Report - www.wec-u.com/auth

Report Overview

Submitted URL
www.wec-u.com/auth
IP
52.72.49.79
ASN
#14618 AMAZON-AES
Submitted
2022-11-28 21:40:17
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.76.226
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.162.142.194
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	60 kB	34.120.237.76
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	517 B	18 kB	216.58.207.195
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	387 B	1.8 kB	142.250.74.10
www.wec-u.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	349 B	282 B	52.72.49.79
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.5 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
tremblayi.cf	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	14 kB	1.5 MB	162.240.35.239
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	2.1 kB	142.250.74.3

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2022-11-28	medium	www.wec-u.com/auth	Other

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-28	medium	www.wec-u.com/auth	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (0)

HTTP Transactions (53)

URL IP Response Size

www.wec-u.com/auth

52.72.49.79

301 Moved Permanently

0 B

URL HTTP/1.1
www.wec-u.com/auth
IP
52.72.49.79:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
phishtank	Other
fortinet	Phishing

HTTP Headers

GET /auth HTTP/1.1
Host: www.wec-u.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 28 Nov 2022 21:40:05 GMT
Content-Length: 0
Cache-Control: no-cache, no-store
Expires: -1
Location: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Engine: Rebrandly.redirect, version 2.1

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10127
Expires: Tue, 29 Nov 2022 00:28:53 GMT
Date: Mon, 28 Nov 2022 21:40:06 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5055
Cache-Control: max-age=137730
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 21:40:06 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:55:36 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3b56944f0e5716fd4fad2ec18994d4be
61cafa4de31ba960d1145ec37272f6f6b6944e0c
4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13770
Expires: Tue, 29 Nov 2022 01:29:36 GMT
Date: Mon, 28 Nov 2022 21:40:06 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 21:19:33 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1233
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 7FRiqsKDMVHZYj5ujQE57nyVNW1flda4znfuA78j4BK25lGKRVQ+madtfNpqQFPoUcIZDy8ca2wR7jcc0zah7Q==
x-amz-request-id: MKBR7BJVVENXRE5K
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 20:45:10 GMT
age: 3296
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 21:40:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4480
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 21:40:06 GMT
Last-Modified: Mon, 28 Nov 2022 20:25:26 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 21:08:55 GMT
cache-control: public,max-age=3600
age: 1871
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

push.services.mozilla.com/

35.162.142.194

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.162.142.194:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bat69VKJc1RdF74mYpxQnQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0obTT7yIDH6T3gQSXfQOC6BDBlk=

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/ConfigurableCSSProviderTheme3.aspx

162.240.35.239

200 OK

12 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/ConfigurableCSSProviderTheme3.aspx
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
12 B (12 bytes)
Hash
4ef8164712f6491c2848e861336987b5
696e0cbf2ef73abce3e738407a179cb77746df9f
9c8d0d8dc8633ab1a8324bcd19679616729360171fde33812b12c335938f45dc

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/ConfigurableCSSProviderTheme3.aspx HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 12
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
date: Mon, 28 Nov 2022 21:40:06 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13131
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:40:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13131
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:40:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13131
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:40:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13131
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:40:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13131
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:40:08 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10199 bytes)
Hash
2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:43 GMT
age: 85705
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8885 bytes)
Hash
3a1a4e00f1f15827cf651f373863c379
70c2a238f06ca7e56ef80c83738e081bf0de3330
3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEFSeIAMF3rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:11:39 GMT
age: 48509
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.4 kB (9430 bytes)
Hash
1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 85132
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8771 bytes)
Hash
b0bd385532089b45a14e461abbecc1af
3da359b1ba09138a425094715b9f3a2f8d0257fe
803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8771
x-amzn-requestid: 995d3904-9be1-4b40-9813-ff47e60639ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MEAPoAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-3fdb7958064e0c4b1aed2136;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vrBB4JkuL3nbZnDWitQ4dvTruO9M6hSt8mw9NuJliCmcNOw8xvfWhw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:20:34 GMT
age: 83974
etag: "3da359b1ba09138a425094715b9f3a2f8d0257fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6376 bytes)
Hash
78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 85122
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10119 bytes)
Hash
15bd53848c7082464273007e010c54e0
9a3ca698ca1aeae695923277ed2244465e01a1ea
36cfa29965173ea683992d4b436f393e92c978350347f869355d933613e2c005

