:31 GMT
cache-control: public, max-age=86400
age: 33046
last-modified: Tue, 08 May 2012 13:08:06 GMT
content-type: image/x-icon
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 943030c144315730829302ed66ba85de
a23d3b993b40bc2f97a1566c50376e3debfd2f72
1d3194a56b7a1f4114f716c01f73235b710ef2c9711fa5369911266fd57b9fd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
audit-tcfv2.cmp.quantcast.com/?log=%7B%22accountId%22%3A%22PRrmquD1Ggcb1%22%2C%22domain%22%3A%22racaty.net%22%2C%22publisher%22%3A%22Racaty%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.43%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22ObPxgSi0LmbV56wSSMefHA%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1663130763576%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-2rkm0szpv3fbcin43ler%22%7D
200 OK 2 B URL HTTP/2 audit-tcfv2.cmp.quantcast.com/?log=%7B%22accountId%22%3A%22PRrmquD1Ggcb1%22%2C%22domain%22%3A%22racaty.net%22%2C%22publisher%22%3A%22Racaty%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.43%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22ObPxgSi0LmbV56wSSMefHA%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1663130763576%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-2rkm0szpv3fbcin43ler%22%7D
IP
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /?log=%7B%22accountId%22%3A%22PRrmquD1Ggcb1%22%2C%22domain%22%3A%22racaty.net%22%2C%22publisher%22%3A%22Racaty%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.43%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22ObPxgSi0LmbV56wSSMefHA%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1663130763576%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-2rkm0szpv3fbcin43ler%22%7D HTTP/1.1
Host: audit-tcfv2.cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: text/plain; charset=utf-8
content-length: 2
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/vfctweU0iRw
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/vfctweU0iRw
IP
Hash cecb715c621d07707afa9bef66f5a0e5
93ffb8f7281922ad45fd889f366328674376679f
74eb678ea1b9ef81438bc8827feaaebdee4633b79e5bd04631cfac5970b4d9b9
POST /s/gts1d4/vfctweU0iRw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
interstitial-07.com/contents/s/9f/5a/7b/3453f468d7980ac1f8b8d61e29/01524093408076.jpeg
200 OK 26 kB URL HTTP/2 interstitial-07.com/contents/s/9f/5a/7b/3453f468d7980ac1f8b8d61e29/01524093408076.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3\012- data
Hash 9f5a7b3453f468d7980ac1f8b8d61e29
25892a14313894b28930f7f718eeb60c9cee77a2
79319e8d301629e8f1e20798c312952dbd557719f5b7e717f608c82da03c6d30
GET /contents/s/9f/5a/7b/3453f468d7980ac1f8b8d61e29/01524093408076.jpeg HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/?l=sefakiuwXmtTBGU&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D15815958%26z%3D3976876%26b%3D14566426%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3D-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A%3D%3D%26bag%3DaXppJzo0txTORmg9Yt646Q%3D%3D%26ruid%3Ddd5fc0ce-56f4-4684-8dca-c7b5b515d85b%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252F3ghkuhxi42yi%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D4%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: image/jpeg
content-length: 26444
last-modified: Tue, 23 Aug 2022 13:42:00 GMT
etag: "6304d928-674c"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 05baba38cfd208370294ac0ef9f46fc9
2db58645575031f0a85b1d374fa8e05359132637
30ce0469d814273aadc92336bfb26f23b68064c2fe78dcb943beefeae09402b6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30CE0469D814273AADC92336BFB26F23B68064C2FE78DCB943BEEFEAE09402B6"
Last-Modified: Tue, 13 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4120
Expires: Wed, 14 Sep 2022 05:54:57 GMT
Date: Wed, 14 Sep 2022 04:46:17 GMT
Connection: keep-alive
interstitial-07.com/contents/s/61/d6/e0/117f6c3df6abfb3a5fde4fa482/053607049285.jpeg
