s9790149192729.ignaciob.com/track/click/v2-130968075
301 Moved Permanently 162 B URL HTTP/1.1 s9790149192729.ignaciob.com/track/click/v2-130968075
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET /track/click/v2-130968075 HTTP/1.1
Host: s9790149192729.ignaciob.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 28 Jan 2023 19:16:00 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://ignaciob.com/track/click/v2-130968075
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10196
Expires: Sat, 28 Jan 2023 22:05:56 GMT
Date: Sat, 28 Jan 2023 19:16:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16664
Expires: Sat, 28 Jan 2023 23:53:44 GMT
Date: Sat, 28 Jan 2023 19:16:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19159
Expires: Sun, 29 Jan 2023 00:35:20 GMT
Date: Sat, 28 Jan 2023 19:16:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 18:43:06 GMT
content-type: application/json
age: 1975
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mcdkvGbHuR7qwcibakZDcDZDzE1I7iBa6I1WlFDtsRxgqFRbqj+ObHgfmQ2Tth+7HHcRKSXPRDc=
x-amz-request-id: KKV2BD72HMAC2V5B
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 18:21:04 GMT
age: 3297
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 19:16:01 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash b308b4ff206c51ec8cd4dfafc6322ecb
ca5a6d841d342e41ae3a068d139574f562ea91b0
9810fc86f7fc48ce4ef679f37d3b0e4f584cf500bf9f58bd47a8c482389cad34
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:16:01 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 17:18:49 GMT
Expires: Thu, 02 Feb 2023 17:18:48 GMT
Etag: "ca5a6d841d342e41ae3a068d139574f562ea91b0"
Cache-Control: max-age=424366,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790c0f64287f0b39-OSL
ignaciob.com/track/click/v2-130968075
301 Moved Permanently 572 B URL HTTP/1.1 ignaciob.com/track/click/v2-130968075
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 748b278b06e079dae090d47ea672655e
2c856e02f47d906b7c9a9013255dc4e451ef2b65
1979abd32afb832254cf555f1dbe4cc76edbbe4350f6daa5c73c6f88d6c695bd
Analyzer Verdict Alert fortinet Phishing
GET /track/click/v2-130968075 HTTP/1.1
Host: ignaciob.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 28 Jan 2023 19:16:01 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 572
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Cache-Control: private, must-revalidate
Location: http://internal.thisisdeploy.com/file.html?cbbbbccczttccxKxZcGcT8ctc51rFckzFcbbbbc
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImRpWWxUeFZPNDhHeWJ0UU4wNnV6d2c9PSIsInZhbHVlIjoiSGxydllGZHFpb0RjWDZaOXM2YTNcL0lIWXZ0cnd0cFwvcUVZSnBUb2dPZGtBSndmeUlNclZVZTNjSzZKaUY3R3hJOVJtY05ybVE1cjRwaFQ5RzBqZFpwdz09IiwibWFjIjoiNWQyZGI2N2FiZTg5MWRkN2FkZWU4YWZiMzNiNGM0M2U4YWZlOWM4ZDMwODBjNzRkODRhZjRkYmQ0NDI5MGQ2YyJ9; expires=Sun, 29-Jan-2023 03:16:01 GMT; Max-Age=28800; path=/; secure
snov_io=lErg1vsUJfoo974FSbgm7YE5ZkcA7gUE3Ug2nX4B; path=/; secure; HttpOnly
lang=eyJpdiI6ImFCSmd1eGdzTTZ3ZDlndHVRQ3RXTHc9PSIsInZhbHVlIjoiVmpjR0Z1NjZYbGQ1YVh2eWZXUTBpZz09IiwibWFjIjoiYmRhOTNkZDg2Y2YzODhkNmFhZjQwZGEzMDkxYzg0MzczODIyMGJjNzljZDhkMTFjNWJiZTNlZGQ2Njc3NmM2MyJ9; expires=Thu, 27-Jan-2028 19:16:01 GMT; Max-Age=157680000; path=/; secure; HttpOnly
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 18:41:40 GMT
age: 2061
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16721
Expires: Sat, 28 Jan 2023 23:54:42 GMT
Date: Sat, 28 Jan 2023 19:16:01 GMT
Connection: keep-alive
internal.thisisdeploy.com/file.html?cbbbbccczttccxKxZcGcT8ctc51rFckzFcbbbbc
302 Found 0 B URL HTTP/1.1 internal.thisisdeploy.com/file.html?cbbbbccczttccxKxZcGcT8ctc51rFckzFcbbbbc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /file.html?cbbbbccczttccxKxZcGcT8ctc51rFckzFcbbbbc HTTP/1.1
Host: internal.thisisdeploy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 28 Jan 2023 19:16:01 GMT
Server: Apache
Location: https://lovetrayn.com/ff07aac7d0d608e000/35_20002_2634683/2421_2853501_3716006_15/1_91-90-42-154
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: W1FqF/TKmjQDk2IsS6wpMA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JcUli3j1SnaPaq7JMfgHk7dibfU=
ocsp.sectigo.com/
200 OK 472 B IP
Hash a6ac873c546c08539a1e389c7f68aec2
