www.ontapcu.org/
301 Moved Permanently 162 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET / HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 20 Feb 2023 18:33:26 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.ontapcu.org/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 13d4983fb8a0ee2cb855663cc9d8f6a0
1f85fc46435f86d7f414e310670c9afe27ea9532
f4bc8150273c4fc6e90c9df8e074823a78dc8409bfcc00616265e24d7d663498
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4BC8150273C4FC6E90C9DF8E074823A78DC8409BFCC00616265E24D7D663498"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3768
Expires: Mon, 20 Feb 2023 19:36:14 GMT
Date: Mon, 20 Feb 2023 18:33:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 97d7dde89cca188d19690d7bf759d034
7ec36525c8b5e8e278f0c5f26da3316687d89041
f8b500f9b1e8188807aab20f8e2540b5b2e888b13ff5f6f6211bbc28056f23e8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F8B500F9B1E8188807AAB20F8E2540B5B2E888B13FF5F6F6211BBC28056F23E8"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7432
Expires: Mon, 20 Feb 2023 20:37:18 GMT
Date: Mon, 20 Feb 2023 18:33:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3c926acb3daeb63b5374bdc352bbb679
167a2af5a3c8d1ec6d16c8f7ef1e063ce14ed481
e0bbf50d7d572d0b16ba4be51b190c4776777ecb572db9b25574b66d8e56ce36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0BBF50D7D572D0B16BA4BE51B190C4776777ECB572DB9B25574B66D8E56CE36"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19794
Expires: Tue, 21 Feb 2023 00:03:20 GMT
Date: Mon, 20 Feb 2023 18:33:26 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Content-Length, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 20 Feb 2023 17:53:35 GMT
content-type: application/json
age: 2391
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: U8hbwJ/vEyqslq1NeGzYJi+2X3pT0nCrrpfqnqz3PEu/GjbMOaaz8AB2gaP6eTgUf0RaIANnsII=
x-amz-request-id: A04PFFT3CPATZQ8E
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 20 Feb 2023 18:22:25 GMT
age: 661
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:26 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 284f0c75dd56899165ae60fc8437aada
7df5f92b4b1ab66cf002b17e60b6c8a9bae05a4f
6d4412b40b77b49a6b934f622d5e104a8326a33f2b8e85c10da2199293ed898b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6470
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:26 GMT
Last-Modified: Mon, 20 Feb 2023 16:45:37 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 91d695e75f3897871d2a3bbaadfc78fe
1397b1a2c3ab14521ef2b8165e9ff07c7a976368
d981dc12c1e1b6adbdd364a62795d8191b84bdb7b8d1db67c3a1004cd1b2a7f4
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:26 GMT
Etag: "63f26554-1d7"
Server: ECS (amb/6B94)
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Content-Length, Content-Type, Cache-Control, Pragma, Retry-After, ETag, Expires, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 20 Feb 2023 18:20:34 GMT
age: 773
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea9630f88377d01e5cebab9de9c3b89
18c6603c6e63b79d45031e960dddd31b227f0de5
853e5bb59efe99054d86bbacf7c2f1f2483ad9c05d35cc9d8ea5dd9909cb38fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853E5BB59EFE99054D86BBACF7C2F1F2483AD9C05D35CC9D8EA5DD9909CB38FB"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17242
Expires: Mon, 20 Feb 2023 23:20:49 GMT
Date: Mon, 20 Feb 2023 18:33:27 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gAQqjEiXcQMcjA2G9CDDRw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aTBZzhLWxdgwrL5H/LqdAzbRcGQ=
www.ontapcu.org/
200 OK 15 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3477)
Hash 170df0af1fea0f4cb5324a929ecc9d57
c7dcc4364db5307a87af2a3a8d58bf8f66616793
48a5fb9cb256ec5db29da9db7d7038d49702e50c5f6e88a554797eb3ec5745d4
GET / HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: text/html; charset=utf-8
content-length: 15141
vary: Accept-Encoding
expires: Mon, 20 Feb 2023 18:33:27 GMT
set-cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; Max-Age=32400; Expires=Tue, 21 Feb 2023 03:33:27 GMT; Path=/; Secure; HTTPOnly
__bkp=10eab9d0-b14d-11ed-99f3-024237f64542; Max-Age=2147483647; Expires=Sat, 10 Mar 2091 21:47:34 GMT; Path=/; Domain=www.ontapcu.org; Secure
cache-control: public, max-age=0
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-xss-protection: 1; mode=block
x-ad-insert-result: success - index
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 253
x-varnish-ttl: 0.000
x-varnish: 177914971
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 0637d64fb3eb5d7c
x-request-id: 8d6a0361-b3dd-400e-b622-d6d046b8a356
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 4b0c44879e2babfc75e73f68bc131b1f
0f138d061bc24f5aac57b4efd7427d091d3c02f8
f9222385e0a587de5193b05eb820a6542f0077fdff98db4294189b54b091f9d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2802
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:27 GMT
Last-Modified: Mon, 20 Feb 2023 17:46:45 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
www.ontapcu.org/assets/css/main.min.css?v=1675952903430
200 OK 32 kB URL HTTP/2 www.ontapcu.org/assets/css/main.min.css?v=1675952903430
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8f90b60430436880a0657c0bea7c64cb
a76d2a1022fdaf8c603a15d72f1dcdd656dffece
796c86eadb51fa0c44d034c1641765ed312c8d9f72992def6bed69d4178d82b5
GET /assets/css/main.min.css?v=1675952903430 HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: text/css
content-length: 31871
etag: "c4f9407c508ba7d50ab833568c90b9ba"
vary: Accept-Encoding
expires: Fri, 17 Feb 2023 19:28:07 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-xss-protection: 1; mode=block
content-disposition: filename="main.min.css"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 177914976 95242301
age: 255920
x-varnish-hitmiss: HIT
x-varnish-count: 2170
via: varnish
accept-ranges: bytes
x-b3-traceid: 95db26f08aa49fc9
x-request-id: 3c6adce5-eabd-47a4-bc5f-04a1c239c1cf
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 1991e7222ee2f2d5c9c783492dc7295a
9d1d3268a86ad6e60fa3320bb37e8620f944b0da
46eeafe0461fdc7fb1f85c252eae56ae80124878d87295499011454406bc7ca5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1145
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:27 GMT
Last-Modified: Mon, 20 Feb 2023 18:14:22 GMT
Server: ECS (amb/6B99)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 727 B IP
Hash 1991e7222ee2f2d5c9c783492dc7295a
9d1d3268a86ad6e60fa3320bb37e8620f944b0da
46eeafe0461fdc7fb1f85c252eae56ae80124878d87295499011454406bc7ca5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=111791
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:27 GMT
Etag: "63f2cea6-2d7"
Expires: Wed, 22 Feb 2023 01:36:38 GMT
Last-Modified: Mon, 20 Feb 2023 01:36:38 GMT
Server: nginx
Content-Length: 727
use.typekit.net/fyx7muv.js
200 OK 6.8 kB URL HTTP/2 use.typekit.net/fyx7muv.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (2258)
Hash bd28f7f9fb4c8739e54ad79f7549ecb7
b8f0738fbf435ff94c5db0d85321a90998249d17
5e3315fd18c7b4af9e72311123f3e6d9311aa7927cbc5113536563b4a827c18b
GET /fyx7muv.js HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6781
date: Mon, 20 Feb 2023 18:33:28 GMT
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/header-brick-background.png
200 OK 315 kB URL HTTP/2 www.ontapcu.org/assets/img/header-brick-background.png
IP
File type PNG image data, 1330 x 147, 8-bit/color RGBA, non-interlaced\012- data
Size 315 kB (314615 bytes)
Hash c444e704144f6a7ca6ba745cdb002b27
2e5ef8a3b48991739ba751cdb87030172b71b386
754c5f93b2362d9d5ed03f03a9c557b6465f84b433518087f1bca56cb4147574
GET /assets/img/header-brick-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
content-length: 314615
etag: "7a8b087196a6bda6d317919a1a8aac3a"
expires: Fri, 17 Feb 2023 19:27:54 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="header-brick-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 162327094 95861889
age: 255934
x-varnish-hitmiss: HIT
x-varnish-count: 2736
via: varnish
accept-ranges: bytes
x-b3-traceid: 691d3f503bb3d780
x-request-id: a69fcd09-2da7-4d25-b056-7c6fc5c44ad8
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/on-tap-credit-union-logo.png
200 OK 21 kB URL HTTP/2 www.ontapcu.org/assets/img/on-tap-credit-union-logo.png
IP
File type PNG image data, 142 x 110, 8-bit/color RGBA, non-interlaced\012- data
Hash 790b10f3ed1b4f861b7e0f9e4dbd4354
add7d0868a0b2e75b2ecf5b1917cc02d45c633a3
57ac7672db0e4eaf5ede16c76a46e4f427081c86a2db2370e177b3df1fa23a9a
GET /assets/img/on-tap-credit-union-logo.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
content-length: 20910
etag: "a622321c434b9c889d64720f078a4073"
expires: Fri, 17 Feb 2023 19:27:53 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="on-tap-credit-union-logo.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 162648124 90062384
age: 255934
x-varnish-hitmiss: HIT
x-varnish-count: 2718
via: varnish
accept-ranges: bytes
x-b3-traceid: bdf5f6e77c146f19
x-request-id: d16be560-773e-440c-8eae-d1833b9ba10e
X-Firefox-Spdy: h2
www.ontapcu.org/assets/content/ykXlK8gL/221068_Q1%20Debt_Newsletter2FNL.jpg
200 OK 45 kB URL HTTP/2 www.ontapcu.org/assets/content/ykXlK8gL/221068_Q1%20Debt_Newsletter2FNL.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 602cb08af7e9f38c4a6ab20e7ea5a9d8
dc456a2c1efc62b407e65eb551c8265739e8c538
280c89fa4b8e6212e7ffcc435a24fca685fbf6cf4377757dd3e12edec8a20b73
GET /assets/content/ykXlK8gL/221068_Q1%20Debt_Newsletter2FNL.jpg HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/jpeg
content-length: 45276
etag: "afdb65aa0ff05a88a9a06817674fead9"
expires: Sat, 17 Feb 2024 19:39:05 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 30 Dec 2022 23:10:44 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="221068_Q1 Debt_Newsletter2FNL.jpg"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 162973975 95374282
age: 255272
x-varnish-hitmiss: HIT
x-varnish-count: 790
via: varnish
accept-ranges: bytes
x-b3-traceid: ae89c8e4daff2ea4
x-request-id: 4efeea07-a89a-4d3a-9c17-1eab929b2cf9
X-Firefox-Spdy: h2
www.ontapcu.org/assets/content/cVQmZUns/Home%20Loan%20Assistance.jpg
200 OK 17 kB URL HTTP/2 www.ontapcu.org/assets/content/cVQmZUns/Home%20Loan%20Assistance.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 281x250, components 3\012- data
Hash aebd8aaf5bfce44ff1d5895ab43f973f
4d322774e01912eb389f17ad791df1467c26c06c
d5e7792f8dc9e173d595014de8fc4af5d4f102c87b133eadb28d5a08f1e87ed4
GET /assets/content/cVQmZUns/Home%20Loan%20Assistance.jpg HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/jpeg
content-length: 17181
etag: "ce142b6b3546bdeae077238c53d64b4f"