200 OK 67 kB URL HTTP/2 interstitial-07.com/contents/s/61/d6/e0/117f6c3df6abfb3a5fde4fa482/053607049285.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 492x328, components 3\012- data
Hash 61d6e0117f6c3df6abfb3a5fde4fa482
35504186315e65747bc3dabbfb381944ee3576d7
7cb2103951b567289a50af1ec4b631be6f3ea35c825b0765d18fd59de8d3a71e
GET /contents/s/61/d6/e0/117f6c3df6abfb3a5fde4fa482/053607049285.jpeg HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/?l=sefakiuwXmtTBGU&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D15815958%26z%3D3976876%26b%3D14566426%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3D-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A%3D%3D%26bag%3DaXppJzo0txTORmg9Yt646Q%3D%3D%26ruid%3Ddd5fc0ce-56f4-4684-8dca-c7b5b515d85b%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252F3ghkuhxi42yi%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D4%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: image/jpeg
content-length: 67187
last-modified: Tue, 23 Aug 2022 13:41:55 GMT
etag: "6304d923-10673"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
api.btloader.com/pv?tid=eK42Y8sDC1&w=4828219382431744&o=5708166709903360&cv=2.0.9-1-g2cac8e3&r=false&vr=1280x939&pageURL=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&upapi=true
204 No Content 0 B URL HTTP/2 api.btloader.com/pv?tid=eK42Y8sDC1&w=4828219382431744&o=5708166709903360&cv=2.0.9-1-g2cac8e3&r=false&vr=1280x939&pageURL=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&upapi=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pv?tid=eK42Y8sDC1&w=4828219382431744&o=5708166709903360&cv=2.0.9-1-g2cac8e3&r=false&vr=1280x939&pageURL=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&upapi=true HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
vary: Origin
date: Wed, 14 Sep 2022 04:46:17 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=72747
204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=72747
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=72747 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interstitial-07.com
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 14 Sep 2022 04:46:17 GMT
access-control-allow-origin: https://interstitial-07.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 3d9b61f89590e32def5aee95d515367b
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/vfctweU0iRw
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/vfctweU0iRw
IP
Hash cecb715c621d07707afa9bef66f5a0e5
93ffb8f7281922ad45fd889f366328674376679f
74eb678ea1b9ef81438bc8827feaaebdee4633b79e5bd04631cfac5970b4d9b9
POST /s/gts1d4/vfctweU0iRw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 04:46:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tovanillitechan.com/11?rnd=2123284580&z=3976876&b=14566426&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A==&ruid=dd5fc0ce-56f4-4684-8dca-c7b5b515d85b&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
200 OK 0 B URL HTTP/2 tovanillitechan.com/11?rnd=2123284580&z=3976876&b=14566426&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A==&ruid=dd5fc0ce-56f4-4684-8dca-c7b5b515d85b&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /11?rnd=2123284580&z=3976876&b=14566426&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A==&ruid=dd5fc0ce-56f4-4684-8dca-c7b5b515d85b&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=4&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Cookie: scm=1; OAID=2ed3413661e349df947b7dec828da0f9; oaidts=1663130776
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 573566ae924bc2425a85b8e03ad143b5
access-control-expose-headers: X-Sc
set-cookie: OAID=2ed3413661e349df947b7dec828da0f9; expires=Thu, 14 Sep 2023 04:46:17 GMT; secure; SameSite=None
oaidts=1663130776; expires=Thu, 14 Sep 2023 04:46:17 GMT; secure; SameSite=None
oaidvc=1; expires=Thu, 14 Sep 2023 04:46:17 GMT; secure; SameSite=None
CNT=1_v1_GkTeAAEAAAAxSwAA; expires=Wed, 14 Sep 2022 05:46:17 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
unphionetor.com/fv.js?t=72747&cb=1338042871