92a3ddc02949ee849e7f10f167ba699320c060d1
c1e1dd6dce5089b862ff0d12d1ff265416107b9e9fe1a4bbf48d027d0ed061e5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:16:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 27 Jan 2023 18:43:11 GMT
Expires: Fri, 03 Feb 2023 18:43:10 GMT
Etag: "92a3ddc02949ee849e7f10f167ba699320c060d1"
Cache-Control: max-age=515827,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790c0f6b3fe40b39-OSL
lovetrayn.com/ff07aac7d0d608e000/35_20002_2634683/2421_2853501_3716006_15/1_91-90-42-154
200 OK 160 B URL HTTP/1.1 lovetrayn.com/ff07aac7d0d608e000/35_20002_2634683/2421_2853501_3716006_15/1_91-90-42-154
IP
File type HTML document, ASCII text, with no line terminators
Hash ae48e1f252758264a7a9eb8e3df72cf3
1d44545f0577baa1312bf48928f78db8a9fb1db5
0d4b7f142f8489c7ca9c33cafc9b8685e5706830c7011212ad938623f5224282
GET /ff07aac7d0d608e000/35_20002_2634683/2421_2853501_3716006_15/1_91-90-42-154 HTTP/1.1
Host: lovetrayn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 19:16:02 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 160
Server: Apache
Set-Cookie: uid22124=1325309607-20230128131602-df4c4c4f049bb0ec639965ed621cacd1-; domain=; expires=Sat, 28-Jan-2023 20:16:02 GMT; path=/; SameSite=None; Secure
montrealintc.com/r/88689171-7af5-4a57-ac68-14935a740c06/470447/1325309607/35_20002_2634683
200 OK 713 B URL HTTP/1.1 montrealintc.com/r/88689171-7af5-4a57-ac68-14935a740c06/470447/1325309607/35_20002_2634683
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7bf0b1b2d34bab70951b5d91794edea1
90cc98629659d687d086e75460fb2a19211751bd
a5dde478264d70d394bbd4fd525402fd0074e2bd549ce268e01bdf1aa4b5c35e
GET /r/88689171-7af5-4a57-ac68-14935a740c06/470447/1325309607/35_20002_2634683 HTTP/1.1
Host: montrealintc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 19:16:03 GMT
Content-Type: text/html
Content-Length: 713
Connection: keep-alive
Cache-Control: no-cache
Expires: Sat, 28 Jan 2023 19:16:03 GMT
set-cookie: 20c0b1dd-30ac-4d22-9719-d9b3ad790930=372919bd-1465-4425-8326-473d901a2168; Version=1; Domain=montrealintc.com; Expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; Path=/
20c0b1dd-30ac-4d22-9719-d9b3ad790930-check=372919bd-1465-4425-8326-473d901a2168; Version=1; Domain=montrealintc.com; Expires=Sat, 28-Jan-2023 19:26:03 GMT; Max-Age=600; Path=/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5428
Expires: Sat, 28 Jan 2023 20:46:31 GMT
Date: Sat, 28 Jan 2023 19:16:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5428
Expires: Sat, 28 Jan 2023 20:46:31 GMT
Date: Sat, 28 Jan 2023 19:16:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5428
Expires: Sat, 28 Jan 2023 20:46:31 GMT
Date: Sat, 28 Jan 2023 19:16:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 76757
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5428
Expires: Sat, 28 Jan 2023 20:46:31 GMT
Date: Sat, 28 Jan 2023 19:16:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 18:36:06 GMT
age: 2397
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4afa01d2ffe17f8378e4c0b5afd4608
f5c7e2137efa07a207427a6b6fe1df541f85ea25
84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13375
x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CxF6BoAMFyGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yEFlWGi3J14JLA0l2h02VlIqV8opHesKP6GOvfoP5Tp0m7dOYDxIGA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:59:32 GMT
age: 76591
etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1WE1zQwrCGVy8HLT9_BFkAr6rQE_ROyttMOByR32KeT0w2Hd_ylvYQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:16:00 GMT
age: 75603
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c982569d070f24dba1259603091c22e3
0f93acb5bee53670cc4ef486922f7333d96a2f4e
9a5a2d8a181a763ee6f60c27b396a0e3d7b1527e5177b2aff8d511db250753ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4975
x-amzn-requestid: 633350b7-4686-40d5-8c9d-3c097f8e2d34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-EBGuaoAMFbSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b3-4201212c1a0eb2a65d3f494c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XRAeWdoEkbnzXKOs_EdgQ1r9BGOeDNh4FRXm-fv0KiCz4juqk8UKIw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:59:35 GMT
age: 76588
