cdn.cuty.io/images/shared/locale-es.png
200 OK 13 kB URL GET HTTP/2 cdn.cuty.io/images/shared/locale-es.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash cd2f27e52bb7592e28676a86a3309158
796b9f96cbd568743713d06478e26c8e690e3723
0e656966f1958200ae6fbba050fc6eaebb9b1c60edaaffca31d26525bc59c826
GET /images/shared/locale-es.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 12579
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-3123"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1006811
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hYupb%2FlEDJOXWXRODnsgIWaXK59HBbhFLhncC63GEcbnmYXJ1JgexITPlDUw4OHU%2FzaG9ZSvn7%2BY%2F%2F55PQsq%2BlFZ5pcgzVAnTBj6RmAYEGQH5Yix3tyzpV12bFadJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f55b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/facebook-icon.png
200 OK 409 B URL GET HTTP/2 cdn.cuty.io/images/shared/facebook-icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 681da37c7ab779001ee20a72b5d44412
8416f3e43fcde2f22c95a489f3f2d4fd876e5a74
691f00c0c64d110b68cf4237589633da601dfd5112c8c048c87ebd915db64bb7
GET /images/shared/facebook-icon.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 409
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-199"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 749218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KdvuUjT18hgje6GhfIHmFGywU7WCbj6nL2XP9QpENv0WW1zl%2BrguBEBFC4RbWmbRAFbVCwyCjKkgWKZSjsd0DHWzDW1X7rUsnorR3skkLp3mtNQ348hgt6CjODzgSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f53b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/locale-fr.png
200 OK 16 kB URL GET HTTP/2 cdn.cuty.io/images/shared/locale-fr.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash d5c12041f2ddd200c2c881e5be833179
52ca2be8bf29666646ce347a5d0ef3f6cd547ca9
8c1d20e07e73934ea05d1a1990ad742073d9c674d81b09c2f76fa08eaf286eaf
GET /images/shared/locale-fr.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 16411
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-401b"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1181615
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PDKtX5Fb1J3b2pSGu%2BnaoNx0iRYqRs4A5NXc0P6yo5KRPz6WtS%2BFmtLOwYZe4wDfQYa%2Faj%2B1iYuo8fKj5bHjBKbRVVVkd5xtZ1PQsQ71QeJYJwt%2BhZIazKwwRIREKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f58b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/locale-en.png
200 OK 25 kB URL GET HTTP/2 cdn.cuty.io/images/shared/locale-en.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 60b5c13f116a3bae2e4adddd1e7b971d
58a924b5673274a280f38c05e3d5e89a700e2c3d
30d039e5187c255a96b025d81ab3be8bbc1874168079d3a3219a3b75665e284f
GET /images/shared/locale-en.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 24647
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-6047"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1103877
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W62EPUGInkFm%2FTl1vwZddT0JBfpGVqYojn7RxdJ9tflKSWIqwXe6qrs3yzRAVcA2fXJWufxQUplZLupyg2XOMjsn19mLWJtZb1TBzmoVvAcZkgmdXhPdmbfFb7g6fQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f5bb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/twitter-icon.png
200 OK 809 B URL GET HTTP/2 cdn.cuty.io/images/shared/twitter-icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 32 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 057b26d74519a32a2e278d6c89d97d19
6e8f8c66b55bddf2c37c169babaf372e11015267
977c15df2295c7f457b797893def2a978abae8f05c957a2176f9c650ca9305d8
GET /images/shared/twitter-icon.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 809
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-329"
expires: Wed, 27 Nov 2024 04:52:27 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 192177
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GAX2a9pgS2UCcf8jTRVRPuQkk%2BNg1EC62XlRE7UQyMPKlE4RuGRqs8moX01Zn6wYaj%2FVBXfccxgER1eBbKLat4ODAk1x1L6731POu2D50bolxN0pnfArhUbMfVkQRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f5db523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/locale-ar.png
200 OK 51 kB URL GET HTTP/2 cdn.cuty.io/images/shared/locale-ar.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash c81b22802da2b0f2d79452c15098ddb3
abd99b0b24da4d6d74513bb6b2b3311289a3dacc
7b93d647c94f9591b74af237bd20641b982004b56285802a69a2d83fa4b3b8a5
GET /images/shared/locale-ar.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 51070
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-c77e"
expires: Thu, 28 Nov 2024 01:58:46 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 576286
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mPToYg8Ml3tiknrKInmj58BFSmRdgHsx6uAYMopJrSnTgJmRh%2Fy9YqjekQBsQ%2FYk%2F0cnuMsHDMF5Y04jrcuYwmHcwwZMZA6zbHaqS82QgYcw9MivbBKb5zbYOGZ74w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f57b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/linkedin-icon.png
200 OK 228 kB URL GET HTTP/2 cdn.cuty.io/images/shared/linkedin-icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 976 x 970, 8-bit/color RGBA, non-interlaced\012- data
Size 228 kB (227769 bytes)
Hash c25b56612bfcb856e442fcb4fa58d958
10caff4d659c98702bd44b334e124402ef9649b4
53016dc352cde2e291cd6b4ba2fddf3cf5f4aec3c1cc75af07302ef63409222c
GET /images/shared/linkedin-icon.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 227769
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-379b9"
expires: Thu, 21 Nov 2024 10:54:46 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1015281
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7mleqatuGKQkD5qXa1F7ixlMQ0oDKLE5iwRndVLUmnlPdYjLkDWiZxtqYFDJG2ivj8g8pTdJvox0ZY2ya%2BkgPmR5FYluDcXjtJu1Pbi%2B8%2FzsCrCtxA2kXp7WTwQ%2BVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f5fb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/payeer.png
200 OK 1.4 kB URL GET HTTP/2 cdn.cuty.io/images/public/payeer.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 167 x 35, 8-bit colormap, non-interlaced\012- data
Hash 076721e6bc9e7ebd04612c544a59e3ce
777b33fdf4ec2212b9613e50d46e203d54163dbb
6602b89e29d6eeb6f85296cffc62529106f8481cb7376a082dc931461844283d
GET /images/public/payeer.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 1390
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-56e"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1187492
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LZaIgdrUxNE8ETCqgsRUb5Ttu%2BjpgcQlks%2F89by3fDSy5Fp9Fi%2FUL7uLLRxhVq8JyrC83b7Zlc37D9jO633FJ4DBqxOWzs8BsG2aw2keu6BduxO2jfQL1p7ojA2zqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a127850b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/paypal.png
200 OK 25 kB URL GET HTTP/2 cdn.cuty.io/images/public/paypal.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 1600 x 456, 8-bit colormap, non-interlaced\012- data
Hash 48de132288c9e8873f23c67a3ce9ea33
a9e8a10f5323abfc22c7e1fd0da62bffb6a4f3be
b5bf12e42fca5c8e7bf614f3cacc6aaa41275acf4bebb3bfe1db2e5002c21777
GET /images/public/paypal.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 24721
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-6091"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1276943