200 OK 2.2 kB URL HTTP/2 unphionetor.com/fv.js?t=72747&cb=1338042871
IP
File type ASCII text, with very long lines (5213), with no line terminators
Hash 0254fb1dad74628b7ad0f97d304fac92
35f7af13a08eb87023ec7df4d3c35c21b2cde79d
47fb6ce428ca80ea69b772e4f66e4e5c622a4005db601746033d04511bd27536
Analyzer Verdict Alert quad9 Sinkholed
GET /fv.js?t=72747&cb=1338042871 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: f57d515238da5048f64f1fa7533fbaca
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20991
Expires: Wed, 14 Sep 2022 10:36:08 GMT
Date: Wed, 14 Sep 2022 04:46:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20991
Expires: Wed, 14 Sep 2022 10:36:08 GMT
Date: Wed, 14 Sep 2022 04:46:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20991
Expires: Wed, 14 Sep 2022 10:36:08 GMT
Date: Wed, 14 Sep 2022 04:46:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20991
Expires: Wed, 14 Sep 2022 10:36:08 GMT
Date: Wed, 14 Sep 2022 04:46:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20991
Expires: Wed, 14 Sep 2022 10:36:08 GMT
Date: Wed, 14 Sep 2022 04:46:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7859b5f-1c86-429e-be16-f7b41657b096.jpeg
200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7859b5f-1c86-429e-be16-f7b41657b096.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7be52d818b206e064541ef4f4b0786b
7674123112859fd79ee9214c5308ad6a5e4ed015
bb011cf1e3c97c42f22c0553b64c23f120fa52d4bc7b56b5bde5678226aff0ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7859b5f-1c86-429e-be16-f7b41657b096.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16980
x-amzn-requestid: 7c555cd5-4a33-452e-82d4-cac3282c0b0f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYZfRHYOoAMFtIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320092e-0bbd43cc499db9ed24226439;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 04:38:06 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: m4lRTnfzeQluGV3fqyeSS6yLeU8tcfijOqcqyVdZ2L2pENHfWdrUHg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 09:39:44 GMT
age: 68793
etag: "7674123112859fd79ee9214c5308ad6a5e4ed015"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2983619f-d6cc-479c-a800-f63653fe82a1.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2983619f-d6cc-479c-a800-f63653fe82a1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26f9137a12e4cd798f873bc1d1696ffe
efa4e8f1a2318a72cbd87066f1356eeb00b50a1b
09aa40cc76ffaf087bcfd5448811260d81c1c042b7d65e0fbf33dd8f44cd52b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2983619f-d6cc-479c-a800-f63653fe82a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5480
x-amzn-requestid: b405f33a-dd58-4857-9491-f88ad4e26dd1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavU9GbdIAMFYBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8ec-747b56005a9e41722b9284f9;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:41:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KWuXKGVvou5cQ_2CBKgzRAqBJyfmHAgc4CofUPSfBllQ-_JQjWHm2Q==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:05:04 GMT
age: 24073
etag: "efa4e8f1a2318a72cbd87066f1356eeb00b50a1b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2157f7cfbdeb607f28ae51eb090f2c3
33d0dcadaa42179b2eae914c8ad16c9c088afbc9
135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ur-HTN2DS8b3ojSQldJOZi6YW2wtCwRfbGqxg49ZUJ_00hC_rFxYEw==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:05:07 GMT
age: 24070
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9cb9807-03d5-4b00-9a0f-61f9c12f0e63.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9cb9807-03d5-4b00-9a0f-61f9c12f0e63.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f85dd3f15d0c55c06f712bbfb6f55fa
2c053f4774c450e42effdc440e89fb2ce232bad3
0035f6235d012f4c2ffbc8e414e82bbba3235c51e20f7b1ebebcdff47be285fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9cb9807-03d5-4b00-9a0f-61f9c12f0e63.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8836