etag: "0f93acb5bee53670cc4ef486922f7333d96a2f4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ed1a0bd725b2078b4cfe4ed83877901
62493ca03be9870aac2341e033611a6d56bd322a
706e84bc63fd98acaeb72789239af3210ae6e3910e6589d92a25899dc9059dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12397
x-amzn-requestid: e8436997-696d-483a-b03a-a84e7ca614ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T5HbzoAMFXsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-1c2ccd0a187d0a3e2f6a59cc;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lmLHc8fKQYUpq9B-GyOQ0FKzhxi0ToTEPA7cu6JnQftgDFDNV8USvw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:37 GMT
age: 76766
etag: "62493ca03be9870aac2341e033611a6d56bd322a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
montrealintc.com/r2/88689171-7af5-4a57-ac68-14935a740c06/470447/1325309607/35_20002_2634683/372919bd-1465-4425-8326-473d901a2168/?fctr=0
302 Found 137 B URL HTTP/1.1 montrealintc.com/r2/88689171-7af5-4a57-ac68-14935a740c06/470447/1325309607/35_20002_2634683/372919bd-1465-4425-8326-473d901a2168/?fctr=0
IP
File type ASCII text, with no line terminators
Hash 7bd4e77bb7c4aa57233b3d62ff23ef66
6f7f5bac216f7e5bfebbb032c2f928a1d6188514
3b7474f432ad289e77245bfdbace55d6f9d3e52f44350e627d510bb84b5aac52
GET /r2/88689171-7af5-4a57-ac68-14935a740c06/470447/1325309607/35_20002_2634683/372919bd-1465-4425-8326-473d901a2168/?fctr=0 HTTP/1.1
Host: montrealintc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://montrealintc.com/r/88689171-7af5-4a57-ac68-14935a740c06/470447/1325309607/35_20002_2634683
Cookie: 20c0b1dd-30ac-4d22-9719-d9b3ad790930-check=372919bd-1465-4425-8326-473d901a2168
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 28 Jan 2023 19:16:03 GMT
Content-Length: 137
Connection: keep-alive
Cache-Control: no-cache
Expires: Sat, 28 Jan 2023 19:16:03 GMT
Location: https://kathaamqi.com/sf/tpl9?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
set-cookie: 20c0b1dd-30ac-4d22-9719-d9b3ad790930=372919bd-1465-4425-8326-473d901a2168; Version=1; Domain=montrealintc.com; Expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; Path=/
ocsp.pki.goog/s/gts1p5/LLURyKzrGu8
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/LLURyKzrGu8
IP
Hash 1acd3aa93529c10f18fb0a89f15e5ee9
e30673429a47823ec800d3bc6e6e7b335bce0084
1b1bcfe6797652d4dfb7c2f9b265acfd17f0f41cdfe33002de00f1c3583a66ad
POST /s/gts1p5/LLURyKzrGu8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:03 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
301 Moved Permanently 0 B URL HTTP/1.1 kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168 HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://montrealintc.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 28 Jan 2023 19:16:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 28 Jan 2023 20:16:03 GMT
Location: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1ssG5x4xX9OuP2badeAKMKVfBBkGRvZF5YSFKhojHobeOSQssI82%2Fk22Fah7Fzg9RS1g2YT9Ap3Wcz4UEIAOxZZ8w3VP3qrUa0tH9RsaIJya59qlPnLabY8y02Lkd9PT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790c0f74ba920b51-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/s/gts1p5/LLURyKzrGu8
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/LLURyKzrGu8
IP
Hash 1acd3aa93529c10f18fb0a89f15e5ee9
e30673429a47823ec800d3bc6e6e7b335bce0084
1b1bcfe6797652d4dfb7c2f9b265acfd17f0f41cdfe33002de00f1c3583a66ad
POST /s/gts1p5/LLURyKzrGu8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:04 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d45e4036ad4a742751f256b53054a5db
3854359e843d7dd78c9dba3b83ebc9a7318f0af7
f660df4eb1067c10301e0b0272bdd3437a70f8b0556eee236dd4cd5c8727e4f2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4317
Cache-Control: max-age=151364
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:04 GMT
Etag: "63d50fdb-1d7"
Expires: Mon, 30 Jan 2023 13:18:48 GMT
Last-Modified: Sat, 28 Jan 2023 12:06:51 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
kathaamqi.com/sf/tpl9/public/img-11.png
200 OK 2.3 kB URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-11.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3\012- data
Hash 330f92cd5307e33d2ce527894ddd43b6
f9bcd5d5afc9b8fc4dc3357ae88e548fd06b8023
0ca3bcdc244a011cff113f873678ee9de68479a7f6c7f360b171c3edbc96dd1a