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FzQf13puQc0yosjFNs%2BGQhaneu6trRuUxgePVD7IQ2ds2PUFrGgqF71TvKpBufL97jJnV5G4FdDV7KvUXLtlraKTt4huU8A%2B3s29OSKGInzqNbT0rBKAqVz%2BMryKQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a127855b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/airtm.png
200 OK 1.6 kB URL GET HTTP/2 cdn.cuty.io/images/public/airtm.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 173 x 90, 8-bit colormap, non-interlaced\012- data
Hash 7b0b20bc9885600d544beb5507f52790
ff99e3b5e4430ffb2b932a656e618e18f0446ab4
1980165840ae0a9250250bd0ce68b119ac6182ee847b8e3991928a720943d224
GET /images/public/airtm.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 1558
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-616"
expires: Wed, 27 Nov 2024 02:17:00 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 192177
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=voryW7dJOhLP1%2BPsRJIeM6me1ZMP2HSl9JLOfZdQUv72jO39xNW1sqpcdBZqLB8uRZvA6zB0dD%2FyKWPjEeSke3wRzfpikWBqb6XCtrKbbkKmpoKc6m%2FuOseaGnrpiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a12785cb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/advcash.png
200 OK 8.1 kB URL GET HTTP/2 cdn.cuty.io/images/public/advcash.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 416 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f7615002ea116800ad4aa9919fd2baa
8cdee4a137bd0e1c4f8353d235eae8fad1a37ad1
28867ed73f6b31c99cdbaad04aa4134fa192e10ff220d0c004fe5c04cb9a6f2f
GET /images/public/advcash.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 8141
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-1fcd"
expires: Sat, 16 Nov 2024 14:02:09 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 671246
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zBcpLzSJmYMH70x3%2BNebrZIlRkuoGyJSpyYHI1Jr92m5LaWhLhcUF1cLJrcY%2BfVErVNepscfBBv2KK5y6mnpUoxu2QaBhcmPYQQayuTyH%2BmNdEWE5NUGcgnFB%2F%2BDnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a12785ab523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/perfectMoney.png
200 OK 202 kB URL GET HTTP/2 cdn.cuty.io/images/public/perfectMoney.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 5000 x 1023, 8-bit/color RGBA, non-interlaced\012- data
Size 202 kB (202386 bytes)
Hash 4d75a89e0baae4c6032c0fa68053830f
c9a28f03bf0e3fbbb2807db76921973872d8b390
0e007c0179add623da4b02762178d86c0d3ef3c69e8284b62f8d2e34380e0dbf
GET /images/public/perfectMoney.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 202386
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-31692"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1277503
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bmd0Z%2BHiDIVSw4%2FODF4MOCiBVAiNcJSqj6KSejVH3rPvyagn9OQ89vWQHk2vjsoobyz%2Fnt9C7xTJ7zcTij5L93%2F%2FqnEIxzgP3yqiuo1M5TJw2HWskW4BJVngoo3Neg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a127858b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/bitcoin.png
200 OK 31 kB URL GET HTTP/2 cdn.cuty.io/images/public/bitcoin.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 2000 x 417, 8-bit colormap, non-interlaced\012- data
Hash c072d65a81198a616ea588f4654f1cfb
53ec193adf51c7fcb1a642f680443d90bb3ce91d
391c02102b6a7cce91c572feec8533ecf7b26f7fa1d040ffd940660221abfc4f
GET /images/public/bitcoin.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 30766
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-782e"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 185684
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=om%2F%2BpceSEywd5VVw6A0LSLnu5QIJB9B3%2BrGrKIuJqdvLITdU7int49s8mc42ytlkqgpeaNtfGGbm%2FSstgNYZDy4shGkqQ9I9HIQrgDCf7a6UiM9p73rpcPA08DxjjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a127848b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/usdt.png
200 OK 67 kB URL GET HTTP/2 cdn.cuty.io/images/public/usdt.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 2560 x 817, 8-bit/color RGBA, non-interlaced\012- data
Hash 1320a67b3392ed2bfe9e3734ddfd2d2b
952aa8ceae4362e33e4e7de372694a37bd747eb5
bba0f811185072747208aa5d22793e3fa0c8f4048a5496553872f452845c0376
GET /images/public/usdt.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 67278
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-106ce"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1199197
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2f34%2FIPPDYxeT4yBcckg8t8%2FHfmCOKbqFdWxKYbRvgvn2EpMsZYcUpXIz0zQ2Ko%2FyAQmWy4e0O48CbCUSf2OCROWw6Xam%2Fq5aP8ZDVhDyslPpxEBTVyvYq4qa4kO4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a12885db523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/money-tree.png
200 OK 28 kB URL GET HTTP/2 cdn.cuty.io/images/public/money-tree.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 166 x 261, 8-bit/color RGBA, non-interlaced\012- data
Hash b9c1f6949e61fdf5272ce94b2d297eec
c60dda0dea1215405f6c2fba5f30ab6c92efc1d0
bb8ce1ceb98f2a5be933d8bd813e774cd03d3d37d54ac00fa6c6534a99a45dae
GET /images/public/money-tree.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/png
content-length: 27646
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-6bfe"
expires: Wed, 27 Nov 2024 05:14:36 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 185684
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=whL9416SskaEeIQ%2FmaIWr27KiUSD5lEeaJ9%2BVM4%2Bfqp02AV6uPdF2LBciFqCbldol3gMzeFf1bi2SwWzvlETCUsye5WwFCxqGpVp7l1RJp4W1RiJkJrcYnl9%2FAiWRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a12783fb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
d22lbkjf2jpzr9.cloudfront.net/?jkbld=1011175
200 OK 118 kB URL GET HTTP/2 d22lbkjf2jpzr9.cloudfront.net/?jkbld=1011175
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Size 118 kB (117604 bytes)
Hash 5efcbfdf4edc7ab7a51419042cf32089
d0e2176087eccfe659c52dcf4f69bf378c8e8c5c
699bd724b830a038c28a18cf08099bccc950b107f6bd4a806c10f8b5213d1f14
GET /?jkbld=1011175 HTTP/1.1
Host: d22lbkjf2jpzr9.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 117604
date: Wed, 06 Dec 2023 22:31:10 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 cc81c6e9e0635b111f930d60fbded11e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: GD98mtEODhBbzfnF1i-dr0FkzK2Xa7cqzyD3wXSn23KaFdFelNfjwA==
age: 1303
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/step-3.svg
200 OK 918 B URL GET HTTP/2 cdn.cuty.io/images/public/step-3.svg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (324)
Hash 4a4a913bf9081f742a1594c2720ba369
0bbad768aa7b4a70ecdf57e6b793c46875934909
7cb6e189b5c7fa3bb75d2b7c3f3b9b8628d5890db27ce8fc2f676d7b44ea81be
GET /images/public/step-3.svg HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: W/"654d0525-45b"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 671259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pztzp5q1K0oLjFaXXcvcW24%2Bdjxiwas7Peia8hhHLZBTMXQu8%2BTu7efigz5bYUhVJHnHE0oZLAFAg3kM4DZOByMM5QFkDP5V%2BD0tSg4ujNRIJfo04uLd%2BjBIgZOdEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a124f9db523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/js/public/layouts/app.js?id=fc53f269994622c629f1827dd0fb6f4f
200 OK 102 kB URL GET HTTP/2 cdn.cuty.io/js/public/layouts/app.js?id=fc53f269994622c629f1827dd0fb6f4f
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type Unicode text, UTF-8 text, with very long lines (65498), with no line terminators
Size 102 kB (101624 bytes)
Hash 3ce73590f53ff7886f350c96aabc083f
d84642a6a14789d6b51d071e15a75debee972d3a