expires: Sat, 17 Feb 2024 19:28:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Jun 2022 16:39:30 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Home Loan Assistance.jpg"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 167072541 97099751
age: 255889
x-varnish-hitmiss: HIT
x-varnish-count: 794
via: varnish
accept-ranges: bytes
x-b3-traceid: 41b87946024b28dd
x-request-id: 3570edc7-9b06-49c0-a6de-560c02cf1ce5
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/even-brick-background.png
200 OK 208 kB URL HTTP/2 www.ontapcu.org/assets/img/even-brick-background.png
IP
File type PNG image data, 1330 x 81, 8-bit/color RGB, non-interlaced\012- data
Size 208 kB (207947 bytes)
Hash 82cbd60b33907e483e8d4744ed2e907f
21a4c676568ffdc9295168e2b90d6cd910b6b34d
45f64ee9216cf10993aacc0570dc4905bb537d549b6f5167dc2b306d0aa7b6cc
GET /assets/img/even-brick-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
content-length: 207947
etag: "34e18d98602309e3782311f34ed6f7ba"
expires: Fri, 17 Feb 2023 19:30:34 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="even-brick-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 159570181 95791933
age: 255772
x-varnish-hitmiss: HIT
x-varnish-count: 2384
via: varnish
accept-ranges: bytes
x-b3-traceid: 9ff582a203518306
x-request-id: 747df78b-8d68-4cff-9ea4-80c9708621f1
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/roadmap-image-hover.png
200 OK 9.4 kB URL HTTP/2 www.ontapcu.org/assets/img/roadmap-image-hover.png
IP
File type PNG image data, 245 x 207, 8-bit colormap, non-interlaced\012- data
Hash 98a65df2adc38506cd8793f1f4457a8c
b13a59eb5d64e4ed2ffd2de792ac87eb2a9ebe76
8cdcd125e182f6d21f67fdd161d5cfffad0658370a687e26d79ccd7ca010037c
GET /assets/img/roadmap-image-hover.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
content-length: 9439
etag: "e53b648d8d519b0c5527b13f33eb6253"
expires: Fri, 17 Feb 2023 19:27:53 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:17 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="roadmap-image-hover.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 165697708 93217487
age: 255934
x-varnish-hitmiss: HIT
x-varnish-count: 2148
via: varnish
accept-ranges: bytes
x-b3-traceid: 1749a8492b34c40d
x-request-id: 07d6948d-001f-4484-8fc1-dbc0a5bccb21
X-Firefox-Spdy: h2
banno.com/a/monitor/api/badge/badge.min.js
200 OK 10 kB URL HTTP/2 banno.com/a/monitor/api/badge/badge.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (2197)
Hash db965d9de1eed18269c7afbc7e725d42
0a207819d5667e7215499d5e3dbe5edd8705179f
bc32c471e91af9ffa4f60a5c768d479cfea86a22c42a3bf401fa516ce011b99b
GET /a/monitor/api/badge/badge.min.js HTTP/1.1
Host: banno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: application/javascript; charset=UTF-8
content-length: 10514
last-modified: Tue, 24 Jan 2023 15:01:10 GMT
etag: "60940185e44c16f0"
accept-ranges: bytes
strict-transport-security: max-age=15724800
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 652e0fa59c5baeae693cb48f05a866fa
7336989ad39144fcdee7397f40dcd4697134c1e5
6b7bb317df6b5abdb2803d133e63ee8b1383d30c6403eb8650e013255c6f0227
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6e5d93e6ff78ff0040d571937410c78
ec1b36fe7fb5f6cc3b41d50bcddc3199dbac8969
f14addd83ab95ac7ad8b7340db9c82f4bc03f5fa9781ec9923485f17dbb101ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6e5d93e6ff78ff0040d571937410c78
ec1b36fe7fb5f6cc3b41d50bcddc3199dbac8969
f14addd83ab95ac7ad8b7340db9c82f4bc03f5fa9781ec9923485f17dbb101ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6e5d93e6ff78ff0040d571937410c78
ec1b36fe7fb5f6cc3b41d50bcddc3199dbac8969
f14addd83ab95ac7ad8b7340db9c82f4bc03f5fa9781ec9923485f17dbb101ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-PNSKRD4
200 OK 55 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PNSKRD4
IP
File type ASCII text, with very long lines (16066)
Hash ec172ed9988243c5709c121134728fc4
375c7f16041d9b36b448970e4cb99d9cdd535d04
2efe05c7106a227e731b926e1e9268f2abf58545448f976e50b565dbc8281ce7
GET /gtm.js?id=GTM-PNSKRD4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 20 Feb 2023 18:33:28 GMT
expires: Mon, 20 Feb 2023 18:33:28 GMT
cache-control: private, max-age=900
last-modified: Mon, 20 Feb 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 54798
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NP9T57L
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NP9T57L
IP
File type ASCII text, with very long lines (3943)
Hash b2e64f4a7b52724411d3834a0fb2a066
6ab1c647f58c0eeca041f88760c918a4805e005b
d63a2a9045570abef6c40ef06e7449b131b4604f2a7d87b9165b05dd37ec6d66
GET /gtm.js?id=GTM-NP9T57L HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 20 Feb 2023 18:33:28 GMT
expires: Mon, 20 Feb 2023 18:33:28 GMT
cache-control: private, max-age=900
last-modified: Mon, 20 Feb 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44464
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
use.typekit.net/af/ac21da/00000000000000003b9adc6c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3
200 OK 30 kB URL HTTP/2 use.typekit.net/af/ac21da/00000000000000003b9adc6c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 29688, version 1.0\012- data
Hash 332b97690f9ae7c78dd74da04917708d
ea6fc865fe41b1c609e30f333c7aba1201313dcc
5c854d9d15e8deebaf7d5ed544c6397fb3abcd177d9e05aed9f32ee160059307
GET /af/ac21da/00000000000000003b9adc6c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ontapcu.org
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 29688
etag: "d1a7c441eb0c3ccba5c96f623399e766e52aeeb1"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 20 Feb 2023 18:33:28 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/ec133b/00000000000000003b9afa2a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
200 OK 9.5 kB URL HTTP/2 use.typekit.net/af/ec133b/00000000000000003b9afa2a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 9480, version 1.0\012- data
Hash 940b1c1dc8603da1985676352956387a
9e3274354aa8414429a2bade6db8cae511ca8e85
4f80ad95f15c45adae1e68fb2aae575ce629cf47d2c931482e72c676c5575478
GET /af/ec133b/00000000000000003b9afa2a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ontapcu.org
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 9480
etag: "ecdafc0675b9c62b431359733324d09f263be985"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 20 Feb 2023 18:33:28 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/85d455/00000000000000003b9adc6a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
200 OK 31 kB URL HTTP/2 use.typekit.net/af/85d455/00000000000000003b9adc6a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 30656, version 1.0\012- data
Hash 09848390b847375a8dbf4a3808750013
d8b5db5923705fba6073a52d2145d086c5030527
ead661c1cd323f4f9a023be4cea810a9bcbc3498871593a256fc9221a52f1417
GET /af/85d455/00000000000000003b9adc6a/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ontapcu.org
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 30656
etag: "374d4e049d59d33f7c1b988631b115ad96597d60"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 20 Feb 2023 18:33:28 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/8de6d2/00000000000000003b9adc6b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 29 kB URL HTTP/2 use.typekit.net/af/8de6d2/00000000000000003b9adc6b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 29392, version 1.0\012- data
Hash ea9b57a664fddcc8ca4ac7057ed8b53b
4cfa452e318ab308c8009ad1257fed42e46ba093
360e1a5c62337c585e8f8b9ba82cd440d4540c444e905665452b93fe785c082b
GET /af/8de6d2/00000000000000003b9adc6b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ontapcu.org
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 29392
etag: "2bd51188b101f4cf29ce1d8dfdbe91d00fc07ba6"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 20 Feb 2023 18:33:28 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 407d753a19cf29f7e27cbabf2541ca22
fe7158003086e2aeef7a0260d3d3ec1146c75279
01c56979cebd97e7d0f83354f75f2772a502d6e41d1e49852d37bb997b23afd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32c273f03591a760d39799b2aca7927e
5236e80503b30600573e40c674c577c06185a83f
d8e8f0daef07cc746bc65813819ed5cd30367e5cd145d00bb305757b9b4a8bd2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/11e3a4ec/www-player.css
200 OK 52 kB URL HTTP/2 www.youtube.com/s/player/11e3a4ec/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 427e942e4668e847aae3f634667cc98f
424cb353e4306fd81e30343d8d5be6b9b63337a1
611f28d391e34eaec93f72d7c2a4ef926d558691e30b3325da499e86bdd807a8
GET /s/player/11e3a4ec/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/7TclfoUl4zs?rel=0&showinfo=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 52107
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 19 Feb 2023 23:01:39 GMT
expires: Mon, 19 Feb 2024 23:01:39 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 16 Feb 2023 01:14:03 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 70309
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/11e3a4ec/www-embed-player.vflset/www-embed-player.js
200 OK 110 kB URL HTTP/2 www.youtube.com/s/player/11e3a4ec/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (679)
Size 110 kB (110359 bytes)
Hash d2b9c4c4b473c52e36ac4435714bf4f0
6d918ce5e461fe98128c3e1267d41ce8c8fb758a
b0acf230bda9df63ed18bfcbe5fba6d26b99b4dca6bb71cddfb24076695b037f
GET /s/player/11e3a4ec/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/7TclfoUl4zs?rel=0&showinfo=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 110359
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Feb 2023 15:45:34 GMT
expires: Fri, 16 Feb 2024 15:45:34 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 16 Feb 2023 01:14:03 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 355674
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/11e3a4ec/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/11e3a4ec/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/11e3a4ec/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/7TclfoUl4zs?rel=0&showinfo=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Feb 2023 15:45:34 GMT
expires: Fri, 16 Feb 2024 15:45:34 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 16 Feb 2023 01:14:03 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 355674
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
p.typekit.net/p.gif?s=1&k=fyx7muv&ht=tk&h=www.ontapcu.org&f=15531.28577.28578.28579&a=11211739&js=1.21.0&app=typekit&e=js&_=1676918008392
200 OK 35 B URL HTTP/2 p.typekit.net/p.gif?s=1&k=fyx7muv&ht=tk&h=www.ontapcu.org&f=15531.28577.28578.28579&a=11211739&js=1.21.0&app=typekit&e=js&_=1676918008392