GET /sf/tpl9/public/img-11.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 2282
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-8ea"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=REkK8ea0jq7ENmozR1zlobvKZ61OhRBM7DbcUG8f0Anj8FqQrNglaOKu0eNLCv5x13N8UCO1yAMVDiB7IW%2BO4ftW624Cxgx3gJK0dHM4FC54D7CtErm053HzZoI9yW37"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f756ef5b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/img-4.png
200 OK 2.5 kB URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-4.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3\012- data
Hash 32ac4d03af0ed3e0ecae362ee2aa7283
d76aaf7afd7e64b85bf3f6cd92530150ebbd3b62
4ba90609efbf3e11565b8b9005e57d80f53a8837ce693c9023ccb0626461d212
GET /sf/tpl9/public/img-4.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 2542
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-9ee"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t6P1QpaXPQtlDakDpT4KWtXJmJwSkGduQec2prqzIBS1T%2FrjaaUBgCBLlS%2BrLfRQQrXyxfUJS%2FOmQwQtmha7EsmHiHYGS1PlXlmqpZp%2FT%2BFMrL6OQaeMTfJMmKN76DaC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f755edcb4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/img-7.png
200 OK 3.0 kB URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-7.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3\012- data
Hash 159416e360a1ce596be4d73ada5f77e9
d86a4c7144208366d5fb501eb92106043b86995c
01ff0a6dfebce308d517e495941065eb38cc8b37a7b2bf67df272aea25f69c40
GET /sf/tpl9/public/img-7.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 2997
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-bb5"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eC2gWtVfeS30Uva5m4Fa3JIh12clbAYFfcbSBBw6MNNMrhcIoZ8qfpzYnFO1YpPsdHkVQJ1BBEDE33RVNtwrNPxbbgwaHaXI61HaEVX%2FW3Qp1Le7jsckyeQSlA8Rn4rq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f755ee3b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/img-9.png
200 OK 3.3 kB URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-9.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3\012- data
Hash 496770fecdcf0a823ea2897217f288e9
c05e944b516786a6df67aa923e0170f7c8e86921
18f551911c68e079ef629648f47ad743c99d47e9d5c0d5a475c7392a1f0ab248
GET /sf/tpl9/public/img-9.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 3286
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-cd6"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q%2BB5qh6M27YQF5qxNoP3znpLxHl4TF3d6%2Fvl5EC3kdx1wGGpnYPMZssZbdts6ClzXmXtjwHtPjzciHWmbikUkjsJl43wVjdtThdeW%2FlB0CeM9WADVsq22A6V%2FNAIAJPB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f756ee6b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/img-5.png
200 OK 1.7 kB URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-5.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 0428b5a2aafda85bbb3280c79964889b
52df4811b00444751d8e0a906c55e7b9270941d4
fba1dafda080b2bf2c0074fc8eb29203c48f2afa916065df41a0a76e48f63987
GET /sf/tpl9/public/img-5.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 1691
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-69b"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5c0kCYUKD%2FYEv%2FndSIkKdhURwGwLmFEYMCrlrR4FRZjuIBqSZd0xMn1yOABEBKhUpNunmu4zi%2BaMUwRZhuPd03PtD7gPK%2BTZVd4NW%2BYH%2BFSwrtJwZknXEJU%2FsJdTwpvu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f755edfb4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/img-10.png
200 OK 1.3 kB URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-10.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 14a7d17c53d16fd6d9d66e3844247750
e8227dbc4382eefa102ebe557e440a0b3895da1a
9b17d1bc53a49edcab5f29c232dde056d8ad18b6c948ad908134b64130eb2606
GET /sf/tpl9/public/img-10.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 1292
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-50c"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IOsYuyZ25vjI7vqkEwUegG5cgLjmLO10aLWFO2%2F49D39RHQ7sS4gBzmmz6a5kq8Vp75X8aL4FzpEsw3UXpdXsJasV%2BDwPuU5f8wzAmDzJ%2Ffqlqffxm5rukWjCTiia24X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f756ee8b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/img-6.png
200 OK 2.5 kB URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-6.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3\012- data