x-amzn-requestid: cae5f1fa-005b-4819-900e-e0cec381e450
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavYxGUCoAMF5Sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f904-1be4cae92b407bed2a128109;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:41:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wjVNgoQwwHE2h-d5fHzIFrLMBScSH5A5Oz48-TJ3I4GqTLQ2Pu8ARw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:58:50 GMT
age: 24447
etag: "2c053f4774c450e42effdc440e89fb2ce232bad3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ff3459e-f095-4850-a4fe-aaa75dd72d57.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ff3459e-f095-4850-a4fe-aaa75dd72d57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 67104c4246b4621f998420b0e5ebbd53
2b7467d2a9e125599655986947027fe15f64dd9b
74870b17f8b2b4dd0fea0bb426edf6668de4b430c8e0cc2793d9251cd523ff61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ff3459e-f095-4850-a4fe-aaa75dd72d57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10252
x-amzn-requestid: 0e87d69b-2097-473d-87ee-d0e38021633e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yau8DFKRoAMFnww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f84c-189a00f437ca36611c4741f6;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:38:20 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KvGATVp13MnXGeGsGHSRbnBuUEKlWWQyed9qtkT7jyQm7tBgKVOWOw==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:02:39 GMT
age: 24218
etag: "2b7467d2a9e125599655986947027fe15f64dd9b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd2fdd44c-8a24-416f-967c-d0f6ab274f25.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd2fdd44c-8a24-416f-967c-d0f6ab274f25.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a18be7ae1217fd8640959c71628cdbce
89496b999ba3af9553bad8cb2b1c8d3f662c3d84
fe3dff7c808fa7cfeb0677afb6e2bfb4845662198491d50af4c08330691cb765
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd2fdd44c-8a24-416f-967c-d0f6ab274f25.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6146
x-amzn-requestid: 9b369978-738d-4ccc-b36f-1d594e4ca56b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEGwCIAMFVcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-3fa4c7a60e0f8df44080c0a3;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FOJ7KiMZ-uE4wu64mNaRS_2AYmJCtY4h21Ta2CyaARjOhwfHWtWsug==
via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:07:11 GMT
etag: "89496b999ba3af9553bad8cb2b1c8d3f662c3d84"
content-type: image/jpeg
age: 23946
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
btloader.com/tag?h=publift-com&upapi=true
200 OK 0 B URL HTTP/2 btloader.com/tag?h=publift-com&upapi=true
IP
GET /tag?h=publift-com&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://racaty.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: application/javascript
cache-control: public, max-age=300, must-revalidate, stale-if-error=86400
etag: W/"71bbaf96733b73a2f15b3e499229928d"
last-modified: Wed, 14 Sep 2022 04:32:20 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 759
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZrmicCr64ZZGCRSORWtzY%2FqnvAD0WTCELR%2BNLitzjyfCAFXqlrbz9hkCi0SRPCVqAMvJLUTmztroxQaHLC%2FkLteUNfq6whq8QXFZPLu%2FLlf4mi737AoFXDhvxx%2BF0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a5cafbab517-OSL
content-encoding: br
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/43/cmp2ui-en.js
200 OK 0 B URL HTTP/2 cmp.quantcast.com/tcfv2/43/cmp2ui-en.js
IP
GET /tcfv2/43/cmp2ui-en.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
cache-control: max-age=172800
date: Tue, 13 Sep 2022 17:30:53 GMT
last-modified: Tue, 02 Aug 2022 14:10:37 GMT
etag: W/"cdd513c37d4fc734e0fb03e5d9e813a7"
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: J3RV4XXNKn6G26UhYRXS_ntRiMBEvrmPkmH_9Dfp7ZXbkGjKmJkzdQ==
age: 40525
X-Firefox-Spdy: h2
racaty.net/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1663128000