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56d2fad-ed89-4d96-831f-7f8467b7079b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10119
x-amzn-requestid: 20bfd6a6-2981-42ca-8997-9363676773c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR782HEZIAMFTKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9eb-552581a92a69d6cd322bf334;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U_gitOWWMPO7M5Dd0WktaigfRERa93d86MhziLjZ2qnuON_K5NauyQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:54:37 GMT
age: 85531
etag: "9a3ca698ca1aeae695923277ed2244465e01a1ea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/Content.svg

162.240.35.239

200 OK

1.9 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/Content.svg
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
1.9 kB (1923 bytes)
Hash
2da84f8e9e18d58cb115fa01c26fcaa0
8bf156fbc340ccd31c21c7f30c086f0c5df3c05a
840fb8ee84c6ddf33946ec9501362cbbac17620c4f0c25f4e3eaa6a48a9596ac

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/Content.svg HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 1923
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: image/svg+xml
date: Mon, 28 Nov 2022 21:40:06 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/five9-social-widget-custom_2.0.css

162.240.35.239

200 OK

7.6 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/five9-social-widget-custom_2.0.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
7.6 kB (7560 bytes)
Hash
be26b7ff66f0ec91990277c0a446998d
7f0f203d453cebaf9faee27da8294dd9d85553ba
619743ad00efd1541fa2a660842fd618941f4fd1fc9dbbaeec351045991dc89c

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/five9-social-widget-custom_2.0.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 7560
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:06 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index

162.240.35.239

200 OK

31 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
data
Size
31 kB (30767 bytes)
Hash
2bc955624d652be42a08c49c8dd5a055
162d0d5d9571d044517a20ff866f643307b179c9
29c1fe37402c91db67e72778b73a7d9e7881dc42b7427f20d6212418859ff5bb

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/html; charset=UTF-8
date: Mon, 28 Nov 2022 21:40:05 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/desktop.css

162.240.35.239

200 OK

246 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/desktop.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
246 kB (246237 bytes)
Hash
024ae1dda365f4c5d84c46949fd83809
3d3989dc1ba82a44e8497a842b3d8822a79d4aed
b1c4a8f3729b8184eeef90545a8f173512723c81b2052092931aa88accd92bcc

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/desktop.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 246237
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:06 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/RadDockableObject.css

162.240.35.239

200 OK

2.1 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/RadDockableObject.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
2.1 kB (2105 bytes)
Hash
1a8244850eb3ae5a94862c4363f549b8
fd3f90fcb32e1ae287da38e9133c94bf423bc29e
926172c6f78bad8d437e449a3309ea0de03199f2bc0d2101899f3ce99df04f4b

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/RadDockableObject.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 2105
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:06 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/wecu-font.css

162.240.35.239

200 OK

6.6 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/wecu-font.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
6.6 kB (6615 bytes)
Hash
444f0816eb521d5f5da93e7418986974
6a44c2a108d8d4794b77edae50b50e73741bdc67
947d6c9aa292f5eb3aaccba495bb832c32701c9da21e6f0663cb62e14f73c9e0

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/wecu-font.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 6615
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:06 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css

162.240.35.239

200 OK

541 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
541 B (541 bytes)
Hash
25744a65291dbf2b59bb1c1b4557583e
8491f5f907f87904742f772764217abea6b45e3d
6f8041593bbd3e3815fc6371d3ad097cd158ad933f901dda3a2178da8d2124d4

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 541
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:06 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/five9-OLB.css