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 81144d75b3e69e9aa2fa3e9d83a64d03
f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
GET /p.gif?s=1&k=fyx7muv&ht=tk&h=www.ontapcu.org&f=15531.28577.28578.28579&a=11211739&js=1.21.0&app=typekit&e=js&_=1676918008392 HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: image/gif
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
date: Mon, 20 Feb 2023 18:33:28 GMT
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 3aae5c7561e67ae4d4d7f79326c7bcd7
91aa82308b0d08736242b39dfd958c20bf4afef5
68bbc9013b60a965c056490083c7f77f8c5458893cbbd49208e629a7efd60104
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 20 Feb 2023 15:58:06 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TWG-fC6T_TjyyngKS3GlS4HafqAxSs3DpEBjKo5DGe8Yhtodw1NCyQ==
Age: 9323
www.ontapcu.org/assets/js/jquery.smartbanner.min.js
200 OK 3.0 kB URL HTTP/2 www.ontapcu.org/assets/js/jquery.smartbanner.min.js
IP
File type ASCII text, with very long lines (9785), with no line terminators
Hash 528c3589543c47bc72a658313c6e959f
2b3e9dda5a3fa4a9cb7249eb8d71c20ba6b61d78
9e6faaef5ab7add5df3e7d982bf1e9b9bf9cdb196541f17c5d908e44b7665492
GET /assets/js/jquery.smartbanner.min.js HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: application/javascript
content-length: 2972
etag: "95b761a90459ccba2dc6950d4da3198b"
vary: Accept-Encoding
expires: Fri, 17 Feb 2023 19:28:21 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-xss-protection: 1; mode=block
content-disposition: filename="jquery.smartbanner.min.js"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 149047306 95930198
age: 255906
x-varnish-hitmiss: HIT
x-varnish-count: 2194
via: varnish
accept-ranges: bytes
x-b3-traceid: dc891fdd0dd814a2
x-request-id: 5bfa6135-b017-48bd-a61b-f3f31ae7383d
X-Firefox-Spdy: h2
www.ontapcu.org/assets/target/disclaimers.js?bh=29674c
200 OK 1.4 kB URL HTTP/2 www.ontapcu.org/assets/target/disclaimers.js?bh=29674c
IP
File type ASCII text, with very long lines (3249), with no line terminators
Hash 904cea08f35f50cd8dbd80e95ef10ea6
2d1f44fce85b3e8c9276b5dbe038ec49eec93ce8
c404ab2643863117a05042604348346ebb797ef78f921ebbd497ed37392b688b
GET /assets/target/disclaimers.js?bh=29674c HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 1400
etag: "f676cadf6065adb43b165dbce973e204"
vary: Accept-Encoding
expires: Sat, 19 Aug 2023 16:42:29 GMT
cache-control: public, max-age=15552000
last-modified: Thu, 16 Feb 2023 15:56:48 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 152527213 163414044
age: 6440
x-varnish-hitmiss: HIT
x-varnish-count: 270
via: varnish
accept-ranges: bytes
x-b3-traceid: a15f64eeb350ad88
x-request-id: b8ca20f6-0b4c-43c9-870c-145f5db4e6ce
X-Firefox-Spdy: h2
www.ontapcu.org/assets/content/zii4JkHO/leslie-video-thumb.jpg
200 OK 18 kB URL HTTP/2 www.ontapcu.org/assets/content/zii4JkHO/leslie-video-thumb.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 360x200, components 3\012- data
Hash 8f780b98fe55b99d49ba5a3938ed1305
ce740b55e1afd8b5d48ebbcd3ce2f328fb3da6d8
918449331ad4f5e016fa7a9ab9470f3854e73a6fc61238d6c5a914e54edf5161
GET /assets/content/zii4JkHO/leslie-video-thumb.jpg HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/jpeg
content-length: 17475
etag: "3b4d71229180c81af66df618b0196a62"
expires: Sat, 17 Feb 2024 19:39:25 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 May 2018 14:53:37 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="leslie-video-thumb.jpg"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 1
x-varnish-ttl: 259200.000
x-varnish: 151930760 95953364
age: 255242
x-varnish-hitmiss: HIT
x-varnish-count: 796
via: varnish
accept-ranges: bytes
x-b3-traceid: e9e2427610ab974e
x-request-id: 06cb8e8c-a91a-4f71-8407-81473ab01a93
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/ncua.svg
200 OK 3.2 kB URL HTTP/2 www.ontapcu.org/assets/img/ncua.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (19396), with no line terminators
Hash 3eb87948c42c23a36bcc878e8a040710
72ca525063bef2bc67284a2a9d84852adbb6af00
193f62e33ef1e299aec5ec7276e366cd20476f4418ea0fe019edd4845838a393
GET /assets/img/ncua.svg HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/svg+xml
content-length: 3202
etag: "5a4f7857e359b0d84311f038ad6d46ed"
vary: Accept-Encoding
expires: Fri, 17 Feb 2023 19:30:34 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-xss-protection: 1; mode=block
content-disposition: filename="ncua.svg"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 165140115 96900753
age: 255772
x-varnish-hitmiss: HIT
x-varnish-count: 2702
via: varnish
accept-ranges: bytes
x-b3-traceid: bc9957c9a008e9a6
x-request-id: 1de0f228-dfad-416e-92d1-077db84124c2
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17440
Expires: Mon, 20 Feb 2023 23:24:08 GMT
Date: Mon, 20 Feb 2023 18:33:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17440
Expires: Mon, 20 Feb 2023 23:24:08 GMT
Date: Mon, 20 Feb 2023 18:33:28 GMT
Connection: keep-alive
www.googletagmanager.com/gtm.js?id=GTM-T7D7GWT
200 OK 503 B URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-T7D7GWT
IP
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
GET /gtm.js?id=GTM-T7D7GWT HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 20 Feb 2023 18:33:28 GMT
expires: Mon, 20 Feb 2023 18:33:28 GMT
cache-control: private, max-age=900
last-modified: Mon, 20 Feb 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65606
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17440
Expires: Mon, 20 Feb 2023 23:24:08 GMT
Date: Mon, 20 Feb 2023 18:33:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17440
Expires: Mon, 20 Feb 2023 23:24:08 GMT
Date: Mon, 20 Feb 2023 18:33:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F281f72a4-d131-4cfa-9879-5c633718946e.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F281f72a4-d131-4cfa-9879-5c633718946e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 90690775d6d052b92a783fd123b9751e
f330787567c092887acb1ee9cdab1de0fdbec228
73069b0c7bfbded0f2d5435d11e458a3c7df43df45e45fc4f99e7c22de4efbfa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F281f72a4-d131-4cfa-9879-5c633718946e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9448
x-amzn-requestid: ba281ab3-5bfb-42d1-ae15-f990472cffdb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmyNjGwNoAMF5hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f29723-109d347078fe868b601d103f;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:39:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CNqEnA-9oerExJj_grZu6ZWxVNCQgbe6AR4s3AcoFnx9QxEwR8szBQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 22:18:30 GMT
age: 72898
etag: "f330787567c092887acb1ee9cdab1de0fdbec228"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9c5a0bab7d34e51ee6476be179b356ba
87917d3cf520d73b7b1029f44505e7700413d51d
136e727a99409218318247b645558fad485ed84bcd90bd43a5895492cb317d89
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6879
x-amzn-requestid: 18c46562-f8d9-4f7f-8ea0-1bb46e206f80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ANnahEWgIAMFwYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e885dc-50a7cfe4693b4efb038ce1a7;Sampled=0
x-amzn-remapped-date: Sun, 12 Feb 2023 06:23:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwK1XWOYMXy8qna9sVCV7q__QKMko9KXa8towbYhIj1EolPbqEuIHQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Feb 2023 15:01:26 GMT
age: 12722
etag: "87917d3cf520d73b7b1029f44505e7700413d51d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8235bcbe-72cd-4831-9c09-c4cdb13fd846.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8235bcbe-72cd-4831-9c09-c4cdb13fd846.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fa711ffb6b7af7f4c99a4fc552ff270a
a784b1bfb1aac498464e33afc8a5601775a3bfde
89d1660aabab759eda10a4a255af2d28f8b286a63fe53dc7b30631fa09986e46
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8235bcbe-72cd-4831-9c09-c4cdb13fd846.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8875
x-amzn-requestid: 95c9949f-accb-42ee-8395-6616fc311508
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxdrEs5oAMFwqw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f295f0-357c5c3e23d3a2a3524013e6;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:34:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XehgCHE4qX1A3D1mBNv805_Soe_KxOH9Uqftq9b-HYrl-hkJ4_hRfQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 22:03:56 GMT
etag: "a784b1bfb1aac498464e33afc8a5601775a3bfde"
content-type: image/jpeg
age: 73772
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F272e1475-5bb2-4e05-a554-ff035f0a3e88.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F272e1475-5bb2-4e05-a554-ff035f0a3e88.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 79a00f0894dff828f176f7c4ff73aea4
27c1e1c37ae87e4f7afc8d236248ceb3213a8919
5087bfce27855e0e9ca5fcc8117a826b4e6ea1e356a94220fbd4183dfea8f864
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F272e1475-5bb2-4e05-a554-ff035f0a3e88.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7108
x-amzn-requestid: 79b493a4-70b6-4b77-ab99-a3c9a8010c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxcdGZHIAMFm-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f295e9-1082279b4cf3c1b210364868;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:34:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AXTp2XFwFqIVMbB3Fo1hSl_xaGO31PWwvYUhD5cnRuDvtKM6VwDstw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:41:25 GMT
etag: "27c1e1c37ae87e4f7afc8d236248ceb3213a8919"
content-type: image/jpeg
age: 75123
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb02e00ed-8b65-4e64-ae13-5e9680255939.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb02e00ed-8b65-4e64-ae13-5e9680255939.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0339a3229fb01cf8dbaf91de6b7e6f8
33f779cf037dbb8739630f9fb3ffc825678633bf
e9aa58bd52abfc440d1817a86176887835cb920261fda1e9d5205645e30e2f4a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb02e00ed-8b65-4e64-ae13-5e9680255939.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5985
x-amzn-requestid: 972f1e7b-eeec-41ab-aa97-7e23b2456746
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmypVFybIAMFsnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f297d5-1a9dbd562ec347113f4d6527;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:42:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: adi-QiiQQ7LnWyycpiA7UayOMyH4F4W_q1qAzt_XIaDIEZDDvjh_XQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:56:47 GMT
age: 74201