943d3702dc9d01420c846d3e3812940ab45abf36839603b75c23e5fe67d4092a
GET /js/public/layouts/app.js?id=fc53f269994622c629f1827dd0fb6f4f HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=344134
etag: W/"654d0525-54046"
expires: Sat, 16 Nov 2024 14:02:10 GMT
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1199614
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mWzFIYcYj%2F3S8ZlHwAVgfcqhAixlyRdqHYMFq4OcOyjL91cnuLj4H%2FYR%2BDM6Glt66mSzlztMsBbRR6HbqOzbmat24W6oGSpfHej9V0dxoZpDqHOJYNmPzUOVtbjyhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a122f51b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
forbidcrenels.com/1clkn/60028
200 OK 26 B URL GET HTTP/1.1 forbidcrenels.com/1clkn/60028
IP
Certificate IssuerLet's Encrypt
Subjectforbidcrenels.com
FingerprintB8:1E:EF:9A:0C:34:8C:B2:52:4D:FE:F1:5D:06:CE:9C:D8:BC:25:38
ValidityWed, 04 Oct 2023 23:27:26 GMT - Tue, 02 Jan 2024 23:27:25 GMT
File type ASCII text, with no line terminators
Hash 9082dc37e5e8046929da411544ad071a
41e0e3963ed94e59e8a2f115994c382712411537
b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
GET /1clkn/60028 HTTP/1.1
Host: forbidcrenels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 Dec 2023 22:52:54 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Thu, 07-Dec-2023 22:52:54 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Thu, 07-Dec-2023 22:52:54 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
www.googletagmanager.com/gtag/js?id=G-GGDCMPL4QP
200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-GGDCMPL4QP
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Hash 1d3a72534fe816d2c1586b1e6bc467d4
986668679d669a21b3800dc72f38b24eceb79dc7
abbc3e0a4cda159154c2cda2735546eff7f5c37aa07b0caa1faf69f5c19678c2
GET /gtag/js?id=G-GGDCMPL4QP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Dec 2023 22:52:54 GMT
expires: Wed, 06 Dec 2023 22:52:54 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86207
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/heading-background.png
200 OK 107 kB URL GET HTTP/3 cdn.cuty.io/images/public/heading-background.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type PNG image data, 1440 x 720, 8-bit/color RGBA, non-interlaced\012- data
Size 107 kB (107203 bytes)
Hash e6f5d768d4773ec1e3b75b2db352f7bf
6d0575e7897ea024422ce003abe0c20fa3762f83
15e9a191aef4c2d8d504df2367c89aaf857ca48862b098746fa1f524e3c8fa00
GET /images/public/heading-background.png HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cuty.io/css/public.css?id=a66d1b3f490ee5b9c79bc9f7135b2531
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 06 Dec 2023 22:52:54 GMT
content-type: image/png
content-length: 107203
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: "654d0525-1a2c3"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1191905
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sJCZhkEO9gZFXsQ3i2wmie44LVppHXqRDpg6hC21e9dB98VApPVos%2FUNxjr7vWtk7Ifh8JAAhqMdy8fO0tfen0qRYnpVws3sj4eDytuSSyBXDCDU%2BFT7O6h8zOl8MA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a17ba6456ba-OSL
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api.js
200 OK 1.0 kB URL GET HTTP/2 www.google.com/recaptcha/api.js
IP
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type gzip compressed data\012- data
Hash eb306ae45f0a816adaf2cd015eb0a001
5cc5a086d20fd98384e12d12308c5a9e70a0ba07
a6657093e29b650441ec67e26d639d45c2db6ac3d7b627515e111f822965c90c
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 06 Dec 2023 22:52:54 GMT
date: Wed, 06 Dec 2023 22:52:54 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/step-2.svg
200 OK 1.1 kB URL GET HTTP/2 cdn.cuty.io/images/public/step-2.svg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (591)
Hash 32b29eb689ff701bd292921f6ffbe05a
4dd1da5eb5761cdb85b5d25dbf05340bdd35e3da
ad7b909be0ac771a93aa56619d42d861b55c5e24b1913b945a6abda3f3b80a4d
GET /images/public/step-2.svg HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: W/"654d0525-607"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1090080
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lb4IDmvNqIjCmzTVaUY%2B6O%2BcLDiaPssROaz0OpYBNzG75WNPntWjcuw188t0VvAtVE6wx3CHCz%2BcaHojowWgYjx%2FmYwArzuBZHEkSplqlOMoe5J3MhwLqQBNWDtk6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f6bb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
inourdreamsa.org/dTJQMUYUUDNceRQPMhczB15tFHQzF2J3IkcAPFMtH1RiWzYPQGkfJRldJVUgB10+RWgbVyQUdDNDMXQ+G1EFRgo8RTtpJQ1FPHB2DQsHeXcjY2MAFxRVYHIPAmtoZi4gXR1bLQ1gJ2cfOmMRSCcdRWJwdg0KBFgHMnopRRAUVRlXCkRkaWAUNF0TXwAhZCpaDBZjP1QIEnc3cj43QgdWNiZqY0kIE140awkCdzlwPkEFFwMqI2MDeCUUZAZzICNaOWd3Jxdidw0YXgZgEgZwGV0AM1MGQgkkWR4JAz1CBGcOTUMxZxA3YjgENiN2EggRPV4aYBEjfDZdaxZlG2A1G3EWY2NHcBxfcy1jGEkfE2Q0cCcjQmhwFBIXYnMCJl0ZchEZUxNdHDdXBWt+JGMCSREkFDpCKRtCbVUiL0cGBw9FRzdy
200 OK 1.2 kB URL GET HTTP/2 inourdreamsa.org/dTJQMUYUUDNceRQPMhczB15tFHQzF2J3IkcAPFMtH1RiWzYPQGkfJRldJVUgB10+RWgbVyQUdDNDMXQ+G1EFRgo8RTtpJQ1FPHB2DQsHeXcjY2MAFxRVYHIPAmtoZi4gXR1bLQ1gJ2cfOmMRSCcdRWJwdg0KBFgHMnopRRAUVRlXCkRkaWAUNF0TXwAhZCpaDBZjP1QIEnc3cj43QgdWNiZqY0kIE140awkCdzlwPkEFFwMqI2MDeCUUZAZzICNaOWd3Jxdidw0YXgZgEgZwGV0AM1MGQgkkWR4JAz1CBGcOTUMxZxA3YjgENiN2EggRPV4aYBEjfDZdaxZlG2A1G3EWY2NHcBxfcy1jGEkfE2Q0cCcjQmhwFBIXYnMCJl0ZchEZUxNdHDdXBWt+JGMCSREkFDpCKRtCbVUiL0cGBw9FRzdy
IP
Certificate IssuerAmazon
Subjectinourdreamsa.org
Fingerprint56:E7:E0:18:55:2A:EE:84:2C:7D:10:F3:AD:80:A6:E7:75:F7:B6:87
ValidityWed, 29 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3020), with no line terminators
Hash 449082c444db0d347bcd1a04d767df53
c2a7e94c77a62e88f7dacae97c2f0fe481789614
e8e86af1464c99647e14ea0b3ea98609f24277d04b76454c59108e8651bf225e
GET /dTJQMUYUUDNceRQPMhczB15tFHQzF2J3IkcAPFMtH1RiWzYPQGkfJRldJVUgB10+RWgbVyQUdDNDMXQ+G1EFRgo8RTtpJQ1FPHB2DQsHeXcjY2MAFxRVYHIPAmtoZi4gXR1bLQ1gJ2cfOmMRSCcdRWJwdg0KBFgHMnopRRAUVRlXCkRkaWAUNF0TXwAhZCpaDBZjP1QIEnc3cj43QgdWNiZqY0kIE140awkCdzlwPkEFFwMqI2MDeCUUZAZzICNaOWd3Jxdidw0YXgZgEgZwGV0AM1MGQgkkWR4JAz1CBGcOTUMxZxA3YjgENiN2EggRPV4aYBEjfDZdaxZlG2A1G3EWY2NHcBxfcy1jGEkfE2Q0cCcjQmhwFBIXYnMCJl0ZchEZUxNdHDdXBWt+JGMCSREkFDpCKRtCbVUiL0cGBw9FRzdy HTTP/1.1
Host: inourdreamsa.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1170
date: Wed, 06 Dec 2023 22:52:54 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: lKxPicSaOTB85l_WPQQhOzXZVjhyqD7S4AcinxZgfisLxlubunD2eA==
X-Firefox-Spdy: h2
cdn.cuty.io/js/public/layouts/_partials/nav-links.js?id=0b6cd2e4bcfbf719fc8b516ace1e2d04
200 OK 48 kB URL GET HTTP/2 cdn.cuty.io/js/public/layouts/_partials/nav-links.js?id=0b6cd2e4bcfbf719fc8b516ace1e2d04
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type ASCII text, with very long lines (3058), with no line terminators
Hash 0b6cd2e4bcfbf719fc8b516ace1e2d04
f4e19d7f4d3739607ed0fcb03e3106e0db8875b3
65d66e30eb5d04f338a6953963c46f28d4bb63d3183a13f47516c315621af600
GET /js/public/layouts/_partials/nav-links.js?id=0b6cd2e4bcfbf719fc8b516ace1e2d04 HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
etag: W/"654d0525-bf2"
expires: Sat, 16 Nov 2024 14:02:10 GMT
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 927003
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8c0T2XG4E3mm6tpG7vFgk1fSlhT29xT%2FrdC3BYQG69z4iNeThKiPBcLMIsPY3Cq2%2FZSQegxGsumLyMIRzFXJ0hYBhQ31pVzgUU%2Bz9aLJSYgyiLISiWgUjBdbsFsxVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a122f4fb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