Hash e5e3b6f514e114a415e560f88d5920c0
3488d33614eafc14866d4d5c575dbd2be6099c3a
182600ef12499261e2e971331530eb1caacd6c2106c4c864d158ac9c4a9a2327
GET /sf/tpl9/public/img-6.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 2491
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-9bb"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=95%2F93rmIFA08f3TIWgI521aozG2uW1i5yyA%2BkhYCOVCvRMytdTbd15XQou4pgR7xEiHmPfRCPPCJTSQ6%2BpTPc2tnZMCj%2FO3F4%2FoB1phXyQzU1FpGTPd6mMUiZvNOGy5X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f755ee2b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/img-8.png
200 OK 3.7 kB URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-8.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3\012- data
Hash 9c2fa32775fffdebf00733ec18e3e341
e25e89f113c335ea1c2c4c4586844fd7d1727d28
845a5200eb01a02833e74b09ab84d6ec2aab5ee16211ee1a31b7eb6a4bb61ecc
GET /sf/tpl9/public/img-8.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 3700
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-e74"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ajK1qo%2BfTAtJD%2BTjHMA4%2F8lrSfVFisP1Bz6Pf1xSBvzGCTtuQIsp8KGon3EuQ7cQdfpEBczOFoZLI17TnZY%2FV0IXtUvJEK%2B4QUSY6nyxEZ3e2Lu5s8fK6AgBMlFN6JFt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f756ee5b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/img-12.png
200 OK 875 B URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-12.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 40x40, components 3\012- data
Hash 5c6543cc0c9a84d141405bf0dfbc570f
4d43ff3884fa8edcb9adfa053525e912bb1baa2f
73cb358bf47ed149f8fd7e3eada678166cfab77538c313ba72cb6e38d13253fa
GET /sf/tpl9/public/img-12.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 875
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-36b"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8KBWd4hd5wyz%2BjibOQ%2BTI6pbvJdat65k9XVQMGT5Umu4hdokzqI7hL55Ndvy1eq02xtF%2F%2F%2BXB3DGFF%2FgKbteAgBxhQ5GRwv2qdWQAcghu9ZBq88w%2BaSWpZcOFzT4lZxx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f756ef6b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/img-3.png
200 OK 2.9 kB URL HTTP/2 kathaamqi.com/sf/tpl9/public/img-3.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3\012- data
Hash 3bff8ec56932f1b81cc4b04844f06f31
c2393919f9f1900783aaf770bb9535d264f5d408
b0c40a3ef77aea7e48c710fa701af1d074224846ebf30cd9d82b7596c15da2c1
GET /sf/tpl9/public/img-3.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 2891
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-b4b"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F2zmVNvYk11DTN06cHugE5V6GUYUOSe%2B57nfTZKGioYhBTlekTYBrkNpu%2FKnTA6cpCT7t%2FLZ%2F5HwzZUjj6kujcAg0heb22xltdZAG2rB4tg%2Fn%2F7VO0s%2FrucgQN6ImhZT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f755ed3b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/public/like.png
200 OK 466 B URL HTTP/2 kathaamqi.com/sf/tpl9/public/like.png
IP
File type PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d9c764991a1ebba259ce1afc777c756
fedbba216589a0a40fabb2e0cb24911e663e679e
7adac1888791ad42f547c97c9c9dad37faee15dfb5e76f20eabc8a0a0b6168e9
GET /sf/tpl9/public/like.png HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: image/png
content-length: 466
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: "63b6ed5f-1d2"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F%2BIQelk%2F%2FzZAkprrdhY%2FxNIzVTw7k5YFrobTCpcc9%2F3AHioZehsaAGhBkTG%2B6PcqGpJO5nEWPfSfPQY7xoFersh8aNjJ0Vgd9Bxu0jrTSxoPjtfvBDPIaTBCN7LSb5PA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f755ed6b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-148357412-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-148357412-1
IP
File type ASCII text, with very long lines (1759)
Hash 4d2a9504d87d39f597d6ff807df23698
d45986e2d403ad9683a3d11aebf85b54ddc8acbb
40e3d5d5c6461f97d9fadb8935d2a94f3ef9877156af034c3ece9c2fae8d0b69
GET /gtag/js?id=UA-148357412-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 28 Jan 2023 19:16:04 GMT
expires: Sat, 28 Jan 2023 19:16:04 GMT
cache-control: private, max-age=900
last-modified: Sat, 28 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44022