162.240.35.239

200 OK

1.2 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/five9-OLB.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF line terminators
Size
1.2 kB (1190 bytes)
Hash
7e2087d1afb565b01651b68cc41a9203
2794a69064605e1d8d519b46254d21a0e6db72d1
5775409702e6f8c48a95c181e376effa81d9748d4beaef09e9971c2b240574b0

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/five9-OLB.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 1190
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:06 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/desktop-vendors.css

162.240.35.239

200 OK

576 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/desktop-vendors.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CRLF, LF line terminators
Size
576 kB (576513 bytes)
Hash
15be195dda2aa815673d48c2c75da2bd
8c5458f289be5649869845df25e04e76e29ae375
b7f5c6a1d51fd194b2ad57fe67cd24a71ab933ca5cf273b3cf74b5966ac4c888

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/desktop-vendors.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 576513
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:06 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/assets/icons/wecu-custom.css

162.240.35.239

404 Not Found

315 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/assets/icons/wecu-custom.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/assets/icons/wecu-custom.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/wecu-font.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/bootstrap-datetimepicker.css

162.240.35.239

200 OK

9.0 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/bootstrap-datetimepicker.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
9.0 kB (9038 bytes)
Hash
0bca3d16b29eb93ae45901d13b5130f4
a993354ef5780115d097b9bac9d71a4a5dbd9883
6f964a0a2e79217fb6e09aa7eb7f1c3ffab735bda7971f8c1ffbcc32aac877a9

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/bootstrap-datetimepicker.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 9038
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 21:40:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/fullcalendar.css

162.240.35.239

200 OK

16 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/fullcalendar.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (15973)
Size
16 kB (16066 bytes)
Hash
96cda8d2e47c268081c161134b6ec616
d387250c99a602a2d3fa4a16bb12a5ffacd0be7a
4eedc337ee64c2b87397384d50cb8686dda1edc47a01180a7187a607dbb94b30

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/fullcalendar.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 16066
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans

142.250.74.10

200 OK

1.1 kB

URL HTTP/2
fonts.googleapis.com/css?family=Open+Sans
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
data
Size
1.1 kB (1074 bytes)
Hash
26ea1d1f82a6108f95e29cc091c8e7f5
da234bd226de57fe842002071414fe196d8bf9fd
90292feb5a42c12e2a6074567ef6a50d3bad7cf359a28267174662db478e0d87

HTTP Headers

GET /css?family=Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 21:40:10 GMT
date: Mon, 28 Nov 2022 21:40:10 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/animate.css

162.240.35.239

200 OK

75 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/animate.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
75 kB (75052 bytes)
Hash
346964e149ad49ccf4f3da77b66fa086
46fed2c46e1673370e619cb3a54ce8da46d0145e
75a33bdccbadc38c64bf09f76d24d7a1b3fdf61c0915169cc3e7d9b5b07405c5

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/animate.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 75052
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/toastr.css

162.240.35.239

200 OK

7.6 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/toastr.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (821)
Size
7.6 kB (7575 bytes)
Hash
6dd68d17e33a0641e9d576fd0e7b2827
717f24cc7bd8e272c8c9bc96a877eab392ad7bf8
1dedd01012a82ff9cc5e556ca0ced2d82da48c542a4b92fe9a003e17c2e91be5

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/toastr.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 7575
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/swiper.css

162.240.35.239

200 OK

20 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/swiper.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (19533)
Size
20 kB (19800 bytes)
Hash
1a1424b0f9a102a7c2bbc06871d4e4f9
9014b2fdf02d67947d2dd1c06df863ecbf672245
0c161dae3ec1c4a337b2531ea815565f6a2dc7bc787aaa074490ac483274371c

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/swiper.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 19800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/animation-9cda84472a.css

162.240.35.239

404 Not Found

315 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/animation-9cda84472a.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/animation-9cda84472a.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/common-c580ed2577.css

162.240.35.239

404 Not Found

315 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/common-c580ed2577.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/common-c580ed2577.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/modules-52c1e00bf0.css