etag: "33f779cf037dbb8739630f9fb3ffc825678633bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac021e56-1cda-4705-942f-fd658890b5e1.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac021e56-1cda-4705-942f-fd658890b5e1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1fb795dc1da607d7abd375588fd5b870
2d2ac3b1203a7256bd9f425ec32e569f262547dd
ed323b2ee3701a082f9016d13c6fb34d7df2a208407d4d10d0d70cdeddac14e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac021e56-1cda-4705-942f-fd658890b5e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7153
x-amzn-requestid: e923bb08-b66c-4a50-a40e-f77d3afdd11c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxiPHJtoAMFofA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f2960e-2f12021e701506482d3d08d7;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gMWvjEN4BqskX30D30eQj_CF5p6siHb13JO7QpE8YPt6YsaMy9jlNg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:41:25 GMT
etag: "2d2ac3b1203a7256bd9f425ec32e569f262547dd"
content-type: image/jpeg
age: 75123
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/curved-beam-background.png
200 OK 372 kB URL HTTP/2 www.ontapcu.org/assets/img/curved-beam-background.png
IP
File type PNG image data, 1330 x 310, 8-bit/color RGBA, non-interlaced\012- data
Size 372 kB (372046 bytes)
Hash 8b3d6f52baec9767aea9587b75d2a36b
b303c9b8593225503b5b0aba59e6caa931f412ff
4e9f1093f0df8471ee2c2d1039e2a84c33f30107624266d078e64ff62ef761b1
GET /assets/img/curved-beam-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
content-length: 372046
etag: "1d550c04128d83158292c5241be667c7"
expires: Fri, 17 Feb 2023 19:30:45 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="curved-beam-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 157333336 95180791
age: 255772
x-varnish-hitmiss: HIT
x-varnish-count: 2135
via: varnish
accept-ranges: bytes
x-b3-traceid: 424b5242a07aa896
x-request-id: a0d70df7-d79f-408a-b191-84115ff16b50
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/wood-shelf-background.png
200 OK 147 kB URL HTTP/2 www.ontapcu.org/assets/img/wood-shelf-background.png
IP
File type PNG image data, 1330 x 79, 8-bit/color RGB, non-interlaced\012- data
Size 147 kB (147107 bytes)
Hash e80f4057fccbaf38ec73256e2e76be14
a0b36c20a73edc16cd3ed120705eccc4a26c663a
cd14f0f1979c7a1f78ce2ff1ebcebb9f8dd67cf4eeba8559d93b442612146ec6
GET /assets/img/wood-shelf-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
content-length: 147107
etag: "e302592bf2c506e308f4b0e98e6946d6"
expires: Fri, 17 Feb 2023 19:28:00 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:17 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="wood-shelf-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 176772483 95853712
age: 255934
x-varnish-hitmiss: HIT
x-varnish-count: 2165
via: varnish
accept-ranges: bytes
x-b3-traceid: f270b81dd9bb1b3a
x-request-id: 111e2efe-d0aa-47ad-90b4-23ac846dd767
X-Firefox-Spdy: h2
www.ontapcu.org/assets/js/jquery.min.js
200 OK 32 kB URL HTTP/2 www.ontapcu.org/assets/js/jquery.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (32032)
Hash 3c839f5e1522da311c8b3787c487184f
a99456a0a6d7cf7f3312f8b44ddf3afbcadfe7b3
2ded1d99f9440b01c72ad583d5ad0b45e86d12c3ce2c9253c445021f808f3ca9
GET /assets/js/jquery.min.js HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: application/javascript
content-length: 31712
etag: "08d731ab1850108c7ac0ad86cf31707f"
vary: Accept-Encoding
expires: Fri, 17 Feb 2023 19:27:03 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-xss-protection: 1; mode=block
content-disposition: filename="jquery.min.js"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 167517880 96968063
age: 255991
x-varnish-hitmiss: HIT
x-varnish-count: 2823
via: varnish
accept-ranges: bytes
x-b3-traceid: 2704034a63fd19ab
x-request-id: 84ba5d80-0c78-448a-bf54-a06f81e9eca3
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/ehl.svg
200 OK 1.1 kB URL HTTP/2 www.ontapcu.org/assets/img/ehl.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2711), with no line terminators
Hash c9c576a73509bcd7b2e38745f9a8031d
55b8dfda26a834d273d0d5c4941a92248289efc5
ba657c5eb41fc20a94f91eb1bd53d7bc1c54b6b49ad6f3cfec37e4bef81f7129
GET /assets/img/ehl.svg HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/svg+xml
content-length: 1079
etag: "71aca29dd584e7ceba98c2ffb12cb6d3"
vary: Accept-Encoding
expires: Fri, 17 Feb 2023 19:26:35 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-xss-protection: 1; mode=block
content-disposition: filename="ehl.svg"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 164814008 95670301
age: 255797
x-varnish-hitmiss: HIT
x-varnish-count: 2677
via: varnish
accept-ranges: bytes
x-b3-traceid: 389f5555ad8915bd
x-request-id: 0faaf649-82fa-48e9-8fdb-a231688422b5
X-Firefox-Spdy: h2
www.ontapcu.org/assets/js/script.min.js?v=1675952903425
200 OK 56 kB URL HTTP/2 www.ontapcu.org/assets/js/script.min.js?v=1675952903425
IP
File type Unicode text, UTF-8 text, with very long lines (32050)
Hash 50275c3e1bc842a335124ea96c46d147
d4518890552be3853acfab462d91cc1fc2687eef
53dc4573d24a8c2a09cbc4faed210aba0f367c215501f5682e88290483ad46cf
GET /assets/js/script.min.js?v=1675952903425 HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: application/javascript
content-length: 56108
etag: "bb4641e59250ad13bf09c12a7615f188"
vary: Accept-Encoding
expires: Fri, 17 Feb 2023 19:26:56 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-xss-protection: 1; mode=block
content-disposition: filename="script.min.js"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 1
x-varnish-ttl: 259200.000
x-varnish: 159804352 93385425
age: 255991
x-varnish-hitmiss: HIT
x-varnish-count: 2684
via: varnish
accept-ranges: bytes
x-b3-traceid: 2cba1b4bca070daf
x-request-id: 146e0e8e-1734-45c9-be08-e5a2cbfaa759
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0d9db198f17c01e84f09620c584a56ba
ec95a8ad22cea81dd42529fed9c465da80a76f41
db3d3ba4798ce456e49f786fae478aa118bb75033e2918173aae3254bfd98bfa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 3986bce60f98ed6439daaec10e1e3a84
6964b4c015c3be632a2e52dcb5bc072211e2a4c9
bca111ee6548b104e7476d3f669ed0c0f71de7449c098cf9c1da849b6b50e5a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3840
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Last-Modified: Mon, 20 Feb 2023 17:29:29 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 640fbb04730146d4b636e2062afb5267
fe9faa4412eaa72a7f1e6ea22f250c20a9f00f93
1c1ad6ddeabce08822b9247423ebea471c0378db7ecb681a055b2f7002967770
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Feb 2023 18:31:33 GMT
expires: Mon, 20 Feb 2023 18:46:33 GMT
cache-control: public, max-age=900
age: 116
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash f224008a4db556e5cfc1ab0fb6f7a8bd
67a3dc2fcae97c97e999ebe059c8dbe453b01abf
5039dc991a48123b256dde46dcff26271404440992b55e7414b8ddf0ea313e53
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5993
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Last-Modified: Mon, 20 Feb 2023 16:53:36 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Mon, 20 Feb 2023 18:33:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
banno.com/a/monitor/api/badge/monitor-badge-dark.png
200 OK 867 B URL HTTP/2 banno.com/a/monitor/api/badge/monitor-badge-dark.png
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 88 x 31, 8-bit colormap, non-interlaced\012- data
Hash 3a6614d782bb992370018fd53affc9c4
d72677435b9276c680377a61ef44ac34d8417149
29c0460945112db52539b1f8123ef386a79721884db9d5e06697ebaa2ac6ecfa
GET /a/monitor/api/badge/monitor-badge-dark.png HTTP/1.1
Host: banno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/png
content-length: 867
last-modified: Tue, 24 Jan 2023 15:01:10 GMT
etag: "c6c00185e44c16f0"
accept-ranges: bytes
strict-transport-security: max-age=15724800
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0d9db198f17c01e84f09620c584a56ba
ec95a8ad22cea81dd42529fed9c465da80a76f41
db3d3ba4798ce456e49f786fae478aa118bb75033e2918173aae3254bfd98bfa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
banno.com/a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/db12d290-6224-11ea-ae6e-0242a56689fe
200 OK 612 kB URL HTTP/2 banno.com/a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/db12d290-6224-11ea-ae6e-0242a56689fe
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1331x470, components 3\012- data
Size 612 kB (612465 bytes)
Hash e393beb5b2dd2a90ab8c04c4e917fb41
1c95576830446b82411a7a8b82163d3df2129496
f2c2d82b1e4cb7821a886642aad7cd60f8f6865417c59096e209f8bd980525bb
GET /a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/db12d290-6224-11ea-ae6e-0242a56689fe HTTP/1.1
Host: banno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/jpeg
x-request-id: 3536178bbfdf64c7e9760d5b84076cdf
x-b3-traceid: ccf13211e7f5302e
x-b3-spanid: ccf13211e7f5302e
x-b3-sampled: 1
etag: "db12f9a0-6224-11ea-ae6e-0242a56689fe"
strict-transport-security: max-age=15724800
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 791e968cee662a01bec431c498be07a0
5c71afdd7015734d07be2df1ad79e28ef1646ae2
6ccf96b85392ec77423ec2f2b756909a0de6480867502680d35036e95964b712
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b53bc403e0ab0570909b47c9976c4bc3
ac75251663f22d11671b8089f0b1d8d868844764
bd84b9ecba7b9a74d49c6d7a56df5e8a5d813bbd8dac93714d5b68f2de2181af
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c3fcc2714a120f58ee235b6f2008bf7b
a6da1251e0d98453e6a411fa246c6e6cac56790d
55a9637ac5d1ea18dc0b15b0e8613c32079fae3422a64bc1b7c0665894caefee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
banno.com/a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/244a42c1-3f0d-4c94-a94c-ea73f8870763
200 OK 212 kB URL HTTP/2 banno.com/a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/244a42c1-3f0d-4c94-a94c-ea73f8870763
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type PNG image data, 1330 x 470, 8-bit/color RGBA, non-interlaced\012- data
Size 212 kB (211520 bytes)
Hash 5a74972dc685df4cd7ab3810dddcc3e5
e8b61c400692cf271d96cc1ca0fd8ad0cafb37c8
cdb9153039cc9bc8da613509fa0dfdf37e1179c1561dd2a77d66dd677c08b927
GET /a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/244a42c1-3f0d-4c94-a94c-ea73f8870763 HTTP/1.1
Host: banno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/png
x-request-id: bb273e7e51ac87d84b997dd3bd4be035
x-b3-traceid: b0bacd1b9bb58271
x-b3-spanid: b0bacd1b9bb58271
x-b3-sampled: 1
etag: "5fd18ef4-23e1-4166-b7cc-cebdef0e65a3"
strict-transport-security: max-age=15724800
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 802dfa5c8d5d5fc162a3850bf53647c0
4b3b90d770557e9803de31d16e55ed8ee10cb75c