200 OK 0 B URL HTTP/2 racaty.net/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1663128000
IP
GET /cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1663128000 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript; charset=UTF-8
x-control-type-options: nosniff
cache-control: max-age=14400, public
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EU3agYBYbwEk3Aisd0hkQL19FeUR029AK5w%2BPAH2%2F0uEMWoiS5FlSyuFVNNTpr%2FQ3GYEsiRD%2Fej149n4yDyOTt%2FBN8D1NvvWf4qcUTf%2BRHzOUs05WdfsVXmNYxXU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a530b14b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
racaty.net/rcty/favs/favicon-194x194.png?v=algwbxEnAR
200 OK 0 B URL HTTP/2 racaty.net/rcty/favs/favicon-194x194.png?v=algwbxEnAR
IP
GET /rcty/favs/favicon-194x194.png?v=algwbxEnAR HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: image/png
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:46 GMT
etag: W/"e85-5c4c633464875-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:33:36 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5904759
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K5e3003Ysf0iOwMNb0ITSf8sdxgX6yH4%2FO1YZK194uzZ5s6vhpzTBhkAaqNX1B%2FFc0e1l62DoofkRapoDk86dtN3gwgz011pvw4ixCPetAAsQqxOKJl0GGxgjdLp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a555cb3b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
racaty.net/cdn-cgi/challenge-platform/h/b/cv/result/74a67a4efff6b50b
200 OK 0 B URL HTTP/2 racaty.net/cdn-cgi/challenge-platform/h/b/cv/result/74a67a4efff6b50b
IP
POST /cdn-cgi/challenge-platform/h/b/cv/result/74a67a4efff6b50b HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12325
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english; bacookk=0.6156474134410095; bgStrech=0.6531767923709517
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:16 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=WRO8lyZ7wUiM8ckouOU_v5QbHqoHC93FG2RUy32.1yE-1663130776-0-AdMbE+ifSt3ZmUt1Lhaz1YhiFFoPSxxBVHoHQcs9AFlD99b34wxyTkIyCc2evN7SWD4PZPm3lQjZgkCCNAXxvZ5oQWaXsHmBX3CbhcLVNGojhE1OBIbE4NfpHoJwlHhdgQ==; path=/; expires=Wed, 14-Sep-22 05:16:16 GMT; domain=.racaty.net; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BIMNaXbnPE5sRj9OsaSXQBR4VSg%2Fa5Rm3sKKLXSbL%2FXjZ9e5HPZhLrbZufbMLvLtRzjti8OnqvRb96yIIhdBaFBklJzNfPxjcLEiLVbLqZgk1AwQ0xDyxM1Sy3mz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a587efeb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
interstitial-07.com/?l=sefakiuwXmtTBGU&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D15815958%26z%3D3976876%26b%3D14566426%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3D-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A%3D%3D%26bag%3DaXppJzo0txTORmg9Yt646Q%3D%3D%26ruid%3Ddd5fc0ce-56f4-4684-8dca-c7b5b515d85b%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252F3ghkuhxi42yi%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D4%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
200 OK 0 B URL HTTP/2 interstitial-07.com/?l=sefakiuwXmtTBGU&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D15815958%26z%3D3976876%26b%3D14566426%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3D-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A%3D%3D%26bag%3DaXppJzo0txTORmg9Yt646Q%3D%3D%26ruid%3Ddd5fc0ce-56f4-4684-8dca-c7b5b515d85b%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252F3ghkuhxi42yi%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D4%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
IP