162.240.35.239

404 Not Found

315 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/modules-52c1e00bf0.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/modules-52c1e00bf0.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/advance-8245a32dbf.css

162.240.35.239

404 Not Found

315 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/advance-8245a32dbf.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/advance-8245a32dbf.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/font-awesome.css

162.240.35.239

200 OK

174 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/font-awesome.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (65393)
Size
174 kB (173934 bytes)
Hash
289c05b5b5523f0beaf0b7e26a0fa505
856fa709ad39b724c0ec38a4f2c881193a18fce6
dfb1ac804c6d71e1299ebcd2629b843cbfe693ed9c08f229f3385db972486f2d

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/font-awesome.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 173934
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/react-tagsinput.css

162.240.35.239

200 OK

825 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/react-tagsinput.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
Unicode text, UTF-8 text
Size
825 B (825 bytes)
Hash
00d458deadc9b8ac564e01eea64a0d88
ac646c72f0f5bc588b83fa7814f593044c645fad
c8f4f067c141ce8cab1b06d306f2b617f4e0612a187a734e758f28df9af6e48f

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/react-tagsinput.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 825
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/advance-respond-c648698a83.css

162.240.35.239

404 Not Found

315 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/advance-respond-c648698a83.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/advance-respond-c648698a83.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/respond-b2d67aee5e.css

162.240.35.239

404 Not Found

315 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/respond-b2d67aee5e.css
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/rev/respond-b2d67aee5e.css HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/advance-main.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Mon, 28 Nov 2022 21:40:09 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 21:40:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2

216.58.207.195

200 OK

17 kB

URL HTTP/2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Size
17 kB (16740 bytes)
Hash
e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681

HTTP Headers

GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tremblayi.cf
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:53:39 GMT
expires: Tue, 28 Nov 2023 18:53:39 GMT
cache-control: public, max-age=31536000
age: 9992
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 21:40:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/favicon.ico

162.240.35.239

200 OK

1.2 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/favicon.ico
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
be76154a2376675c842b76523f080f1a
8e9446b2461d3858d47150c2b7fc08219e23ade3
7ed0b0720fabde35353377b4d94980686e7d674b38ae2aea41bc4d060f4e221a

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/favicon.ico HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/session_index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 1150
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: image/x-icon
date: Mon, 28 Nov 2022 21:40:10 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/header-bg-texture.png

162.240.35.239

200 OK

334 kB

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/header-bg-texture.png
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 1920 x 1224, 4-bit colormap, non-interlaced\012- data
Size
334 kB (333484 bytes)
Hash
99dc283659be6bc40f4717dabf0f173b
4f8f24e7ae239ac1590cd6ea3ec3ca10aa43d13f
546749d67f40489314e48feb0e7849961674c3d3791e625a2d24b0feb032add2

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/header-bg-texture.png HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/desktop.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 333484
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: image/png
date: Mon, 28 Nov 2022 21:40:10 GMT
server: Apache
X-Firefox-Spdy: h2

tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/we-watermark.svg

162.240.35.239

200 OK

378 B

URL HTTP/2
tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/we-watermark.svg
IP
162.240.35.239:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (376), with CRLF line terminators
Size
378 B (378 bytes)
Hash
0bf7eed2fe6aa94948d3a50beca6df4a
cd3e20f9aa05d5919d33c7558e31faa7c89013a9
56409e10cde571d31ad67dd8c02fd43025fba63fb23019a4e12ba2d30e0129f4

HTTP Headers

GET /tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/we-watermark.svg HTTP/1.1
Host: tremblayi.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tremblayi.cf/tt/WECU%5bMRWEEBEE%5d/02720255472d9f8727e4ff605e0fd31b/ses/files/desktop.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 28 Nov 2022 19:16:39 GMT
accept-ranges: bytes
content-length: 378
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: image/svg+xml
date: Mon, 28 Nov 2022 21:40:10 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (0)

HTTP Transactions (53)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type