a0cbf6cdb36cb16f36d4e3b1652fa3a756a8b428519f736aec12cbe93b6184e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/e-T0LC6veq6xndVnxNZYDs0k2YzO3ng5pgwYiLLC-NE.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/e-T0LC6veq6xndVnxNZYDs0k2YzO3ng5pgwYiLLC-NE.js
IP
File type ASCII text, with very long lines (36180)
Hash 6caf3ddf47bad942732577bf1cd634ed
5930e4cdb4173c5ffa3f9e2eaf7ecc147623dd0c
cc13b4b51d92ba1992ec59da7b670f2a66cf5ffd4907061f911349e925a218b7
GET /js/th/e-T0LC6veq6xndVnxNZYDs0k2YzO3ng5pgwYiLLC-NE.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14345
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 17 Feb 2023 09:50:47 GMT
expires: Sat, 17 Feb 2024 09:50:47 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 12:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 290562
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 56617f89c9d2de8d4862c8ea6d22107a
420f45753e4fcb32684076481049b302a70c5502
f0b75193a64b742f287e1cb7d28e79acb286ec16c33bb88207b1d458ffd35b15
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 20 Feb 2023 18:33:29 GMT
server: ESF
cache-control: private
content-length: 30782
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 791e968cee662a01bec431c498be07a0
5c71afdd7015734d07be2df1ad79e28ef1646ae2
6ccf96b85392ec77423ec2f2b756909a0de6480867502680d35036e95964b712
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-C9F6KM880C>m=45je32f0&_p=1989430290&_gaz=1&cid=2110102087.1676918009&ul=en-us&sr=1280x1024&_s=1&sid=1676918008&sct=1&seg=0&dl=https%3A%2F%2Fwww.ontapcu.org%2F&dt=On%20Tap%20Credit%20Union&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-C9F6KM880C>m=45je32f0&_p=1989430290&_gaz=1&cid=2110102087.1676918009&ul=en-us&sr=1280x1024&_s=1&sid=1676918008&sct=1&seg=0&dl=https%3A%2F%2Fwww.ontapcu.org%2F&dt=On%20Tap%20Credit%20Union&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-C9F6KM880C>m=45je32f0&_p=1989430290&_gaz=1&cid=2110102087.1676918009&ul=en-us&sr=1280x1024&_s=1&sid=1676918008&sct=1&seg=0&dl=https%3A%2F%2Fwww.ontapcu.org%2F&dt=On%20Tap%20Credit%20Union&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ontapcu.org
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.ontapcu.org
date: Mon, 20 Feb 2023 18:33:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-C9F6KM880C&cid=2110102087.1676918009>m=45je32f0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-C9F6KM880C&cid=2110102087.1676918009>m=45je32f0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-C9F6KM880C&cid=2110102087.1676918009>m=45je32f0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ontapcu.org
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.ontapcu.org
date: Mon, 20 Feb 2023 18:33:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/0JIv7Rbo/Buying_A_Car%20copy.png
200 OK 76 kB URL HTTP/2 www.ontapcu.org/assets/files/0JIv7Rbo/Buying_A_Car%20copy.png
IP
File type PNG image data, 246 x 208, 8-bit/color RGBA, non-interlaced\012- data
Hash 571694ab0119d58cf2b221c551bb3b68
324e6f595ad74b00bfc087c011e2931536259981
903d2c54acd33e1b638ac1e26af8841298f324926f69cff85af570bb7f5be4ae
GET /assets/files/0JIv7Rbo/Buying_A_Car%20copy.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "0eff13ee5053372709bb2f9ad615938b"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 21:39:57 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Buying_A_Car copy.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 6
x-varnish: 177199107
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: c1df6ad3ed6dcc0f
x-request-id: 0c654637-dab4-411d-99c4-f4a15c6caf92
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/bB404ap8/couple.png
200 OK 71 kB URL HTTP/2 www.ontapcu.org/assets/files/bB404ap8/couple.png
IP
File type PNG image data, 246 x 208, 8-bit/color RGBA, non-interlaced\012- data
Hash 0476e0610ac4275a1f8ce8bf04300893
7ed034e68428001676be6cbb736215187dd531d0
35d8fc3a2cd76768650e8c949686738b37f101fc3d84e28d4a86e7bdabc2e56c
GET /assets/files/bB404ap8/couple.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
content-length: 70602
etag: "9fe3314a2c899322492885ec0c012f42"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 22:12:43 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="couple.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 7
x-varnish: 155468379
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 5cb781f8db85873e
x-request-id: eaf9a80b-7702-4f9c-b5f1-5ca2024c7327
X-Firefox-Spdy: h2
kernel-serve.banno.com/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/profiles/10eab9d0-b14d-11ed-99f3-024237f64542/visit?keywords=&url=https%3A%2F%2Fwww.ontapcu.org%2F
200 OK 0 B URL HTTP/2 kernel-serve.banno.com/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/profiles/10eab9d0-b14d-11ed-99f3-024237f64542/visit?keywords=&url=https%3A%2F%2Fwww.ontapcu.org%2F
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/profiles/10eab9d0-b14d-11ed-99f3-024237f64542/visit?keywords=&url=https%3A%2F%2Fwww.ontapcu.org%2F HTTP/1.1
Host: kernel-serve.banno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:29 GMT
content-type: application/javascript
content-length: 0
cache-control: no-cache, no-store, max-age=0
x-envoy-upstream-service-time: 8
x-b3-traceid: 0020c6adc9f8e3ce
x-request-id: 7564069d6baf5667ee10e6855e2fef7c
strict-transport-security: max-age=15724800
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/c8FWXf8m/Insuring_What_Matters.png
200 OK 90 kB URL HTTP/2 www.ontapcu.org/assets/files/c8FWXf8m/Insuring_What_Matters.png
IP
File type PNG image data, 246 x 208, 8-bit/color RGBA, non-interlaced\012- data
Hash 51c3f8cb31a51da0e3a080becf13e893
d0095fc593215e3afbdb8c7b8a7a2ee7c6a9f8ba
206814731260d74c0f349b5e4ae139eed7beb4f65e6f3e8a3777e45159da1472
GET /assets/files/c8FWXf8m/Insuring_What_Matters.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "33c5c1b3491cb35f1d58417b8b07996e"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Mon, 14 May 2018 20:04:25 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Insuring_What_Matters.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 5
x-varnish: 159804350
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: ee29249cf75878bb
x-request-id: 6b702caf-8413-4868-a22a-4b630e2af8b0
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/OA58DONq/debt.png
200 OK 78 kB URL HTTP/2 www.ontapcu.org/assets/files/OA58DONq/debt.png
IP
File type PNG image data, 246 x 208, 8-bit/color RGBA, non-interlaced\012- data
Hash 2c18c687bf3fca1effafe7fbb8151f11
6bc32c126a430c057a4377baea2ebf693a1cdcff
917e971f5e11bfcffd306b6b2cf8d7b16b6f4c961670555bda674aae6ebc3c77
GET /assets/files/OA58DONq/debt.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "1f5a6e668e7f195f15df36dc86834b09"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 22:00:00 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="debt.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 7
x-varnish: 176676664
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 7c5adc1aa411219d
x-request-id: 05f09ea2-afda-4a59-b446-30b854b19382
X-Firefox-Spdy: h2
rw1.marchex.io/euinc/number-changer.js
200 OK 9.2 kB URL HTTP/1.1 rw1.marchex.io/euinc/number-changer.js
IP
File type ASCII text, with very long lines (311)
Hash f5dfd98aee1ad2d41a46d7a4eb0ab67d
3b9e5e096a70e8615ec435c530c8a35a706015bf
4745292cc0e6adccd59ba29822e531cc8c29fcd4c6bc2126cdec293db92e73d6
GET /euinc/number-changer.js HTTP/1.1
Host: rw1.marchex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 18:33:30 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Content-Security-Policy: default-src 'self' www.google-analytics.com privacy-policy.truste.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com privacy-policy.truste.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' privacy-policy.truste.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com; media-src 'self';
Permissions-Policy: accelerometer=(), autoplay=*, camera=(), cross-origin-isolated=(), display-capture=(), document-domain=*, encrypted-media=*, fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=*, payment=(), picture-in-picture=(), publickey-credentials-get=*, screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), hid=(), idle-detection=(), serial=(), window-placement=()
Keep-Alive: timeout=1, max=86
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/javascript
ocsp.digicert.com/
200 OK 279 B IP
Hash 0d06f7d46e8d2e6d264efe503847f3a5
a6a1bae25ff0f4edf9e74f03b72bd44b718ad164
2137d54c7cc66b9b4dad65868d2013444dbf37df4b36f8c0e913dac08f037281
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3685
Cache-Control: max-age=128439
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:30 GMT
Etag: "63f3014c-117"
Expires: Wed, 22 Feb 2023 06:14:09 GMT
Last-Modified: Mon, 20 Feb 2023 05:12:44 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
rw1.marchex.io/euinc/getnumdata.js?var=_vsrkpd.d;acc=fwABAVsxE4ZtWwBC;cky=rkpd_fwABAVsxE4ZtWwBC;ign=1;url=https%3A%2F%2Fwww.ontapcu.org%2F;
200 OK 186 B URL HTTP/1.1 rw1.marchex.io/euinc/getnumdata.js?var=_vsrkpd.d;acc=fwABAVsxE4ZtWwBC;cky=rkpd_fwABAVsxE4ZtWwBC;ign=1;url=https%3A%2F%2Fwww.ontapcu.org%2F;
IP
Hash a113af51749de66ee76b8480af4903f8
f48dafc7e6698a86f55e4683f4f88d875b7c2838
72267c3ab2cc1909ac0ad6600a2e1066dbab61d0d5a5109a9203517a4f1c0a28
GET /euinc/getnumdata.js?var=_vsrkpd.d;acc=fwABAVsxE4ZtWwBC;cky=rkpd_fwABAVsxE4ZtWwBC;ign=1;url=https%3A%2F%2Fwww.ontapcu.org%2F; HTTP/1.1
Host: rw1.marchex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 18:33:30 GMT
Server: Apache
P3P: CP="NOI COR NID TAI OUR BUS STA"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Content-Security-Policy: default-src 'self' www.google-analytics.com privacy-policy.truste.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com privacy-policy.truste.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' privacy-policy.truste.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com; media-src 'self';
Permissions-Policy: accelerometer=(), autoplay=*, camera=(), cross-origin-isolated=(), display-capture=(), document-domain=*, encrypted-media=*, fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=*, payment=(), picture-in-picture=(), publickey-credentials-get=*, screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), hid=(), idle-detection=(), serial=(), window-placement=()
Keep-Alive: timeout=1, max=143
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/javascript
www.ontapcu.org/assets/files/8jEnlo1z/home.png
200 OK 100 kB URL HTTP/2 www.ontapcu.org/assets/files/8jEnlo1z/home.png
IP
File type PNG image data, 246 x 208, 8-bit/color RGBA, non-interlaced\012- data
Size 100 kB (100387 bytes)