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 36147c185553851c38547798733a9fb2
912ec40237eae2ed558d09103c86c41f87896eca
a4fd9090983c75e1b7faf5ea9439532f51d747faf1853138ac13bdaafa490246
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c630e9bbc930d1c367efa81b67be3f7
ec536695531d40a813d99a06271c7c2d698d51d3
39ca0a60c3e2e85712757ead0830d0da82beac1e4f44b6e90243e5ca9326bf4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7da8f9a23d8c05f64f248e4e3427c76e
e2d001c2909cd9403173cbb0e288d55fbc8e4d0a
db8790004124a0eeb0676860170ad9c37250b2ba697a27dee62c99b64c67b4b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 4ad581a7579c5232883b194a222ce3b0
14f05e0801ac8b45d9415a1178d7673180b9a5cb
3eadcb852c99f4eba54e89adcde01fddd2de23f32ca7900e08591bc1ce9fe394
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3EADCB852C99F4EBA54E89ADCDE01FDDD2DE23F32CA7900E08591BC1CE9FE394"
Last-Modified: Thu, 26 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6115
Expires: Sat, 28 Jan 2023 20:57:59 GMT
Date: Sat, 28 Jan 2023 19:16:04 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 4ad581a7579c5232883b194a222ce3b0
14f05e0801ac8b45d9415a1178d7673180b9a5cb
3eadcb852c99f4eba54e89adcde01fddd2de23f32ca7900e08591bc1ce9fe394
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3EADCB852C99F4EBA54E89ADCDE01FDDD2DE23F32CA7900E08591BC1CE9FE394"
Last-Modified: Thu, 26 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6115
Expires: Sat, 28 Jan 2023 20:57:59 GMT
Date: Sat, 28 Jan 2023 19:16:04 GMT
Connection: keep-alive
kathaamqi.com/sf/tpl9/js/9.e896a8b2.chunk.js
200 OK 180 kB URL HTTP/2 kathaamqi.com/sf/tpl9/js/9.e896a8b2.chunk.js
IP
File type Unicode text, UTF-8 text, with very long lines (64909)
Size 180 kB (179623 bytes)
Hash c70b9cc7f3a160b4de5b3f49527f6283
c0079a7e2a517c4520e591fdd5230a1cf7629a22
33d1ed7e3789f181a9b2bfd5c8c4e24dd9ea1ebd2ed420ae7a550fcdaa9068be
GET /sf/tpl9/js/9.e896a8b2.chunk.js HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: application/javascript
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: W/"63b6ed5f-51cd6"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6ziXfPXJ4SLET3zBcpvkGI2spXfWiwR8NKmWA5Mz%2BTHzI4r5LarxKaMSko4Q2Nj8IVHfvSVY2ZvhEuufkkYM3U60hmz388YtrzSS69NvW8erVlcHooRJl9XZuRtrSS6x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f756ef7b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 28 Jan 2023 17:46:59 GMT
expires: Sat, 28 Jan 2023 19:46:59 GMT
cache-control: public, max-age=7200
age: 5345
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 36c104c867db7e6c807851dcc58388d9
8d685ff373700dd9b1d4f85bd00116b230914d5e
d4373b94608e3762de5f5c97c8ac2898c1c981f8b64541641c9afd5e7c686ad1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D4373B94608E3762DE5F5C97C8AC2898C1C981F8B64541641C9AFD5E7C686AD1"
Last-Modified: Sat, 28 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 29 Jan 2023 01:16:04 GMT
Date: Sat, 28 Jan 2023 19:16:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 36c104c867db7e6c807851dcc58388d9
8d685ff373700dd9b1d4f85bd00116b230914d5e
d4373b94608e3762de5f5c97c8ac2898c1c981f8b64541641c9afd5e7c686ad1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D4373B94608E3762DE5F5C97C8AC2898C1C981F8B64541641C9AFD5E7C686AD1"
Last-Modified: Sat, 28 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 29 Jan 2023 01:16:04 GMT
Date: Sat, 28 Jan 2023 19:16:04 GMT
Connection: keep-alive
www.google-analytics.com/j/collect?v=1&_v=j99&a=1673830724&t=pageview&_s=1&dl=https%3A%2F%2Fkathaamqi.com%2Fsf%2Ftpl9%2F%3Fitem%3DARFC%26logo%3Dtotal%26session_id%3D6cd0c7e7-cc02-40a0-9c63-c1702c6e60d5%26sub1%3D6JQU%26sub2%3D470447%26sub3%3D372919bd-1465-4425-8326-473d901a2168&dr=http%3A%2F%2Fmontrealintc.com%2F&ul=en-us&de=UTF-8&dt=Total&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=324535801&gjid=1399449358&cid=1880246928.1674933369&tid=UA-148357412-1&_gid=1557507326.1674933369&_r=1&_slc=1>m=2ou1p0&z=789534816
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1673830724&t=pageview&_s=1&dl=https%3A%2F%2Fkathaamqi.com%2Fsf%2Ftpl9%2F%3Fitem%3DARFC%26logo%3Dtotal%26session_id%3D6cd0c7e7-cc02-40a0-9c63-c1702c6e60d5%26sub1%3D6JQU%26sub2%3D470447%26sub3%3D372919bd-1465-4425-8326-473d901a2168&dr=http%3A%2F%2Fmontrealintc.com%2F&ul=en-us&de=UTF-8&dt=Total&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=324535801&gjid=1399449358&cid=1880246928.1674933369&tid=UA-148357412-1&_gid=1557507326.1674933369&_r=1&_slc=1>m=2ou1p0&z=789534816