200 OK 47 kB URL GET HTTP/2 fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0\012- data
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exego.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 04:43:34 GMT
expires: Wed, 04 Dec 2024 04:43:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 151760
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
inourdreamsa.org/cWg3cXYQClQcSRBVVVcDAwQKVEQ3TQU3EkNaWxMdGw4FGwYLGg5fFR0HQhUQAwdZBVgfDUNURDc4ekMvQzp/FScyPlAYJTQLZyQYHS92QBU5DGIwMSAuQEIxN1hgMg4jL2YwBhkLThUbNVt5SDdADxJDNDQsdj8gQBtwKB4FO3Q3MEQ9YSg/JzBbNjAgDGQ7HR4gZjQ/QS9xGRQkLEAXISNRYTgOBS9zGTcJLlBFOiY8AxQuBhhvKCMnWWIJHkE9UDchOQJ6FC4gIm08ASA/YTAvAClPKyMzBmE5PicxYxUMJD9hMC8LIFtAJzAFcTQVJCVyFTdJLmIZWz9beSMsJCpdKDQ3BGFCEiQLcCI3KxxiFjAmPWQ0IyYpXCUSGy11JxEVWGUGPCYqBTcwMB91FzgZImEyI0QAZSkgKSpZNywwWHU1EyQxERsFHgZHTCZAG1smQSE9XjRPBQNv
200 OK 1.2 kB URL GET HTTP/2 inourdreamsa.org/cWg3cXYQClQcSRBVVVcDAwQKVEQ3TQU3EkNaWxMdGw4FGwYLGg5fFR0HQhUQAwdZBVgfDUNURDc4ekMvQzp/FScyPlAYJTQLZyQYHS92QBU5DGIwMSAuQEIxN1hgMg4jL2YwBhkLThUbNVt5SDdADxJDNDQsdj8gQBtwKB4FO3Q3MEQ9YSg/JzBbNjAgDGQ7HR4gZjQ/QS9xGRQkLEAXISNRYTgOBS9zGTcJLlBFOiY8AxQuBhhvKCMnWWIJHkE9UDchOQJ6FC4gIm08ASA/YTAvAClPKyMzBmE5PicxYxUMJD9hMC8LIFtAJzAFcTQVJCVyFTdJLmIZWz9beSMsJCpdKDQ3BGFCEiQLcCI3KxxiFjAmPWQ0IyYpXCUSGy11JxEVWGUGPCYqBTcwMB91FzgZImEyI0QAZSkgKSpZNywwWHU1EyQxERsFHgZHTCZAG1smQSE9XjRPBQNv
IP
Certificate IssuerAmazon
Subjectinourdreamsa.org
Fingerprint56:E7:E0:18:55:2A:EE:84:2C:7D:10:F3:AD:80:A6:E7:75:F7:B6:87
ValidityWed, 29 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3048), with no line terminators
Hash bb437d0a952611d092e0946d29b22ee8
56ec1e7293ed9fdd27a02d909ed5c26def441934
3705824f55a8fdd46a0a814133cf8fea7035269cadb4cc215a463210c0dce615
GET /cWg3cXYQClQcSRBVVVcDAwQKVEQ3TQU3EkNaWxMdGw4FGwYLGg5fFR0HQhUQAwdZBVgfDUNURDc4ekMvQzp/FScyPlAYJTQLZyQYHS92QBU5DGIwMSAuQEIxN1hgMg4jL2YwBhkLThUbNVt5SDdADxJDNDQsdj8gQBtwKB4FO3Q3MEQ9YSg/JzBbNjAgDGQ7HR4gZjQ/QS9xGRQkLEAXISNRYTgOBS9zGTcJLlBFOiY8AxQuBhhvKCMnWWIJHkE9UDchOQJ6FC4gIm08ASA/YTAvAClPKyMzBmE5PicxYxUMJD9hMC8LIFtAJzAFcTQVJCVyFTdJLmIZWz9beSMsJCpdKDQ3BGFCEiQLcCI3KxxiFjAmPWQ0IyYpXCUSGy11JxEVWGUGPCYqBTcwMB91FzgZImEyI0QAZSkgKSpZNywwWHU1EyQxERsFHgZHTCZAG1smQSE9XjRPBQNv HTTP/1.1
Host: inourdreamsa.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1196
date: Wed, 06 Dec 2023 22:52:54 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: atspQ74ykH_K-ca8AcgY0-t_uT0ZcmZ5-Pp4J53Z4PWc_AbM3_ayug==
X-Firefox-Spdy: h2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
200 OK 47 kB URL GET HTTP/2 fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0\012- data
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exego.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 04:43:34 GMT
expires: Wed, 04 Dec 2024 04:43:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 151760
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/logo.svg
200 OK 49 kB URL GET HTTP/2 cdn.cuty.io/images/shared/logo.svg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1008)
Hash 0aa97ced29279192996c85413c48125b
ae7e1560799800a0b71c23d5debca02d5d47a84f
7fd1d0dbdc43386ec569735f5e63a9c81684a1f186c94b0039d609abd0411503
GET /images/shared/logo.svg HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: W/"654d0525-175a"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1195675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8f9ITLWXFEcOt81t%2FSPrnUoo1VjfEPAQbnVP7fsRkSIfPik3%2F8KyAODkIB8F8es%2Fulo%2F9HAhDsdsPEjjEc%2F45LZgOTI0WAiLiMVPz0G2tK2jBQeDzZcn0n4FE8r8Jg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f5ab523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
inourdreamsa.org/c1hlcDQSOgYdCxJlB1ZBATRYVQY1fVc2UEFqCRJfGT5XGkQJKlxeVx83EBRSATcLBBodPRFVBjUvNjhEBQ5VE0Y1CSAIUTcvMTMGA2oANUAXAj0qEUEePTFhGBMmKX8mMVUyUTcRAzlDImEhQF8ZCDYIfCtrIAJ/IQksEVk2LCMxTAI8CERWMCIzRlI1Lwc6TRQyNwdfBRQcOXA3HCQCZCESLzldKWkjB3UHFAwhYzc2L0FwGGEnKgY5bjYbVxQUDClRMhskQFYmMAM/YD0sNjYNHjxXKn8gNTQ2ViYwAzl3RzUxNkAKPCQAUisPBlUGNT4ORX8pGTMEZzV1XRx5JGkvPFkpawMmZhU+CDoCID8CCX4wFTMjWSYaABtEFgJWFAEgNFAJUCs/BjJdJjEpGGErOwsleyBpXBlVKzAGN1kDakMaRxw2FU1ONWgtAEAwLRA
200 OK 1.2 kB URL GET HTTP/2 inourdreamsa.org/c1hlcDQSOgYdCxJlB1ZBATRYVQY1fVc2UEFqCRJfGT5XGkQJKlxeVx83EBRSATcLBBodPRFVBjUvNjhEBQ5VE0Y1CSAIUTcvMTMGA2oANUAXAj0qEUEePTFhGBMmKX8mMVUyUTcRAzlDImEhQF8ZCDYIfCtrIAJ/IQksEVk2LCMxTAI8CERWMCIzRlI1Lwc6TRQyNwdfBRQcOXA3HCQCZCESLzldKWkjB3UHFAwhYzc2L0FwGGEnKgY5bjYbVxQUDClRMhskQFYmMAM/YD0sNjYNHjxXKn8gNTQ2ViYwAzl3RzUxNkAKPCQAUisPBlUGNT4ORX8pGTMEZzV1XRx5JGkvPFkpawMmZhU+CDoCID8CCX4wFTMjWSYaABtEFgJWFAEgNFAJUCs/BjJdJjEpGGErOwsleyBpXBlVKzAGN1kDakMaRxw2FU1ONWgtAEAwLRA
IP
Certificate IssuerAmazon
Subjectinourdreamsa.org
Fingerprint56:E7:E0:18:55:2A:EE:84:2C:7D:10:F3:AD:80:A6:E7:75:F7:B6:87
ValidityWed, 29 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3036), with no line terminators
Hash 765789cf38e4d90e618aaf00ac993005
887093f688418b37e89c075c42e95af526dbacbf
e9ddc06e470f2817f814c2c78a5ff0d5309357914687d4a34dcf532824f3bced
GET /c1hlcDQSOgYdCxJlB1ZBATRYVQY1fVc2UEFqCRJfGT5XGkQJKlxeVx83EBRSATcLBBodPRFVBjUvNjhEBQ5VE0Y1CSAIUTcvMTMGA2oANUAXAj0qEUEePTFhGBMmKX8mMVUyUTcRAzlDImEhQF8ZCDYIfCtrIAJ/IQksEVk2LCMxTAI8CERWMCIzRlI1Lwc6TRQyNwdfBRQcOXA3HCQCZCESLzldKWkjB3UHFAwhYzc2L0FwGGEnKgY5bjYbVxQUDClRMhskQFYmMAM/YD0sNjYNHjxXKn8gNTQ2ViYwAzl3RzUxNkAKPCQAUisPBlUGNT4ORX8pGTMEZzV1XRx5JGkvPFkpawMmZhU+CDoCID8CCX4wFTMjWSYaABtEFgJWFAEgNFAJUCs/BjJdJjEpGGErOwsleyBpXBlVKzAGN1kDakMaRxw2FU1ONWgtAEAwLRA HTTP/1.1
Host: inourdreamsa.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1188
date: Wed, 06 Dec 2023 22:52:54 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: A0hvmPXgkQKpnPE4rFrd3ZUi56FHD_bd0m0SQHfgMYHfuXn98OeVfg==
X-Firefox-Spdy: h2
live.demand.supply/up.js
403 Forbidden 1.6 kB IP
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (394)
Hash 0c0622533d37a3a698457b9ba09d4743
05be02fc613560bd18011f259e0ff02d1d31f598
a802cfab9d441b696805767d691bfa197c2a54fae9331c17dbbb0f3372120e4d
GET /up.js HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Wed, 06 Dec 2023 22:53:08 GMT
set-cookie: __cf_bm=HBKL7LiJn0.jQJeGoCct1lMx5wWwQW6x6ICM4fxV1t8-1701903173-0-AfKa0aPkNReKJL4go5O9fjD6o6HjXQRw0Rx9tUqmFX1MfwuwOKoDeQrPmUTskuNhNZ8YuCPpghcQ+lJ4cgw+Gyc=; path=/; expires=Wed, 06-Dec-23 23:22:53 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a12de8f56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nedandlooked.org/MUlINFIeditHb1IBDgcddg8MZhcFAB1fEHYYCQUKYHkCcxYACG5AO1V0eQRjA3t5A3RBICwJYxc6PFUmRDp1BXRYJy5bbxc/dQV8An1mB2YfeW5BbwBvPEQzVnR5EiJFPSQJYwZ5eQ1iAnhwBGQAeA
204 No Content 0 B URL GET HTTP/2 nedandlooked.org/MUlINFIeditHb1IBDgcddg8MZhcFAB1fEHYYCQUKYHkCcxYACG5AO1V0eQRjA3t5A3RBICwJYxc6PFUmRDp1BXRYJy5bbxc/dQV8An1mB2YfeW5BbwBvPEQzVnR5EiJFPSQJYwZ5eQ1iAnhwBGQAeA
IP
Certificate IssuerLet's Encrypt
Subjectnedandlooked.org
Fingerprint01:61:4F:C9:AE:4C:BD:62:AB:64:7E:07:2C:36:5B:5A:9A:B1:57:B6
ValidityWed, 29 Nov 2023 06:02:23 GMT - Tue, 27 Feb 2024 06:02:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /MUlINFIeditHb1IBDgcddg8MZhcFAB1fEHYYCQUKYHkCcxYACG5AO1V0eQRjA3t5A3RBICwJYxc6PFUmRDp1BXRYJy5bbxc/dQV8An1mB2YfeW5BbwBvPEQzVnR5EiJFPSQJYwZ5eQ1iAnhwBGQAeA HTTP/1.1