GET /?l=sefakiuwXmtTBGU&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D15815958%26z%3D3976876%26b%3D14566426%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3D-kcjQlcphya01HUxGa3oYlYiu6jSNbuOYlAEZaHbpN9DeX_4yMJu-tjHCRrZ6GKt9J_x6dBJr9WvGpq0C1CACWIRsVA6aFrHXnXlPdAxrWsXud-U4vtTyaOL8v-toQ8lh6W-ZCEFP1YvXzOGJA5-Nf2Pg68WHCaSy2mgjap7osGSU34Vm6NWCUEWeNm-K3HAzTyCSjpWOBDmtnYLZjk9iGpwLYLHpiy2VTaMYakExHEtVsBir0H9jmVmmTPM9YbNXgaO2jr7MhCRTqzEMrNtEGQwln1nlJ8feoShj-YhfDxvM9Fs1xYhoV3LoKCq7-E6ocJe63i_qDWIDtkKrfnLsygEYIvglywWcLs0vQ8F-dCn7H-Lg9bEQ5th8S316Ot5LHlL8wpSPejuAzdlR_kZ2rIsPp5XvOoPB9F5z-ZFnlxGKxXzA31GpG_JGLhKyPracKOm-1Gaq1XVxiuPwX-Oza8xgyathIvSjGz6bGq5luttG5HbHv_4QAQeX1DijXn2sI3NsupJUoHgGlTT0yZNeqAn71983IlUB0Pbx6m67SU0L37f9IEaH-VCchaHsZ7-FS7_dUB-f3JRAXHW0drhFufbixQaFAlSBrvDyallFoXowJEshEFcWQYaqHdwaENFv1aqb3iwI6NbF7HJPZVo3A%3D%3D%26bag%3DaXppJzo0txTORmg9Yt646Q%3D%3D%26ruid%3Ddd5fc0ce-56f4-4684-8dca-c7b5b515d85b%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252F3ghkuhxi42yi%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D4%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.27
set-cookie: reverse=vjYi7yh2w6KjKsH305tQ888HqRa9YMyGShVfyu6y02A; expires=Wed, 14-Sep-2022 05:46:17 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
racaty.net/racaty_new/css/style.min.css?v=3.7
200 OK 0 B URL HTTP/2 racaty.net/racaty_new/css/style.min.css?v=3.7
IP
GET /racaty_new/css/style.min.css?v=3.7 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
etag: W/"1c941-5c4c6339fcae7-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:14:36 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5905899
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rKPmgulaMMVawI4rVO%2FXfMVrLt%2B8SXlp8faO7I16ryFAyomloFgG5J388liMocV9xBmUkyJ4CKGaITmavrzhO2chDSXVSN%2F%2BKxe1E4jpHINlxt2arFu4v4yNoeoV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a50b938b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/google-atp-list.json
200 OK 0 B URL HTTP/2 cmp.quantcast.com/tcfv2/google-atp-list.json
IP
GET /tcfv2/google-atp-list.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Wed, 14 Sep 2022 03:03:37 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Wed, 14 Sep 2022 03:03:33 GMT
etag: W/"b6c05a3bfd48e979d8c08b0310b92d76"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VHInwtYwoFaam0LaIOZczQ6JHdbtXLpzcTAP3XKOGIdS74yAWWafdA==
age: 6161
X-Firefox-Spdy: h2
racaty.net/rcty/favs/favicon-16x16.png?v=algwbxEnAR
200 OK 0 B URL HTTP/2 racaty.net/rcty/favs/favicon-16x16.png?v=algwbxEnAR
IP
GET /rcty/favs/favicon-16x16.png?v=algwbxEnAR HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: image/png
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:46 GMT
etag: W/"2ff-5c4c63345e2e5-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:33:36 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5904759
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5hJkCHM3gCVxMN97xfiv4acImoR%2FsurvUgUKOHavPF9oRTlH5o80%2BjQ9%2Ftelqonr2QW8vxOBDu%2FgtLgJ%2FQhNogoFhEhAbbvymiKIscRk%2FGkLP7l%2BbcFLMOSU3%2FBP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a555cb4b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
racaty.net/img/background50273.jpg?v=0.6531767923709517
200 OK 0 B URL HTTP/2 racaty.net/img/background50273.jpg?v=0.6531767923709517
IP
GET /img/background50273.jpg?v=0.6531767923709517 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english; bacookk=0.6156474134410095; bgStrech=0.6531767923709517
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:16 GMT
content-type: image/jpeg
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:46 GMT
etag: W/"711c2-5c4c6334d1a95-gzip"
cache-control: max-age=31536000
expires: Thu, 14 Sep 2023 04:46:16 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tQnzeK08%2FIPQl8h3mNIhc%2FZOKhfGzU7RA%2B%2FktBA15q0Bq%2B7wV3VKj%2BbazP2djezK0eGPkVGclx%2FL2hQjrjl3bd3TzFNRCY1voojh9zfYDFpO3HqCgfUIkqnw0wmS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a55ed25b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
racaty.net/img/logo50273.png?v=0.6156474134410095
200 OK 0 B URL HTTP/2 racaty.net/img/logo50273.png?v=0.6156474134410095
IP
GET /img/logo50273.png?v=0.6156474134410095 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english; bacookk=0.6156474134410095; bgStrech=0.6531767923709517
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:16 GMT
content-type: image/png
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:47 GMT