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=1673830724&t=pageview&_s=1&dl=https%3A%2F%2Fkathaamqi.com%2Fsf%2Ftpl9%2F%3Fitem%3DARFC%26logo%3Dtotal%26session_id%3D6cd0c7e7-cc02-40a0-9c63-c1702c6e60d5%26sub1%3D6JQU%26sub2%3D470447%26sub3%3D372919bd-1465-4425-8326-473d901a2168&dr=http%3A%2F%2Fmontrealintc.com%2F&ul=en-us&de=UTF-8&dt=Total&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=324535801&gjid=1399449358&cid=1880246928.1674933369&tid=UA-148357412-1&_gid=1557507326.1674933369&_r=1&_slc=1>m=2ou1p0&z=789534816 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://kathaamqi.com
Connection: keep-alive
Referer: https://kathaamqi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://kathaamqi.com
date: Sat, 28 Jan 2023 19:16:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap
200 OK 397 B URL HTTP/2 fonts.googleapis.com/css2?family=Lato:wght@400;700;900&display=swap
IP
Hash 0445eb0dfaaa4bc6732e0f561d7de6d3
f5b7ef86a7b490756565bb09f6e786c334ad2710
5986d508e683be29ab6bd268570e5942cea3f238b1637bcf6fc61950c65cc71f
GET /css2?family=Lato:wght@400;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 28 Jan 2023 19:16:04 GMT
date: Sat, 28 Jan 2023 19:16:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/js/app.28f94100.js
200 OK 122 kB URL HTTP/2 kathaamqi.com/sf/tpl9/js/app.28f94100.js
IP
File type Unicode text, UTF-8 text, with very long lines (65506), with no line terminators
Size 122 kB (122089 bytes)
Hash 26ec83ec690e402af0e0ffa71b58c17d
d8c7f6403a622b14d7d81b3a1fe1eaeda3a84932
40e109ae2f2904254445549335e3c0b3e0de6d708168d8af04a61a3170906371
GET /sf/tpl9/js/app.28f94100.js HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: application/javascript
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
etag: W/"63b6ed5f-9bf44"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vHBYPAUnzMur2OavpI%2FYDIO82D07OPBMinVeAL0yMa5mdQ5F%2Fky3Ewgtws9FnbZOJznfZh16Kk9CHyN%2B9fU2tARGvLPtEx2Zk%2Fk49iOjoVkNs7%2FYAUVVH0V5gtHoLgN3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f756ef8b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-148357412-1&cid=1880246928.1674933369&jid=324535801&gjid=1399449358&_gid=1557507326.1674933369&_u=YEBAAUAAAAAAACAAI~&z=735520495
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-148357412-1&cid=1880246928.1674933369&jid=324535801&gjid=1399449358&_gid=1557507326.1674933369&_u=YEBAAUAAAAAAACAAI~&z=735520495
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-148357412-1&cid=1880246928.1674933369&jid=324535801&gjid=1399449358&_gid=1557507326.1674933369&_u=YEBAAUAAAAAAACAAI~&z=735520495 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://kathaamqi.com
Connection: keep-alive
Referer: https://kathaamqi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://kathaamqi.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 28 Jan 2023 19:16:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pushserve.xyz/api/v1/visit
200 OK 0 B URL HTTP/2 pushserve.xyz/api/v1/visit
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/visit HTTP/1.1
Host: pushserve.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://kathaamqi.com/
Origin: https://kathaamqi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
access-control-allow-headers: content-type
access-control-allow-origin: *
set-cookie: TiPMix=81.85990942765437; path=/; HttpOnly; Domain=pushserve.xyz; Max-Age=3600; Secure; SameSite=None
x-ms-routing-name=self; path=/; HttpOnly; Domain=pushserve.xyz; Max-Age=3600; Secure; SameSite=None
content-length: 0
X-Firefox-Spdy: h2
pushserve.xyz/api/v1/visit
200 OK 1.5 kB URL HTTP/2 pushserve.xyz/api/v1/visit
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (1468), with no line terminators
Hash b38ff629dcf8907e9723c0278ffda09d
96b491d61a9856fe0e2dff6e905a8bc88e24cf1e
202d39d956b0e427326484326ff642585e4bb9ff9168c4211976667f47f4970e
POST /api/v1/visit HTTP/1.1
Host: pushserve.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kathaamqi.com/
Content-type: application/json