Host: nedandlooked.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 06 Dec 2023 22:52:54 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IE9rHUFeAVNVvgLBaeiOVav60G7%2FsdtgNb7OfkrZYcaZna%2F6H0xTC%2FA9AVfLFVMTRAYpelCOKNZHM4kjtwTBnqW6KjPs2mMaW16Cn66xCvArEMbj5lozg8cFtFQEW2fA0B29"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a195d54b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nedandlooked.org/UVJ4b25+bRscUwgoHCMjPxAsK10+GSopDRMxDx8kBiU2Fi8UB14bBzVvSV9fY2BJV0ghOxxSX2l0CxsPJScLUl93OxYJAWx0DlJff2JWXUBldA1SX3cmCA4JbGNeHxolPkVeWWFjQV9dYGpIWldj
204 No Content 0 B URL GET HTTP/2 nedandlooked.org/UVJ4b25+bRscUwgoHCMjPxAsK10+GSopDRMxDx8kBiU2Fi8UB14bBzVvSV9fY2BJV0ghOxxSX2l0CxsPJScLUl93OxYJAWx0DlJff2JWXUBldA1SX3cmCA4JbGNeHxolPkVeWWFjQV9dYGpIWldj
IP
Certificate IssuerLet's Encrypt
Subjectnedandlooked.org
Fingerprint01:61:4F:C9:AE:4C:BD:62:AB:64:7E:07:2C:36:5B:5A:9A:B1:57:B6
ValidityWed, 29 Nov 2023 06:02:23 GMT - Tue, 27 Feb 2024 06:02:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UVJ4b25+bRscUwgoHCMjPxAsK10+GSopDRMxDx8kBiU2Fi8UB14bBzVvSV9fY2BJV0ghOxxSX2l0CxsPJScLUl93OxYJAWx0DlJff2JWXUBldA1SX3cmCA4JbGNeHxolPkVeWWFjQV9dYGpIWldj HTTP/1.1
Host: nedandlooked.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 06 Dec 2023 22:52:54 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TyxjCC81QUXSELhQNS7f9qZ5Kv4aLCZICbi76tN%2FpKuLJh1mcpZiqnkn%2B1K4oQF1js%2FUBgZRG%2FGy3gP%2B15WoiB1bZqHGs4awXBoYdXAPvk1sApy7j5jVkMkBh%2B2zjIBJYH6W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a197d64b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/x.svg
200 OK 631 B URL GET HTTP/2 cdn.cuty.io/images/shared/x.svg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash b6d593effe60aba771c69c0aa300636f
8a546b13f8f2dd236cd3fdd29e3255b3591f03a2
c95ae17f34654993abce3961283bc904a5eeddc7ed0e0c20cc307722d9f1d4ef
GET /images/shared/x.svg HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: W/"654d0525-d1"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 189730
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZC76gSfYpn3Xm5CJSk%2Bo1s%2FDaOgV5ZUz8L3N3I6jPUnynupQdXAXJNU3J2Qh2rCF92GIs%2FwJuNINv7a%2F9iavuEtPmtlbBui0zDIvDsF%2FvUE1RShfr81am5I3E4Ai6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f5cb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
200 OK 191 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://exego.app
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 22:49:59 GMT
expires: Thu, 05 Dec 2024 22:49:59 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 176
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintF3:FB:54:1B:21:E9:69:01:41:02:BB:D0:97:A2:BA:45:72:5A:71:D8
ValidityMon, 20 Nov 2023 08:09:49 GMT - Mon, 12 Feb 2024 08:09:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:l_8sVDDxDsaKTBltQNc-LYMmq7Z3bA:RMxLj1OrkhHuR51U; Expires=Fri, 05-Dec-2025 22:52:55 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 22:52:55 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp0mv8oOnnmPAbmu4VUUaCqwuy5TG7449Q95XK0NTShhYzS_cs2gjtKgLX1c9pRVuz7El_YC
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-AclHFPUT3KJgPQYQb4_IOw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 0 B URL HEAD HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint6C:2A:75:F2:3F:EF:4F:43:B1:8D:C3:B7:E9:2E:4A:EF:40:6A:FC:92
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exego.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 06 Dec 2023 22:52:55 GMT
expires: Wed, 06 Dec 2023 22:52:55 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 13208660580406200169
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51839
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintF3:FB:54:1B:21:E9:69:01:41:02:BB:D0:97:A2:BA:45:72:5A:71:D8
ValidityMon, 20 Nov 2023 08:09:49 GMT - Mon, 12 Feb 2024 08:09:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:6CF-FuxZUXN2XBMfkWAKQlbC_9XF3A:TLQfIiYWrTHZ9SA5; Expires=Fri, 05-Dec-2025 22:52:55 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 22:52:55 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp2JuBJMLQZ1d5ZmjyP3GwtTlSOjBdTwfNgnZH7eROiOpQr0KZ_6D13-CVXSt8slU9lrfcFq
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-OT3DYXY6N4vYK6wkXI12Cw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
inourdreamsa.org/utx?cb=dO2EDbA81Eei&top=exego.app&tid=1011175
204 No Content 0 B URL GET HTTP/2 inourdreamsa.org/utx?cb=dO2EDbA81Eei&top=exego.app&tid=1011175
IP
Certificate IssuerAmazon
Subjectinourdreamsa.org
Fingerprint56:E7:E0:18:55:2A:EE:84:2C:7D:10:F3:AD:80:A6:E7:75:F7:B6:87
ValidityWed, 29 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=dO2EDbA81Eei&top=exego.app&tid=1011175 HTTP/1.1
Host: inourdreamsa.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://exego.app
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 06 Dec 2023 22:52:55 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://exego.app
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 06 Dec 2023 22:53:55 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: CMDM2vFjX851LyhJ2zOUmbP6cY0nWlHojzykLqXAOyzJox77yu37Ig==
X-Firefox-Spdy: h2
inourdreamsa.org/utx?cb=1DKpciDIZ2lw&top=exego.app&tid=1012217
204 No Content 0 B URL GET HTTP/2 inourdreamsa.org/utx?cb=1DKpciDIZ2lw&top=exego.app&tid=1012217
IP
Certificate IssuerAmazon
Subjectinourdreamsa.org
Fingerprint56:E7:E0:18:55:2A:EE:84:2C:7D:10:F3:AD:80:A6:E7:75:F7:B6:87
ValidityWed, 29 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=1DKpciDIZ2lw&top=exego.app&tid=1012217 HTTP/1.1
Host: inourdreamsa.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://exego.app
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 06 Dec 2023 22:52:55 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://exego.app
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 06 Dec 2023 22:53:55 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: vEFpE26c4QEc69jSLQm2R9SYLZAAOTdBtIWQWWUAPrQcCarqf2ltNQ==
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 103 kB IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 103 kB (102871 bytes)
Hash fc747e8f0bf28ccc467ff8c70556509a
ab829c5df708d7be0f8bf7d62e7d09c45aa039b6
300c81165b5a7061e53e22b4978adf25b7c40e63c5366f5e66ca58c2c9e79fe7
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exego.app/
Origin: https://exego.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:55 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://exego.app
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 5261
last-modified: Wed, 06 Dec 2023 21:25:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5SrA6VANB1qagJpsrptP8EntmFTjjg6j%2FW9eWxdrmtMhc05aJOLg6IDnCMo3jjdtpxkMKiCoFfqGCt3t%2BKF2eJ1jGbmwuux4tM3x2erbcXnOGOcOj%2FydEJOuRlrDKib3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a1c5ebe5282-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
d22lbkjf2jpzr9.cloudfront.net/PM2Y2RHdQCVgiSEcPUnlGA1cHdUAGQFw3GF0WCxRGQAphcydmD3N9A1g+EDANV1sGYhtSCFF5UVYIVXlGFQdSJkoHQEI0GFhbUDwfWR9VIxtGDhAxFg4LWT4eXwpXYUV1Uxh0UgFWHjMeXQJZMwQWVAYqAxZUBnVHHVYTdzUWVAYzHl1QAmFEcUMEdA8FUh-N3NRZUBjYBFlV3dUcGSAZtUgFWUSEUWAkTdjEBVgd0RwJWB2FFAwBfNhJVCU5hRXVXBnFZA0BDeUY
523 B URL d22lbkjf2jpzr9.cloudfront.net/PM2Y2RHdQCVgiSEcPUnlGA1cHdUAGQFw3GF0WCxRGQAphcydmD3N9A1g+EDANV1sGYhtSCFF5UVYIVXlGFQdSJkoHQEI0GFhbUDwfWR9VIxtGDhAxFg4LWT4eXwpXYUV1Uxh0UgFWHjMeXQJZMwQWVAYqAxZUBnVHHVYTdzUWVAYzHl1QAmFEcUMEdA8FUh-N3NRZUBjYBFlV3dUcGSAZtUgFWUSEUWAkTdjEBVgd0RwJWB2FFAwBfNhJVCU5hRXVXBnFZA0BDeUY