Hash b2b5f815097f428d8881fc4a931c4426
08944b51db5ef3c1637cf629077e6efcbed3ef6b
7bb45b9a8d89bb2a16502e68171127240912f3bea004410d0317fdd256c18cb7
GET /assets/files/8jEnlo1z/home.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
content-length: 100387
etag: "d547ba2b995cc32fdd6db3ad2de1cb6d"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 21:59:37 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="home.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 11
x-varnish: 155246737
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 0e1fcfd11882ac62
x-request-id: 6274a998-3f9b-4eb1-8692-dfd1ad323f66
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/OiFHIN3U/Business.png
200 OK 71 kB URL HTTP/2 www.ontapcu.org/assets/files/OiFHIN3U/Business.png
IP
File type PNG image data, 246 x 208, 8-bit/color RGBA, non-interlaced\012- data
Hash a35d109734b1ff1aa9be5baa056c13d8
ea3e0a016b84461d7ed21efd393b57154760bd4b
25b526987038f908cd8a472a5ce5cf656e6fa97497692ea0145cf433198c5f27
GET /assets/files/OiFHIN3U/Business.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "fa836d8b14e8c95dc2d3815e695a512a"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 22:14:11 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Business.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 9
x-varnish: 167485973
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: aaca9d61c23e2a21
x-request-id: f93727d9-73b2-4813-8dba-ecd252273eec
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/dAS2aJCf/Copy%20of%20TEST%20-%20homepage.gif
200 OK 158 kB URL HTTP/2 www.ontapcu.org/assets/files/dAS2aJCf/Copy%20of%20TEST%20-%20homepage.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Size 158 kB (158043 bytes)
Hash 633e75387226ccfc2391b09d0949ddd8
1a6436054394ef852d6cfe166d4857a3ce0d302d
4e7b96e515a76236bb95dafd7ef01d226a14b6e692a7ac08e1118ce68674e86a
GET /assets/files/dAS2aJCf/Copy%20of%20TEST%20-%20homepage.gif HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/gif
etag: "10920eb831a19599790aad4ac86754ca"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Fri, 19 Mar 2021 21:12:07 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Copy of TEST - homepage.gif"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 5
x-varnish: 161338449
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 24996e226a8c6e74
x-request-id: 11195ff1-8e1a-4537-b7f3-4ede73bd3b61
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/header-beam-background.png
200 OK 16 kB URL HTTP/2 www.ontapcu.org/assets/img/header-beam-background.png
IP
File type PNG image data, 1330 x 60, 8-bit grayscale, non-interlaced\012- data
Hash c13d9c52873b49fbfdccbe683259c63b
f1875f6ca632e559f1b4e238d6343511cb50e4d4
ee3812a1e7bb5687a88659345e6a81a08e9f98a75c83632e08c30156e79145f2
GET /assets/img/header-beam-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/assets/css/main.min.css?v=1675952903430
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/png
content-length: 16287
etag: "ebd73ed350ffe4b80020853b57362736"
expires: Fri, 17 Feb 2023 19:28:15 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="header-beam-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 167485980 94594788
age: 255919
x-varnish-hitmiss: HIT
x-varnish-count: 2687
via: varnish
accept-ranges: bytes
x-b3-traceid: b69b74bd50922aa2
x-request-id: bd07edba-2405-420e-a803-42da3d61adf3
X-Firefox-Spdy: h2
forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2
200 OK 35 B URL HTTP/2 forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2 HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:31 GMT
content-type: image/gif
content-length: 35
x-trace: 2B37C0FEA2D2B79165A1960CC8D819B7EF1D6D6DD7000000000000000000
cache-control: max-age=0, no-cache, no-store
vary: origin
x-hubspot-correlation-id: 827dfd80-19ff-4246-84cc-bc72d067cc77
access-control-allow-credentials: false
access-control-expose-headers: X-Origin-Hublet
x-robots-tag: none
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79c954c33e69b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/on-tap-background.png
200 OK 3.6 kB URL HTTP/2 www.ontapcu.org/assets/img/on-tap-background.png
IP
Hash 66d0110f7017ea760d14807f0eb9cb57
796c541432d5db00e1b8412ed763be10a723975e
219e7d88395dbd4d98ffa1e50723ef9768a42dd29ebcc1bbd1d7b8a667bf2c75
GET /assets/img/on-tap-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/assets/css/main.min.css?v=1675952903430
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/png
content-length: 3060
etag: "92952dffdf1d94a1dc31e57904438553"
expires: Fri, 17 Feb 2023 19:26:51 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="on-tap-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 160225537 94594475
age: 255996
x-varnish-hitmiss: HIT
x-varnish-count: 2162
via: varnish
accept-ranges: bytes
x-b3-traceid: 9af22d7308e6f301
x-request-id: 329d3a64-465d-413e-8992-2ee567a68208
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 13a3c11f8794b27d65870b491b22ddcc
897841d656e4adadbd37decc6ba076cd84b5181e
ffe854f12b98876e53d628cdaaca7a22ae460220cbd3cae194b17f8b9cc03ca6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4425
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:32 GMT
Last-Modified: Mon, 20 Feb 2023 17:19:47 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
www.ontapcu.org/assets/files/8GND9Y4z/shield.png
200 OK 82 kB URL HTTP/2 www.ontapcu.org/assets/files/8GND9Y4z/shield.png
IP
File type PNG image data, 246 x 208, 8-bit/color RGBA, non-interlaced\012- data
Hash 17cffd4d7d8abe0e93db329e4ed5f5a1
6a82e5c3dff280992d655241e710b4820fde1766
72e94bca24076e88a82aef064d22dc0b09c0df8ca5a7f9be427373506e744c0b
GET /assets/files/8GND9Y4z/shield.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "aeabb44622dad6262fdd0d972bc6d184"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 21:11:41 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="shield.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 7
x-varnish: 177721478
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 60a32fceb6fec33a
x-request-id: c2d05b24-0711-4d79-9078-aaec35e9d035
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 082e9abf38efe3287592cadfd5cf28b5
790b8bfc4f73449f779cfd5f4702a63c3b5da47f
e49b03ef1ca823ad9fa273a31c28d7edb38c79c4f763e52760461431479c0bf2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.mouseflow.com/projects/cad5e0b1-047a-4f18-8176-ab563faee8b2.js
301 Moved Permanently 0 B URL HTTP/2 cdn.mouseflow.com/projects/cad5e0b1-047a-4f18-8176-ab563faee8b2.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /projects/cad5e0b1-047a-4f18-8176-ab563faee8b2.js HTTP/1.1
Host: cdn.mouseflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 18:33:32 GMT
accept-ranges: bytes
content-length: 0
location: https://cdn.mouseflow.com/projects/cad5e0b1-047a-4f18-8176-ab563faee8b2_eu.js
cache-control: max-age=86400
x-hw: 1676918012.cds209.sk1.hn,1676918012.cds065.sk1.c
x-hw-loc: https://cdn.mouseflow.com/projects/cad5e0b1-047a-4f18-8176-ab563faee8b2.js
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-C9F6KM880C&cid=2110102087.1676918009>m=45je32f0&aip=1&z=1426393018
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-C9F6KM880C&cid=2110102087.1676918009>m=45je32f0&aip=1&z=1426393018
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-C9F6KM880C&cid=2110102087.1676918009>m=45je32f0&aip=1&z=1426393018 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 20 Feb 2023 18:33:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash be5a1814429d0a129322abda3791987f
9e0eeee65e17a9c6df149ed1f01d3d7194833fd8
75afa897dd6f4b97b0697589569c7c4f87e32b79addf981febc78a4ff741210e
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: oZ+H3+whTsTpqOa4ULONt8oGcNPWmhpexaidrsq8qBar6v5fhxNWB5qL1TscrlYJ07oP1rjrF7CzUhtGJGQ+Kw==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1904183273
date: Mon, 20 Feb 2023 18:33:32 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1d60d1c06c0fb22d26009883b627edd1
20dadbf915a8ddfb65fa812fba78b58da3e38e8d
d653a854a0b4a37746ed9c39592f64984306d4113801cd3e929f74f8cba7399b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3941
Cache-Control: max-age=85848
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:32 GMT
Etag: "63f259ef-1d7"
Expires: Tue, 21 Feb 2023 18:24:20 GMT
Last-Modified: Sun, 19 Feb 2023 17:18:39 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 082e9abf38efe3287592cadfd5cf28b5
790b8bfc4f73449f779cfd5f4702a63c3b5da47f
e49b03ef1ca823ad9fa273a31c28d7edb38c79c4f763e52760461431479c0bf2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 18:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash cc37c5007da21c5599aa7ce59d14d6a9
44ca2ce3a06eb5156aa170d25ccfb556f0816ffb
1dc3910a6719d3bed5d64a151d15f0e8621b639c66c1a9dbf855413cf3c129af
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 20 Feb 2023 18:33:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 19 Feb 2023 21:23:04 GMT
Expires: Mon, 20 Feb 2023 21:23:04 GMT
ETag: "44ca2ce3a06eb5156aa170d25ccfb556f0816ffb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
resources.xg4ken.com/js/v2/ktag.js?tid=KT-N292A-40F
200 OK 3.5 kB URL HTTP/2 resources.xg4ken.com/js/v2/ktag.js?tid=KT-N292A-40F
IP
File type C source, ASCII text, with very long lines (9143)
Hash 14380f52b301a495de3bdf28112849a0
391f89a7f915c1166a14ffb55e0910b291d4b668
31a96352ccb1839e461d812b75d9ba902484ee4a501854f46cdcd216479b8355
GET /js/v2/ktag.js?tid=KT-N292A-40F HTTP/1.1
Host: resources.xg4ken.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:32 GMT
content-type: application/javascript
content-length: 3544
server: nginx
last-modified: Mon, 14 Nov 2022 12:23:07 GMT
etag: "6372332b-dd8"
content-encoding: gzip
expires: Tue, 21 Feb 2023 18:33:32 GMT
x-xss-protection: 1; mode=block
cache-control: max-age=86400, public
X-Firefox-Spdy: h2
d3ay3069gmhkih.cloudfront.net/wedge/1.3/g1btg517h4/init.js
200 OK 4.2 kB URL HTTP/2 d3ay3069gmhkih.cloudfront.net/wedge/1.3/g1btg517h4/init.js
IP
Hash f61ee74342c398c881684dde2731e611
6d04836b264f362f218bbb158c67eb57e38649b2
d0fb78b6e3341046a8e42705b26e1a96c41ecbbc925fe3bcebfa4abd3edac729
GET /wedge/1.3/g1btg517h4/init.js HTTP/1.1
Host: d3ay3069gmhkih.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 4244
server: nginx/1.18.0 (Ubuntu)
date: Mon, 20 Feb 2023 18:33:32 GMT
x-powered-by: Express
access-control-allow-credentials: true
environment: prod
datetime: Mon Feb 20 2023 18:33:32 GMT+0000 (Coordinated Universal Time)
time: 1676918012776
uuid: 8fe4073f-145d-4906-832e-66c88e4ffd96
etag: W/"1094-bQSDayZPNi8hi7sVjGfrV+OGSbI"
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8cC9pnNUz0WV1R-l3SFZTXnDchOLbbV3QjaNwwT56oLPt_Z9PE7Djg==