etag: W/"b0fd-5c4c6335c4575-gzip"
cache-control: max-age=31536000
expires: Thu, 14 Sep 2023 04:46:16 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BpzyODwVf4DI0hkfy6vJ7tbkBau2lvIX83GTMuN5BSUnyOnk79MGE%2FlFgfRCvhhTBfM4eAs36Inb9jyS8EJOluHqFWDbeqXW4OE02GH%2BzJQ6xy4ZQXV1VsFR5y5e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a55dd22b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
onmarshtompor.com/?rb=ahXZeJsMpczgOqwHKemaILnJWuYTqphfq_-f-5MpB2mPgQNz_bJxg0Gok9uPKQiMJh58z3EMLWmeqfG3VoLWeeN5eupQMFftdY85YWUIo8OA_vUeFEQqsxt5yibpakZs9W-32RlfLsEzQXOhiVsfRfaw01cov-9dHO5XGZA4LWj2UZeCmGyx2rBb85aIpBtmXGD45V7uE9-YGLdIDUx2mw%3D%3D&request_ab2=0&zoneid=3579972&js_build=iclick-v1.426.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.426.0&bs=441b45b2-d728-4b74-9f02-5df214f82112&userId=2ed3413661e349df947b7dec828da0f9&m=link
200 OK 0 B URL HTTP/2 onmarshtompor.com/?rb=ahXZeJsMpczgOqwHKemaILnJWuYTqphfq_-f-5MpB2mPgQNz_bJxg0Gok9uPKQiMJh58z3EMLWmeqfG3VoLWeeN5eupQMFftdY85YWUIo8OA_vUeFEQqsxt5yibpakZs9W-32RlfLsEzQXOhiVsfRfaw01cov-9dHO5XGZA4LWj2UZeCmGyx2rBb85aIpBtmXGD45V7uE9-YGLdIDUx2mw%3D%3D&request_ab2=0&zoneid=3579972&js_build=iclick-v1.426.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.426.0&bs=441b45b2-d728-4b74-9f02-5df214f82112&userId=2ed3413661e349df947b7dec828da0f9&m=link
IP
GET /?rb=ahXZeJsMpczgOqwHKemaILnJWuYTqphfq_-f-5MpB2mPgQNz_bJxg0Gok9uPKQiMJh58z3EMLWmeqfG3VoLWeeN5eupQMFftdY85YWUIo8OA_vUeFEQqsxt5yibpakZs9W-32RlfLsEzQXOhiVsfRfaw01cov-9dHO5XGZA4LWj2UZeCmGyx2rBb85aIpBtmXGD45V7uE9-YGLdIDUx2mw%3D%3D&request_ab2=0&zoneid=3579972&js_build=iclick-v1.426.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&pl=https%3A%2F%2Fracaty.net%2F3ghkuhxi42yi&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.426.0&bs=441b45b2-d728-4b74-9f02-5df214f82112&userId=2ed3413661e349df947b7dec828da0f9&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://racaty.net/
Origin: https://racaty.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:16 GMT
content-type: application/json
x-trace-id: 63d85ffd02436891f334d6c233a99f55
access-control-allow-origin: https://racaty.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=2ed3413661e349df947b7dec828da0f9; expires=Thu, 14 Sep 2023 04:46:16 GMT; path=/; secure; SameSite=None
oaidts=1663130776; expires=Thu, 14 Sep 2023 04:46:16 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 21 Sep 2022 04:46:16 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
racaty.net/racaty_new/js/scriptglobal.min.js?v=3
200 OK 0 B URL HTTP/2 racaty.net/racaty_new/js/scriptglobal.min.js?v=3
IP
GET /racaty_new/js/scriptglobal.min.js?v=3 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
etag: W/"1fdf9-5c4c633a61836-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:14:37 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5905898
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ur2g4g%2BzSdm55LiIK8Y3LELwgodgiNmyS51eL30K%2BT6pBAGgrCfMdypqiSgrP7%2F4k98o29szcyxe2KSKMP4nmyt83dwWchEgeWBZw%2FkMIINkodRv41PtPLOl8FAN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a525a8ab50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
racaty.net/racaty_new/js/countdown.js?rand=dfgf1g
200 OK 0 B URL HTTP/2 racaty.net/racaty_new/js/countdown.js?rand=dfgf1g
IP
GET /racaty_new/js/countdown.js?rand=dfgf1g HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=675
etag: W/"2a3-5c4c633a875b1-gzip"
expires: Fri, 07 Jul 2023 20:14:38 GMT
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 5905897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HPmXZD%2Bxr8IFYFgzAbl6BsvnmJGPCK%2Bmy2Xzo9ZL3kBDGqnPv%2F5BY%2BbsTe2InIAihFLstiGufJWq85io2ywXQzLxIMFntctymCFVwd3cuee2tsOnIYpyXwrlqmO%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a525a8eb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
racaty.net/racaty_new/js/main.js
200 OK 0 B URL HTTP/2 racaty.net/racaty_new/js/main.js
IP
GET /racaty_new/js/main.js HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=99128