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (726), with no line terminators
Hash 02661c2690f30e44ff205af8a06b01fc
ea02b6fb9e4bd2e14834a57902d1ed03acaee1a8
7128986858d161969809cb3589720375e93f0dae8e77e3ef79b7a368499ac487
GET /PM2Y2RHdQCVgiSEcPUnlGA1cHdUAGQFw3GF0WCxRGQAphcydmD3N9A1g+EDANV1sGYhtSCFF5UVYIVXlGFQdSJkoHQEI0GFhbUDwfWR9VIxtGDhAxFg4LWT4eXwpXYUV1Uxh0UgFWHjMeXQJZMwQWVAYqAxZUBnVHHVYTdzUWVAYzHl1QAmFEcUMEdA8FUh-N3NRZUBjYBFlV3dUcGSAZtUgFWUSEUWAkTdjEBVgd0RwJWB2FFAwBfNhJVCU5hRXVXBnFZA0BDeUY HTTP/1.1
Host: d22lbkjf2jpzr9.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inourdreamsa.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 523
date: Wed, 06 Dec 2023 22:52:55 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 cc81c6e9e0635b111f930d60fbded11e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: I7AWnRNNlHslq3boLy8A2vLtiAj81iCl5npBhClIJS0hwIS_5nCjQg==
X-Firefox-Spdy: h2
d22lbkjf2jpzr9.cloudfront.net/wSHpvV0crFQExeDwTC2p2eEtdZXZ/XAUkKCYKUi0BeDIfIwQ9D0kjPSxHX3ErKRQIamEtFAxqdm4bCzV6fFwbJygjRwkvLyIDDDArPRJJIiZ1FwAtLiQWDnJ1Dk9BZ2J6SkcgLiYeACA0bUhfOTNtSF9md2ZKSmQFbUhfIC4mTFtydApfXWc/fk5KZAVtSF-8lMW1JLmZ3fVRffmJ6SggyJCMVSmUBekpeZ3d5Sl5ydXgcBiUiLhUXcnUOS19iaXhcGmp2
546 B URL d22lbkjf2jpzr9.cloudfront.net/wSHpvV0crFQExeDwTC2p2eEtdZXZ/XAUkKCYKUi0BeDIfIwQ9D0kjPSxHX3ErKRQIamEtFAxqdm4bCzV6fFwbJygjRwkvLyIDDDArPRJJIiZ1FwAtLiQWDnJ1Dk9BZ2J6SkcgLiYeACA0bUhfOTNtSF9md2ZKSmQFbUhfIC4mTFtydApfXWc/fk5KZAVtSF-8lMW1JLmZ3fVRffmJ6SggyJCMVSmUBekpeZ3d5Sl5ydXgcBiUiLhUXcnUOS19iaXhcGmp2
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (793), with no line terminators
Hash 83aee16203823b6aecf3943f5ba07222
d348be191136cd7aa45f988c41da605802c74719
041d493871c39b03bc71d967485c83640b70b3c9f1f6a25e4f8205775dfdccb0
GET /wSHpvV0crFQExeDwTC2p2eEtdZXZ/XAUkKCYKUi0BeDIfIwQ9D0kjPSxHX3ErKRQIamEtFAxqdm4bCzV6fFwbJygjRwkvLyIDDDArPRJJIiZ1FwAtLiQWDnJ1Dk9BZ2J6SkcgLiYeACA0bUhfOTNtSF9md2ZKSmQFbUhfIC4mTFtydApfXWc/fk5KZAVtSF-8lMW1JLmZ3fVRffmJ6SggyJCMVSmUBekpeZ3d5Sl5ydXgcBiUiLhUXcnUOS19iaXhcGmp2 HTTP/1.1
Host: d22lbkjf2jpzr9.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inourdreamsa.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 546
date: Wed, 06 Dec 2023 22:52:55 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 cc81c6e9e0635b111f930d60fbded11e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: hWv-UrIyo5OX5BC0Ti3B66-zEt3NF4-R4gZFdoTc1DDDIVQfQR7jeg==
X-Firefox-Spdy: h2
d22lbkjf2jpzr9.cloudfront.net/qaExncUwLIwkXcxwlA0x9WH1VQ31Qag0CIwY8WhUoMjkxRwVYOQAyahw2A0x8TiAGHytVagIfL1V9QRAoCnFTVzkJcQoeNgEgCxBpWgpSX3xNfldZOwEiAx47G2lVQSIcaVVBfVhiV1R/KmlVQTsBIlFFaVsOQkN8EHpTVH8qaVVBPh5pVDB9WHlJQWVNfl-cWKQsnCFR+Ln5XQHxYfVdAaVp8ARg+DSoICWlaClZBeUZ8QQRxWQ
188 B URL d22lbkjf2jpzr9.cloudfront.net/qaExncUwLIwkXcxwlA0x9WH1VQ31Qag0CIwY8WhUoMjkxRwVYOQAyahw2A0x8TiAGHytVagIfL1V9QRAoCnFTVzkJcQoeNgEgCxBpWgpSX3xNfldZOwEiAx47G2lVQSIcaVVBfVhiV1R/KmlVQTsBIlFFaVsOQkN8EHpTVH8qaVVBPh5pVDB9WHlJQWVNfl-cWKQsnCFR+Ln5XQHxYfVdAaVp8ARg+DSoICWlaClZBeUZ8QQRxWQ
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 4d5820532ff1c23aa49af006305561ef
0187b9ad25c8144b551e9ea9dbd70d9901e58869
8bd949b76638cb35600fde54fcb1af6a34eb3c021b1c32b1832efcf2df49540a
GET /qaExncUwLIwkXcxwlA0x9WH1VQ31Qag0CIwY8WhUoMjkxRwVYOQAyahw2A0x8TiAGHytVagIfL1V9QRAoCnFTVzkJcQoeNgEgCxBpWgpSX3xNfldZOwEiAx47G2lVQSIcaVVBfVhiV1R/KmlVQTsBIlFFaVsOQkN8EHpTVH8qaVVBPh5pVDB9WHlJQWVNfl-cWKQsnCFR+Ln5XQHxYfVdAaVp8ARg+DSoICWlaClZBeUZ8QQRxWQ HTTP/1.1
Host: d22lbkjf2jpzr9.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inourdreamsa.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 188
date: Wed, 06 Dec 2023 22:52:55 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 cc81c6e9e0635b111f930d60fbded11e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: GO_0AqIQaHduTwMF_VWUWh9sC80QSrO1zr6OgTHKOypF8bLFDv5U-g==
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp0mv8oOnnmPAbmu4VUUaCqwuy5TG7449Q95XK0NTShhYzS_cs2gjtKgLX1c9pRVuz7El_YC
302 Found 399 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp0mv8oOnnmPAbmu4VUUaCqwuy5TG7449Q95XK0NTShhYzS_cs2gjtKgLX1c9pRVuz7El_YC
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (395)
Hash 6dd92bda45cf28fd78819fcd9f6b0c7a
8d35725fb9a306adb6ec34e7b386a668f713cb6d
676b22970e82b178ff415b07e578ac46417ad132b3799d3665814ae866ec12bd
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp0mv8oOnnmPAbmu4VUUaCqwuy5TG7449Q95XK0NTShhYzS_cs2gjtKgLX1c9pRVuz7El_YC HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exego.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:BbbpfNK-U8PMvstNmeEcF894edl8Ug:82_FdpdIwuHLXeql;Path=/;Expires=Fri, 05-Dec-2025 22:52:55 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 22:52:55 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1aOlfLEdV2tZg1uHDOg0GR0a1Bq0PDBn9s5ucnyjfHZTGYQDoc7fI4xsR3vJmZfhiCaTqtPQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1174510175%3A1701903175305650&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-_6_6I513huOzeCQjogvs0g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 399
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp2JuBJMLQZ1d5ZmjyP3GwtTlSOjBdTwfNgnZH7eROiOpQr0KZ_6D13-CVXSt8slU9lrfcFq
302 Found 405 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp2JuBJMLQZ1d5ZmjyP3GwtTlSOjBdTwfNgnZH7eROiOpQr0KZ_6D13-CVXSt8slU9lrfcFq
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (398)
Hash 13f2cd385f30f024264acf845d71b193
8fbc4d410fced1333d53f509b08055bb4d13b176
17c88cc629fa29fc18312952ae21b752f554f502676ff05d04d5248ab8097069
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp2JuBJMLQZ1d5ZmjyP3GwtTlSOjBdTwfNgnZH7eROiOpQr0KZ_6D13-CVXSt8slU9lrfcFq HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exego.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:OVK41Ew872aNpqqza9gT-SRqF1VFhQ:Zp8G7wqh5QHKGoOB;Path=/;Expires=Fri, 05-Dec-2025 22:52:55 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 22:52:55 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0ZwsX-_-updebFxpAWTkK4mZKuHBh-c2DgET8Xi-_WttR0wjrXfeW420DTQN2EQXigonLB_g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S654320778%3A1701903175311946&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-rIli6qpuoGaCIP2at_dxoA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 405
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.cuty.io/images/shared/favicon.ico
0 B URL GET cdn.cuty.io/images/shared/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/shared/favicon.ico HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 22:52:54 GMT
content-type: image/x-icon
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: W/"654d0525-3ed"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1024086
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F7E7YFqfsg6kQ5d11Tqd00fDUQs3T8JOkYK16pA69ODfWen5aPQGMffHA73LIMzvbbYVnYOHjZWVMEDm%2BiLFIjzl4whsC1phFOVls%2FSyfT%2BDZGZEcGKoCYLNuN%2Fb%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a1b9d1c56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.cuty.io/css/public.css?id=a66d1b3f490ee5b9c79bc9f7135b2531
200 OK 52 kB URL GET HTTP/2 cdn.cuty.io/css/public.css?id=a66d1b3f490ee5b9c79bc9f7135b2531
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type ASCII text, with very long lines (52522), with no line terminators