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash e46d99ca545ad17b21a0eb537e304282
c2421bd7054905188fcc511191a9b1b950855aa4
c517d6dd3fb93c6fc8a2978f8ce4e4915a42e11b274cdb2165393e2341bcd675
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 18:33:33 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 19 Feb 2023 08:17:11 GMT
Expires: Sun, 26 Feb 2023 08:17:10 GMT
Etag: "c2421bd7054905188fcc511191a9b1b950855aa4"
Cache-Control: max-age=480816,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79c954cdde7db4f1-OSL
log-v3-web.fulcrumsaas.net/log/interaction
200 OK 0 B URL HTTP/1.1 log-v3-web.fulcrumsaas.net/log/interaction
IP
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log/interaction HTTP/1.1
Host: log-v3-web.fulcrumsaas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.ontapcu.org/
Origin: https://www.ontapcu.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 20 Feb 2023 18:33:33 GMT
content-length: 0
access-control-allow-headers: Content-Type
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-max-age: 86400
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
ocsp.sectigo.com/
200 OK 472 B IP
Hash e46d99ca545ad17b21a0eb537e304282
c2421bd7054905188fcc511191a9b1b950855aa4
c517d6dd3fb93c6fc8a2978f8ce4e4915a42e11b274cdb2165393e2341bcd675
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 18:33:33 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 19 Feb 2023 08:17:11 GMT
Expires: Sun, 26 Feb 2023 08:17:10 GMT
Etag: "c2421bd7054905188fcc511191a9b1b950855aa4"
Cache-Control: max-age=480816,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79c954cdde7bb4f1-OSL
www.ontapcu.org/assets/img/rates-background.png
200 OK 400 kB URL HTTP/2 www.ontapcu.org/assets/img/rates-background.png
IP
File type PNG image data, 958 x 531, 8-bit/color RGB, non-interlaced\012- data
Size 400 kB (400096 bytes)
Hash 1b85572b47d0f2b934083541c4a4baab
313d668eff70263551939e729ae44d086b7e41f9
cda2762bc2ce0502080a8667498af991eaa1b4069c90d7ca7d18b3b1d5604f5d
GET /assets/img/rates-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/assets/css/main.min.css?v=1675952903430
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/png
content-length: 400096
etag: "be1cff1d438d21dd2bd7b21e5a9aedc0"
expires: Fri, 17 Feb 2023 19:30:34 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="rates-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 156226514 64667942
age: 255773
x-varnish-hitmiss: HIT
x-varnish-count: 2144
via: varnish
accept-ranges: bytes
x-b3-traceid: 3ede09db077295f2
x-request-id: 791cc94c-42b6-47ca-8776-2c43c499b2c3
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=974582759792817&ev=PageView&dl=https%3A%2F%2Fwww.ontapcu.org%2F&rl=&if=false&ts=1676918014394&sw=1280&sh=1024&v=2.9.96&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1676918014393.1463736923&it=1676918012687&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=974582759792817&ev=PageView&dl=https%3A%2F%2Fwww.ontapcu.org%2F&rl=&if=false&ts=1676918014394&sw=1280&sh=1024&v=2.9.96&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1676918014393.1463736923&it=1676918012687&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=974582759792817&ev=PageView&dl=https%3A%2F%2Fwww.ontapcu.org%2F&rl=&if=false&ts=1676918014394&sw=1280&sh=1024&v=2.9.96&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1676918014393.1463736923&it=1676918012687&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 20 Feb 2023 18:33:34 GMT
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/tall-brick-background.png
200 OK 1.1 MB URL HTTP/2 www.ontapcu.org/assets/img/tall-brick-background.png
IP
File type PNG image data, 1330 x 457, 8-bit/color RGB, non-interlaced\012- data
Size 1.1 MB (1126479 bytes)
Hash a58f81bdd883994d7a3d336e4e18a45f
227ed5379ad30f61969dda0ec1bbfb80493dac57
3d67130f40eabbf8f1d4f6cf6e0fd231041c42cdda03f5d5007ffb3b13d9fc78
GET /assets/img/tall-brick-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/assets/css/main.min.css?v=1675952903430
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/png
content-length: 1126479
etag: "aff0e0fed2d52b8b40f549dab31469e0"
expires: Fri, 17 Feb 2023 19:27:07 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:17 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="tall-brick-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 167362136 93941074
age: 255991
x-varnish-hitmiss: HIT
x-varnish-count: 2074
via: varnish
accept-ranges: bytes
x-b3-traceid: e1e4d17b7f33d1b3
x-request-id: a3641ad2-924c-411a-8b0d-ec91bee29572
X-Firefox-Spdy: h2
cds-sdkcfg.onlineaccess1.com/common.js
200 OK 0 B URL HTTP/2 cds-sdkcfg.onlineaccess1.com/common.js
IP
GET /common.js HTTP/1.1
Host: cds-sdkcfg.onlineaccess1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: application/javascript; charset=UTF-8
x-ion-hop: prod
expires: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
set-cookie: JsbWL0j2=A3InGnCGAQAAULGvRJUeY9qoFTJ5QdK-CJFCobV_t0X15JfAiERF2YAQruDrAVtaKpqcuDv8wH8AAEB3AAAAAA|1|0|f644dd1268154026529db5dea537e8b5ce4a1e3e; Path=/; Max-Age=31556952; Domain=onlineaccess1.com
__cf_bm=jdS7NDUshZNjJ7cHbqiJnLWxYXWkWYxsh33eixgDWeg-1676918007-0-ATCGbZVBBYCiWNjPcgOjWXFZI28ESXLiCkMQpMmJrgwu1/kKj79x3TLxIV+LzZdfwIntSby5LnzByly4xodWhe8=; path=/; expires=Mon, 20-Feb-23 19:03:27 GMT; domain=.cds-sdkcfg.onlineaccess1.com; HttpOnly; Secure; SameSite=None
__cfruid=867f7a763cdf56278341da7b3475c7464e5d306f-1676918007; path=/; domain=.cds-sdkcfg.onlineaccess1.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 79c954ab5fb00b41-OSL
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/xGlehPX6/CBGCC.jpg
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/xGlehPX6/CBGCC.jpg
IP
GET /assets/files/xGlehPX6/CBGCC.jpg HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/jpeg
etag: "f141ee77e92e1149aa3b4aad31326c95"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Wed, 31 Jul 2019 20:52:11 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="CBGCC.jpg"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 7
x-varnish: 151180295
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 3eb881666e93379e
x-request-id: dd0999c0-ba35-4128-9cf6-2109a7b96fc4
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/subpage-background.png
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/img/subpage-background.png
IP
GET /assets/img/subpage-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/assets/css/main.min.css?v=1675952903430
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/png
content-length: 4093266
etag: "f7e3d4a4eae91a4040905a0fb1e3b829"
expires: Fri, 17 Feb 2023 19:30:21 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:17 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="subpage-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 158354839 97452036
age: 255797
x-varnish-hitmiss: HIT
x-varnish-count: 2640
via: varnish
accept-ranges: bytes
x-b3-traceid: 1d8ff1a167b8a9ae
x-request-id: c4ea56d7-5731-4196-998a-2600d1e75d89
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/3txt0eOu/Budgeting_and_Saving_1.png
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/3txt0eOu/Budgeting_and_Saving_1.png
IP
GET /assets/files/3txt0eOu/Budgeting_and_Saving_1.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "6cfbc69021f9f64bfc9e738e6b9c1648"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Mon, 14 May 2018 20:04:25 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Budgeting_and_Saving_1.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 7
x-varnish: 161375585
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 86b9348d238d59ad
x-request-id: bb318843-93a0-40ab-a462-a045c48cf47d
X-Firefox-Spdy: h2
www.youtube.com/s/player/11e3a4ec/player_ias.vflset/en_US/base.js
200 OK 0 B URL HTTP/2 www.youtube.com/s/player/11e3a4ec/player_ias.vflset/en_US/base.js
IP
GET /s/player/11e3a4ec/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/7TclfoUl4zs?rel=0&showinfo=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 616656
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Feb 2023 15:45:40 GMT
expires: Fri, 16 Feb 2024 15:45:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 16 Feb 2023 01:14:03 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 355668
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
forms.hubspot.com/collected-forms/v1/config/json?portalId=6480240&utk=
200 OK 0 B URL HTTP/2 forms.hubspot.com/collected-forms/v1/config/json?portalId=6480240&utk=
IP
GET /collected-forms/v1/config/json?portalId=6480240&utk= HTTP/1.1
Host: forms.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ontapcu.org
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:30 GMT
content-type: application/json;charset=utf-8
vary: origin
x-hubspot-correlation-id: cc560e04-870d-438a-8c9a-0faae4ee7167
access-control-allow-credentials: false
access-control-allow-origin: https://www.ontapcu.org
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: *
access-control-max-age: 180
x-robots-tag: none
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=TQGEpfIwtLVZric3WVgyeDFs_iFvwRuabOpru.IEub0-1676918010-0-AXGV4DHgRHaPNckLc+Bzqgk3SsJ4oKqEujOKUhC22Q3Z0ZtC5y4JGN7JRLq9rmB24grsG+ymZnTBebT7Px41VwE=; path=/; expires=Mon, 20-Feb-23 19:03:30 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=26vLU63YIb5A2TPQ5y4Aalyr9aDUEZkLaHMYOSoLS%2BKCv%2BPJ5txF6apsqqZYjBzwbsXXzsLUHABAir%2BivspAARQINQkEdpeHw%2FEuCYMNdsPqfhH7EMKhbDOvJ2zHVholIXes"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79c954ba0e770b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/q4r7Wp37/Retire.png
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/q4r7Wp37/Retire.png
IP
GET /assets/files/q4r7Wp37/Retire.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "cccb3ffb633b821d65ea055eda10f93d"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 22:14:52 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Retire.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 7
x-varnish: 152283293
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 47bb27f6f565c267
x-request-id: 78cf2a43-fcd4-4301-8fcd-4675c1c5fae0
X-Firefox-Spdy: h2
js.hscollectedforms.net/collectedforms.js
200 OK 0 B URL HTTP/2 js.hscollectedforms.net/collectedforms.js
IP
GET /collectedforms.js HTTP/1.1
Host: js.hscollectedforms.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ontapcu.org
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:29 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Tue, 07 Feb 2023 01:17:58 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: SRrb.93sqm.lmAPDUKFHizePSATAJlo.