etag: W/"18338-5c4c633a6d3b7-gzip"
expires: Fri, 07 Jul 2023 20:14:38 GMT
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 5905897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y9mR%2BI%2Bi2ZX7Ob2RGVxivWkLVOtB422XYPnHKORMw798WMvnTRjOfa3ohh%2Fxn%2BXzNM2g8UN%2FGXDFiETgJuek9ExIvjWfn%2FufkBQ3VlUzwkJ5zrblqfOhM2dlPM%2F1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a526a9ab50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tovanillitechan.com/1?z=3976876
200 OK 0 B URL HTTP/2 tovanillitechan.com/1?z=3976876
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /1?z=3976876 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:16 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 1e8d56b6864f2080431e4d01e30a11e0
access-control-expose-headers: X-Sc
x-sc: B3xdAvR1wftedEPt8nql8Zcx26lubdA_exnad85HjsxfNpLigPTA-uyNbCQ6shOszEHJvha5B67vFErb2TRKM2wYox0=
set-cookie: scm=1; expires=Thu, 14 Sep 2023 04:46:16 GMT; secure; SameSite=None
OAID=8ac4649b70f749598235d4d31677fe95; expires=Thu, 14 Sep 2023 04:46:16 GMT; secure; SameSite=None
oaidts=1663130776; expires=Thu, 14 Sep 2023 04:46:16 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
racaty.net/r_dep.js?v=1.5
200 OK 0 B URL HTTP/2 racaty.net/r_dep.js?v=1.5
IP
GET /r_dep.js?v=1.5 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=2297
etag: W/"8f9-5c4c633751908-gzip"
expires: Fri, 07 Jul 2023 20:14:38 GMT
last-modified: Tue, 15 Jun 2021 04:13:49 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 5905897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kDAfhRBpGPSI3ORJ4bhOgQOuahUadc%2B2Ecjk%2BHdGAgjHZ3J7b3nZLlZPlLIRALHju%2BN4jfOXeSpR4m4kVhnmbT6Kysws1zDFq%2F30XaKc4f%2FGq8EfHhzKEYdUEMKv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a526a94b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
racaty.net/js/ctooltip.js
200 OK 0 B URL HTTP/2 racaty.net/js/ctooltip.js
IP
GET /js/ctooltip.js HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/3ghkuhxi42yi
Cookie: aff=50273; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=1738
etag: W/"6ca-5c4c633ae45ff-gzip"
expires: Fri, 07 Jul 2023 20:14:38 GMT
last-modified: Tue, 15 Jun 2021 04:13:53 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 5905897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GmJpsCSLwE3hEcs2zxEWm0nP2MKo%2B3FJeaRecAHisCoOpzNob0fqegZT%2B6OfBsydK%2BC30cKQiuw6Vg1NVfHSGgUTy1na5IO%2Fet4OceanY7eCXFQjBoqvQ%2BX2qnmn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a67a526a92b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
louchees.net/apu.php?zoneid=3579972&oo=1
200 OK 0 B URL HTTP/2 louchees.net/apu.php?zoneid=3579972&oo=1
IP
GET /apu.php?zoneid=3579972&oo=1 HTTP/1.1
Host: louchees.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 04:46:15 GMT
content-type: application/json
x-trace-id: 146970f65af752295e5f2600d61297f6
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://racaty.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=2ed3413661e349df947b7dec828da0f9; expires=Thu, 14 Sep 2023 04:46:15 GMT; path=/; secure; SameSite=None
oaidts=1663130775; expires=Thu, 14 Sep 2023 04:46:15 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
cmp.quantcast.com/choice/PRrmquD1Ggcb1/racaty.net/choice.js?tag_version=V2
200 OK 0 B URL HTTP/2 cmp.quantcast.com/choice/PRrmquD1Ggcb1/racaty.net/choice.js?tag_version=V2
IP
GET /choice/PRrmquD1Ggcb1/racaty.net/choice.js?tag_version=V2 HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: https://racaty.net
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 15 Jul 2022 05:36:37 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
date: Wed, 14 Sep 2022 04:46:16 GMT
cache-control: max-age=900
etag: W/"60d0e832d190fcb1615d3bb7e47dbf28"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MlHckYtFCGmLEK7eMFxaIv5W8BM20BK6LzhR1tGla2ZSymD9OltG5w==
age: 14
X-Firefox-Spdy: h2
104.21.73.133
54.191.251.76
18.184.40.219
104.17.25.14
23.3.90.104
139.45.197.236
157.240.200.35
95.101.11.115