Hash 1605c4026c962dfb5b7e982b70f479fb
94213cd97f21b64d0a8c81c07366be62bf815e9e
6691be61fca3dfd5d7c7a7eeccfea9bd658aff11dd7bec10d20058d8b54f096e
GET /css/public.css?id=a66d1b3f490ee5b9c79bc9f7135b2531 HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: text/css
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=52548
etag: W/"63ac510a-cd44"
expires: Sat, 16 Nov 2024 14:02:09 GMT
last-modified: Wed, 28 Dec 2022 14:22:02 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 755924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tpfbFmUgVyWvijG1BG85A%2BmvnymJaTwn5IV1SGiKXcL8P%2FuI6xshM0RqhH1XkJuRdsdbMLbZQTHpYFG0CE3uBsPr9WYZFujELugyu1I2tBVOdvpyGs8WK3pQwK0A0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a122f4db523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap
200 OK 12 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 4b6c6bf4fb33e0c4af8b482aeaf24fc8
7e348d0362629426d401e6888220ec41fa60a0a5
a5a263756e794d5ad9a686025bb4174bd55dbbca9635748b247a8a527e89354c
GET /css2?family=Inter:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 06 Dec 2023 22:52:54 GMT
date: Wed, 06 Dec 2023 22:52:54 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/arrow-down.svg
200 OK 220 B URL GET HTTP/2 cdn.cuty.io/images/shared/arrow-down.svg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash c3e833f5fa7b1a4f2827058cdba8c3ab
09822f9d135ca26e8ddbbb5814b43da1f330906d
415fd6c9065ac04a741d6a02282eb772174831e47d035b8b1f3be240026f46a6
GET /images/shared/arrow-down.svg HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: W/"654d0525-dc"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1181616
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Izz2EDXSgL%2BROAcMTNmh8iR7AFNltWBbCl%2FyTm7nZxeEggLun3JFqQUFzGHK0JFVsco0kf3gC19YRWQ4R9gg4rqmqn6LSMRaIW1M%2FcBaGEkxQaHNk%2B2AxUmDu7Meyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f54b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/shared/burger.svg
200 OK 207 B URL GET HTTP/2 cdn.cuty.io/images/shared/burger.svg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 573aef439a6b96a62a233ed0341072d5
875bae0f4d6c067b8faccf9a58799e789e480997
f6226868923f3764988c58d88d5136f2ecf3fb899365c8f418a2b81da8413d82
GET /images/shared/burger.svg HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: W/"654d0525-cf"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1090080
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=90LB7Df%2BNFdxjabtv9sC%2Bt2gqP1fXN%2B377O%2BGhOTTEneSfs6xVdpZihwD9093kvUjZF3clN3Pubhea2%2BLJTPxxdcvQKuZaf5QykJX6LENEr5cEQGvcQqLJXEPzYOaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f59b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/js/layouts/base.js?id=0dbb3b1a5b8fdf23f6a11f8056879d42
200 OK 107 kB URL GET HTTP/2 cdn.cuty.io/js/layouts/base.js?id=0dbb3b1a5b8fdf23f6a11f8056879d42
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
Size 107 kB (106550 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/layouts/base.js?id=0dbb3b1a5b8fdf23f6a11f8056879d42 HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
etag: W/"654d0525-1a036"
expires: Sat, 16 Nov 2024 14:02:10 GMT
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 1191748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D9rUunHWh2CLKIPn8YKfp8cPb7bfxl%2FCjvFVC2JFDayPQ%2FK077C6g%2BICIUe5YE95VC9wBV7XwhsGSh8g2i%2Be4fyLt%2BLoNVoFhzXKQdL0YdWRWVwq%2B8xurlDIbPx6fA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a12885fb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 26 B IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d1c21bc7cd91dccd56cbdf115514a679
e4fbdd31effe5c8048794bc0611ccff8bde8e9dd
7fc2b85e7177b2452d230dfc05a826a95aa06abb7bab9157e7ffa3920476e46c
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exego.app/
Origin: https://exego.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:55 GMT
content-type: text/plain
set-cookie: csu=371848912263988@1@1701903175; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://exego.app
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zbq6TcG6Yo12Wsq1Czgx7C9rT6HRI4Esa2wW6Uk%2Bww2%2FVfXTo0zZ8nwqJVjltqhn9IHYp4oBNhIHnFHnkDRZN10k%2B92CIQBELdhPlPeLe1P2sjfiNHeiBpXqzMQWa%2B2h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a1caefc5282-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 27 B IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d437a49665af6eafb601421dc176b2d8
e3253ccbd6346e0cf4dd0f59e091d3016c1fb479
d5eed7a81e15378ef63966cce5bdb9701a20112faa8106567705cd0d5b2fdfe4
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exego.app/
Origin: https://exego.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:55 GMT
content-type: text/plain
set-cookie: csu=1227105972416462@1@1701903175; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://exego.app
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7yaXh5JyhDqBPm2Oyx6LhHksD2acBc8%2BZKQyHl5YhwKsYL3fNLczPzad8WQK1PzReKzd9qWBFJCk50a%2BfFpkFGajtjsIMcMstToTupfCLMevKOveS06fejEyEcs5Ki5K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a1caef95282-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nedandlooked.org/popunder.gif
200 OK 35 B URL GET HTTP/3 nedandlooked.org/popunder.gif
IP
Certificate IssuerLet's Encrypt
Subjectnedandlooked.org
Fingerprint01:61:4F:C9:AE:4C:BD:62:AB:64:7E:07:2C:36:5B:5A:9A:B1:57:B6
ValidityWed, 29 Nov 2023 06:02:23 GMT - Tue, 27 Feb 2024 06:02:22 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: nedandlooked.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Dec 2023 22:52:55 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 33990
last-modified: Wed, 06 Dec 2023 13:26:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OsG86itvW0TSv1%2FH1l4WdN3gIUU9EG%2FJJozibYMXIdLrsknjH5%2F8a2QespDKoj9xW00UgZEdOD7SoJ8jwjgb%2BHMiNhStdyjWUrIw69%2FRAalzDqheBxsnlRQQCMSvoN1kTT6z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a1c5fbab517-OSL
alt-svc: h3=":443"; ma=86400
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1aOlfLEdV2tZg1uHDOg0GR0a1Bq0PDBn9s5ucnyjfHZTGYQDoc7fI4xsR3vJmZfhiCaTqtPQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1174510175%3A1701903175305650&theme=glif
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1aOlfLEdV2tZg1uHDOg0GR0a1Bq0PDBn9s5ucnyjfHZTGYQDoc7fI4xsR3vJmZfhiCaTqtPQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1174510175%3A1701903175305650&theme=glif
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1aOlfLEdV2tZg1uHDOg0GR0a1Bq0PDBn9s5ucnyjfHZTGYQDoc7fI4xsR3vJmZfhiCaTqtPQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1174510175%3A1701903175305650&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exego.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 22:52:55 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-nZ1YxLCf4k0gPJBOzf8TkA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nedandlooked.org/SzhncFdkBwQDailtFyg0DlAGFhByfQJBL31iDDZiHHBSHAYTU0EEPi8FVkBmeglQRXE7UQNNZm1LExEjPktaQXEiVgEfam1OWkF5eAxJQ2NlCEEFanoeEwA2LAVWVic/TAtNZnwIVklneAlfQGJ9AA
204 No Content 0 B URL GET HTTP/2 nedandlooked.org/SzhncFdkBwQDailtFyg0DlAGFhByfQJBL31iDDZiHHBSHAYTU0EEPi8FVkBmeglQRXE7UQNNZm1LExEjPktaQXEiVgEfam1OWkF5eAxJQ2NlCEEFanoeEwA2LAVWVic/TAtNZnwIVklneAlfQGJ9AA
IP
Certificate IssuerLet's Encrypt