etag: W/"257b82c9f242c143eb09b6862e336a56"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d2dee9b44718f249b789987d2cbe62c.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: zHhSVp1KjUNhbLBxGSJOvoYj8HzkiOClGy-0UCAdRRytU9_JznPzrg==
cache-control: s-maxage=600, max-age=300
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=collected-forms-embed-js/static-1.315/bundles/project.js&cfRay=79c954b58f83fabc-IAD
x-hs-target-asset: collected-forms-embed-js/static-1.315/bundles/project.js
access-control-allow-origin: *
x-hs-cache-status: HIT
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: MISS
server: cloudflare
cf-ray: 79c954b58f83fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.hs-analytics.net/analytics/1676917800000/6480240.js
200 OK 0 B URL HTTP/2 js.hs-analytics.net/analytics/1676917800000/6480240.js
IP
GET /analytics/1676917800000/6480240.js HTTP/1.1
Host: js.hs-analytics.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:32 GMT
content-type: text/javascript
x-amz-id-2: xxk+u3cHV6jsFIDIBF5NG76jzVMLNnBbszMWJ7GpwD6ZxRz23YSjX67HzAzkupPQYiXavT3sFDEcqJB3G2gQPNgn0ZQAzsAUvtTpqjB9Yl8=
x-amz-request-id: ZDC04NF1NEB4N6YA
last-modified: Wed, 18 Jan 2023 20:14:21 GMT
etag: W/"08ebe8197656055894c33ec499dc23e2"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: null
access-control-allow-credentials: false
vary: origin, Accept-Encoding
expires: Mon, 20 Feb 2023 18:38:32 GMT
cf-cache-status: MISS
server: cloudflare
cf-ray: 79c954ca5deb0b59-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/3Sfi4Q3f/Insure2.png
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/3Sfi4Q3f/Insure2.png
IP
GET /assets/files/3Sfi4Q3f/Insure2.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "e65f5ecf0843674db97035348d9f9b24"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 22:28:48 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Insure2.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 6
x-varnish: 153968719
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 4b8dd17a50def741
x-request-id: a90180cc-a70c-45ba-b5eb-988722176fb5
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/L1iIdIjE/GirlSmile.png
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/L1iIdIjE/GirlSmile.png
IP
GET /assets/files/L1iIdIjE/GirlSmile.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/png
etag: "3d237d392ba65e12234c8ff9d995eb03"
expires: Mon, 20 Feb 2023 18:36:11 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 22:14:28 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="GirlSmile.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 264
x-varnish: 177851525
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 22eeaa1f88bd08f1
x-request-id: 677eb652-aecd-422c-9878-abadd05a24ac
X-Firefox-Spdy: h2
banno.com/a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/fcdf2c30-8663-11ea-bca7-0242d2920566
200 OK 0 B URL HTTP/2 banno.com/a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/fcdf2c30-8663-11ea-bca7-0242d2920566
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/fcdf2c30-8663-11ea-bca7-0242d2920566 HTTP/1.1
Host: banno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
x-request-id: 1c0de73ba5aef9ee223a80a875ffeb8a
x-b3-traceid: c193d14b4e451fd7
x-b3-spanid: c193d14b4e451fd7
x-b3-sampled: 1
etag: "fcdf2c31-8663-11ea-bca7-0242d2920566"
strict-transport-security: max-age=15724800
X-Firefox-Spdy: h2
banno.com/a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/50237ec0-7b6c-11eb-8e80-02422fe7ef51
200 OK 0 B URL HTTP/2 banno.com/a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/50237ec0-7b6c-11eb-8e80-02422fe7ef51
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /a/assets/api/institutions/e2ddf670-e5b8-11e7-be0e-b628fb7ff533/assets/50237ec0-7b6c-11eb-8e80-02422fe7ef51 HTTP/1.1
Host: banno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/jpeg
x-request-id: ba1218f5d93abc944e51a7f07db8c19c
x-b3-traceid: b82997419f3ece2b
x-b3-spanid: b82997419f3ece2b
x-b3-sampled: 1
etag: "50237ec1-7b6c-11eb-8e80-02422fe7ef51"
strict-transport-security: max-age=15724800
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/HDdvZ9b8/Computer.png
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/HDdvZ9b8/Computer.png
IP
GET /assets/files/HDdvZ9b8/Computer.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "98d013c8759a2cbaa383d13ac8c8528f"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 26 Feb 2019 22:13:40 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Computer.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 6
x-varnish: 147453528
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 6c1ca174d6f264f6
x-request-id: ffbf334b-b13f-4f68-aefc-588e1448e2fb
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/qmRSFoC2/News_and_Events.jpg
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/qmRSFoC2/News_and_Events.jpg
IP
GET /assets/files/qmRSFoC2/News_and_Events.jpg HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/jpeg
etag: "e3d8084b93abc0ca730b36734b30a5d4"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Thu, 06 Jun 2019 21:37:22 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="News_and_Events.jpg"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 6
x-varnish: 158133025
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: d4ce12e1f6154107
x-request-id: d9663bf6-bff0-4fba-8f08-d12bb27d502b
X-Firefox-Spdy: h2
www.ontapcu.org/assets/img/footer-background.png
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/img/footer-background.png
IP
GET /assets/img/footer-background.png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/assets/css/main.min.css?v=1675952903430
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:28 GMT
content-type: image/png
content-length: 689832
etag: "716b9f2ffcdbe404e0b3824aa94e3275"
expires: Fri, 17 Feb 2023 19:31:18 GMT
cache-control: public, max-age=0
last-modified: Thu, 09 Feb 2023 17:45:16 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="footer-background.png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 0
x-varnish-ttl: 259200.000
x-varnish: 163083905 97813073
age: 255729
x-varnish-hitmiss: HIT
x-varnish-count: 2582
via: varnish
accept-ranges: bytes
x-b3-traceid: 5be008b289111b8a
x-request-id: a98fef4c-0dcd-4683-85fc-ec91d3d734bb
X-Firefox-Spdy: h2
cdn.mouseflow.com/projects/cad5e0b1-047a-4f18-8176-ab563faee8b2_eu.js
200 OK 0 B URL HTTP/2 cdn.mouseflow.com/projects/cad5e0b1-047a-4f18-8176-ab563faee8b2_eu.js
IP
GET /projects/cad5e0b1-047a-4f18-8176-ab563faee8b2_eu.js HTTP/1.1
Host: cdn.mouseflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ontapcu.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 18:33:34 GMT
cache-control: max-age=86400
content-encoding: gzip
content-type: application/javascript; charset=utf-8
last-modified: Tue, 24 Jan 2023 09:48:13 GMT
accept-ranges: bytes
etag: "f97aa7f9d82fd91:0"
server:
x-hw: 1676918014.cds209.sk1.hn,1676918014.cds257.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/vUI04d4J/MicrosoftTeams-image%20(54).png
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/vUI04d4J/MicrosoftTeams-image%20(54).png
IP
GET /assets/files/vUI04d4J/MicrosoftTeams-image%20(54).png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "6a2dc3b7762618884f88896e2bf30644"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Tue, 31 Jan 2023 23:34:44 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="MicrosoftTeams-image (54).png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 210
x-varnish: 177754878
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: d596ad5458a638c2
x-request-id: e391a099-a48f-4096-826a-f4588dd498bd
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/7VYU1t6B/MicrosoftTeams-image%20(50).png
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/7VYU1t6B/MicrosoftTeams-image%20(50).png
IP
GET /assets/files/7VYU1t6B/MicrosoftTeams-image%20(50).png HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/png
etag: "5636cde6d8de3b33e291409bbc31afb7"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Wed, 30 Nov 2022 22:56:30 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="MicrosoftTeams-image (50).png"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 10
x-varnish: 147453526
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: 585ee90ce56a4a32
x-request-id: 6b8cb70a-94d3-4239-b329-18986b279ab6
X-Firefox-Spdy: h2
www.ontapcu.org/assets/files/56ngjizx/Copy%20of%20TEST%20-%20homepage%20(1).gif
200 OK 0 B URL HTTP/2 www.ontapcu.org/assets/files/56ngjizx/Copy%20of%20TEST%20-%20homepage%20(1).gif
IP
GET /assets/files/56ngjizx/Copy%20of%20TEST%20-%20homepage%20(1).gif HTTP/1.1
Host: www.ontapcu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ontapcu.org/
Cookie: PLAY_SESSION=61c522b509deb39b11b286c8afcb935f26615d4a-v=1; __bkp=10eab9d0-b14d-11ed-99f3-024237f64542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 18:33:27 GMT
content-type: image/gif
etag: "518778e72f4cbb360c14fb5dd6f94c33"
expires: Mon, 20 Feb 2023 18:33:27 GMT
cache-control: private
last-modified: Fri, 19 Mar 2021 21:12:06 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-disposition: filename="Copy of TEST - homepage (1).gif"
x-content-type-options: nosniff
strict-transport-security: max-age=16070400
x-envoy-upstream-service-time: 5
x-varnish: 157333334
age: 0
x-varnish-hitmiss: MISS
x-varnish-count: 0
via: varnish
accept-ranges: bytes
x-b3-traceid: edab329803b109c1
x-request-id: 1d1690e6-1b08-4e96-a030-4e29d744188b
X-Firefox-Spdy: h2
74.200.39.24
104.17.67.176
23.33.119.19
108.128.167.149
93.184.220.29
31.13.72.36