Subjectnedandlooked.org
Fingerprint01:61:4F:C9:AE:4C:BD:62:AB:64:7E:07:2C:36:5B:5A:9A:B1:57:B6
ValidityWed, 29 Nov 2023 06:02:23 GMT - Tue, 27 Feb 2024 06:02:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SzhncFdkBwQDailtFyg0DlAGFhByfQJBL31iDDZiHHBSHAYTU0EEPi8FVkBmeglQRXE7UQNNZm1LExEjPktaQXEiVgEfam1OWkF5eAxJQ2NlCEEFanoeEwA2LAVWVic/TAtNZnwIVklneAlfQGJ9AA HTTP/1.1
Host: nedandlooked.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 06 Dec 2023 22:52:54 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4gDClGfGy8wIJQZmT5eo71URM%2FNdcPs7nimsk%2FEG0hE2zwTOLRxMCgDPhBvRET0q07eGBQLtA0Wjgjp0mEkxi%2FD21Kf%2FEr%2FhmSCCXPl%2F8eqR%2BMJfQGB9Z7EsZRQVQRgZSZzu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a194d3fb4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0ZwsX-_-updebFxpAWTkK4mZKuHBh-c2DgET8Xi-_WttR0wjrXfeW420DTQN2EQXigonLB_g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S654320778%3A1701903175311946&theme=glif
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0ZwsX-_-updebFxpAWTkK4mZKuHBh-c2DgET8Xi-_WttR0wjrXfeW420DTQN2EQXigonLB_g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S654320778%3A1701903175311946&theme=glif
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp0ZwsX-_-updebFxpAWTkK4mZKuHBh-c2DgET8Xi-_WttR0wjrXfeW420DTQN2EQXigonLB_g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S654320778%3A1701903175311946&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exego.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 06 Dec 2023 22:52:55 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-zB9777TlnSPuc3n7eF9PrA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
302 Found 52 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectcutlink.net
Fingerprint2E:44:41:81:53:E4:BB:58:86:C6:1F:45:2C:3C:DD:C9:A0:49:91:A5
ValidityWed, 15 Nov 2023 12:07:15 GMT - Tue, 13 Feb 2024 12:07:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /Ba1cg/ HTTP/1.1
Host: cutlink.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 06 Dec 2023 22:52:52 GMT
content-type: text/html; charset=UTF-8
location: https://exego.app/Ba1cg
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6Ijk5WVc3Yldyd1RXVFBMakJ1T2pqaEE9PSIsInZhbHVlIjoiWlY3MDVLZHRwenlVcWdVbTZsZUROcXBXdmpKWEpUV0NENDBhU1dLWldFQUxybTNUdkxPZHNzKzhtRXQ1cWJWUThLZVV0LytBY3hPNld2eFU4WGNaK0VJZG5hVWJrNktSZTZxZHBKZEpXQm1HSmFHQnQ3Nmw1U0xvSG5YcjdtOWEiLCJtYWMiOiJkZjdjNzc0MTUwN2QwYzIwMzcxODA5OTUwYTRjMTFhZTJhMDM5NGM0MTNhZmYzM2M1NzUwZGUxMTMxMGNhZjI3IiwidGFnIjoiIn0%3D; expires=Wed, 13 Dec 2023 22:52:52 GMT; Max-Age=604800; path=/; samesite=lax
cutyio_session=eyJpdiI6InErMEhFeWlQcjgvY0RhNGhRSTh2VWc9PSIsInZhbHVlIjoiSE8rUTZIUHVMeHBhcER6a1RZRTBCbFZSN2ppWWp2N2s3OWhwWGU0RUczYWZWcFdodngxa2dHOERONjFXdy9vMFBaNE5jckVDdGdlZHpuazJLQVNSZVViQzYzWGwrWVVqUzRYdFE5ci9jdkEySURIU1FPZDFlb05MOTZ1TFZON04iLCJtYWMiOiIxYjQ1OGM3M2EzYzZmYmQ5NmE0YTg5NWU0ZDg0NTBlODE5Y2I1ZWUxYmY2ZTQ5M2U4M2ViZGUwZjg5OTJkNzJkIiwidGFnIjoiIn0%3D; expires=Wed, 13 Dec 2023 22:52:52 GMT; Max-Age=604800; path=/; httponly; samesite=lax
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4d7Z6YvhLdRtMGl2%2FY%2FtMiWUG2TH%2F6yRm4z60Xoqdj1z4iFqZ%2FgUgU7Tf%2FRm1FEyHknbuBzqpMLIjS0oFK2GhvyuSFGSibI2K80tAI5ut0Ub1mRFTwGmgFSgHAfR6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a0d1a59b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
200 OK 52 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectexego.app
FingerprintED:F2:4D:46:6E:4E:12:F6:97:FB:7D:2F:A6:78:EA:35:CA:4A:61:19
ValidityMon, 09 Oct 2023 20:50:41 GMT - Sun, 07 Jan 2024 20:50:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Ba1cg HTTP/1.1
Host: exego.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: must-revalidate, no-cache, no-store, private
pragma: no-cache
expires: -1
x-frame-options: SAMEORIGIN, SAMEORIGIN
set-cookie: XSRF-TOKEN=eyJpdiI6IjhOMjhRSlJNbnpaOFlrKzluVFJxRkE9PSIsInZhbHVlIjoiSkJRbTc1Z2RVazJMcWlYSzJKS29ORG1GMWlDTERaTWpOR0MyaFZnVkU1SjViQ1k2eW8rMUNiWmV3bzJ4RmlkSy9JSE92TGRpdEpzSnBNeEpXOXdJTDNKUlpzVXdRMXFLdFJvdm9XR0hkajJucHlVK0toenZ1bVJtbm1YZXdkcEkiLCJtYWMiOiI1YWVkZmI5Mjg1ZTVjM2ZmNzljNzJlMzMxZjU1M2RlOGE2YmNmYWJkYWMzZDBiNmE0NDYwZjc2YmY3ZThjY2U4IiwidGFnIjoiIn0%3D; expires=Wed, 13 Dec 2023 22:52:53 GMT; Max-Age=604800; path=/; samesite=lax
cutyio_session=eyJpdiI6IlZvclJyMkhJMjNtb3BoQm5CZEIwRmc9PSIsInZhbHVlIjoic1pRVjRseGdyRHZzaHorc3ZDSW1oMlNORmk3WndrZm9Nb1hKNGxkRXFxUFVhM3RydU9nMUYweUNuVkczb1pLbGRNelJ4bjBOVG1uK01aV0tjeE00blUrNEN4VG5WRFMwSVZkQTJJZkcxQkx2eGczSEpZekdsbGhqcUk3cUpEU3MiLCJtYWMiOiI4ZDdjYjE1NjY4N2NjZjQ1ZDU1MmE2YjY5M2E3ZGViMjk5NjhmNTAyY2ExNjhlOGZkYWUzZmFkNDllNTFjNTZhIiwidGFnIjoiIn0%3D; expires=Wed, 13 Dec 2023 22:52:53 GMT; Max-Age=604800; path=/; httponly; samesite=lax
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2pAvlF8JJ%2BMzdsAX%2F9Ptiunsr9qLwG6MHq%2FTQT%2F%2BKz1vwQAA6k9%2FxeA8DbkRNq7OO54%2FZ3RQ2DK1iV5jXwjIz191xlYCMOF1iI9N15Q0tplRf1WdVwu4nJbeAgc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a0e6b3bb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/images/public/step-1.svg
200 OK 1.6 kB URL GET HTTP/2 cdn.cuty.io/images/public/step-1.svg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1711), with no line terminators
Hash ee427377dbfff15e6da345e1991a0b1f
6d47dd305204a822000b23dc24a934c3643c46e3
60e47d750e85000feef914fbacc57176578fceb08438ec21587a52c4b7de06f6
GET /images/public/step-1.svg HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: image/svg+xml
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
etag: W/"654d0525-658"
expires: Sat, 16 Nov 2024 14:02:10 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1024083
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8gvBmR9i8JqcYxjwSh99a5%2BNZoNqS3X9ZvGK8TG6Ajmxo%2F%2BpI7R4u6VMGAsKTzKLKBtg1QuOix4N4zdIe0Ft1V%2Faj6ThHyUgUCD6sHwmvCyMg2qbUzsOlSqotEkw3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83181a122f60b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cuty.io/js/public/links/first.js?id=0c8c578a52a38d07be1e2e04379b2785
200 OK 24 kB URL GET HTTP/2 cdn.cuty.io/js/public/links/first.js?id=0c8c578a52a38d07be1e2e04379b2785
IP
Certificate IssuerGoogle Trust Services LLC
Subjectcuty.io
Fingerprint40:A3:F8:9F:35:43:81:F1:60:4E:FF:B3:BA:28:B4:48:C3:7F:6F:99
ValiditySat, 25 Nov 2023 23:29:09 GMT - Fri, 23 Feb 2024 23:29:08 GMT
File type ASCII text, with very long lines (23978), with no line terminators
Hash a4e238f8d6d78239d202a16b47907651
79fd69c1dac65454a2fe82aa717fdc04bc11b539
2b26468b48c30a73409f9260de0b72daf7beebae3f77e371bbe583c3f08c892b
GET /js/public/links/first.js?id=0c8c578a52a38d07be1e2e04379b2785 HTTP/1.1
Host: cdn.cuty.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exego.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 22:52:53 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=23979
etag: W/"654d0525-5dab"
expires: Sat, 16 Nov 2024 14:02:10 GMT
last-modified: Thu, 09 Nov 2023 16:13:25 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 189698
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J35gZLiBcygzKD9iXnJUC6gUqHC04nPNBcmbEaVzOp7Xpz0y6LAufGbvOpIigySNEgNito6n6%2B3Fn2O41ugHQbDVIlnUmr%2F1RtLTx4BL4ma8hgdcev1kPjgBnZtV2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83181a122f4eb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.45.161
142.250.74.99
23.109.248.169
188.114.97.1
0.0.0.0