Origin: https://kathaamqi.com
Content-Length: 462
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 28 Jan 2023 19:16:04 GMT
server: Kestrel
access-control-allow-origin: *
set-cookie: TiPMix=99.465267888737; path=/; HttpOnly; Domain=pushserve.xyz; Max-Age=3600; Secure; SameSite=None
x-ms-routing-name=self; path=/; HttpOnly; Domain=pushserve.xyz; Max-Age=3600; Secure; SameSite=None
content-length: 1468
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 622311873d3819b9911301b09bc2d43c
9f08d648e40479aa12da033da15b80a15017c739
6138674cec17da8b7bb02bf0686bf3e7aefa2bce6a5f844ebd80e10b665818b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-148357412-1&cid=1880246928.1674933369&jid=324535801&_u=YEBAAUAAAAAAACAAI~&z=1515907418
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-148357412-1&cid=1880246928.1674933369&jid=324535801&_u=YEBAAUAAAAAAACAAI~&z=1515907418
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-148357412-1&cid=1880246928.1674933369&jid=324535801&_u=YEBAAUAAAAAAACAAI~&z=1515907418 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 28 Jan 2023 19:16:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
beacon.kathaamqi.com/s/957dd2e9-89fb-4fa9-b683-c42d58cbbde4?&requestid=XTbl39KJRd&destinationid=495645087&item=ARFC&logo=total&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
200 OK 236 kB URL HTTP/2 beacon.kathaamqi.com/s/957dd2e9-89fb-4fa9-b683-c42d58cbbde4?&requestid=XTbl39KJRd&destinationid=495645087&item=ARFC&logo=total&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
IP
ASN #14061 DIGITALOCEAN-ASN
Size 236 kB (235646 bytes)
Hash c671b9bc0c900707d646b90fe0747a89
f5c50b36990ac1081270e3625c2dd7c488b98ceb
2647255355753f1e2bda124f7169fac264b5b58bfc76266b0b36e29342dee929
GET /s/957dd2e9-89fb-4fa9-b683-c42d58cbbde4?&requestid=XTbl39KJRd&destinationid=495645087&item=ARFC&logo=total&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168 HTTP/1.1
Host: beacon.kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kathaamqi.com
Referer: https://kathaamqi.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=2592000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, PATCH, HEAD
access-control-allow-credentials: false
access-control-allow-headers: Origin, Accept, Cache-Control, If-Modified-Since, Keep-Alive, Range, DNT, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ef589be52a3e55b643978f17949a73da
74545de6f144282252ff92c751f97cc835c80341
7bfa68c43e60a2627770163b5c1b96fbd7e4843984ad5ff6225c5490b8073b26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c083fb68af37d6c700a3fa4eb04a29cb
9b3ff3c9c0bd7dc448eb18e74ddc029f7c18dc9a
3ea0d4252ad90ee13a6b23ebd1144639f7bb73e4d96ef2590b21a155809e65e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 19:16:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kathaamqi.com/sf/tpl9?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
301 Moved Permanently 0 B URL HTTP/2 kathaamqi.com/sf/tpl9?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
IP
GET /sf/tpl9?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168 HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://montrealintc.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 28 Jan 2023 19:16:03 GMT
content-type: text/html
location: http://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BrIK5o9v7OuFXQIB%2FJftcS5k%2BoF1MB9J5NHZYmNBG8Uj4vr1vo5p3oC4tjcpqxB8MO3od1K8YBpkZRew%2FnCl3ZGDn4gN7ks%2BwLAs5ZWHl9Ly09z%2FBs%2FKELwEGZklP%2BX2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790c0f742d3ab4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
200 OK 0 B URL HTTP/2 kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
IP
GET /sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168 HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://montrealintc.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: text/html
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vUd84u3JyyRdvNxrvjGOpg608fpBNRu7TVcugrgdOkV%2FW5DqfoNZFQrFMpLXK3CaMHJFl1Y67C%2FHPU%2F1C03nqb8KC8B7N9ncA9qE%2Fj7HEyo67dieHPxkyQx5eFZhYJj%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790c0f74de0cb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kathaamqi.com/sf/tpl9/bundle.22466536478dfedd6f3a.css?t=1672932649848
200 OK 0 B URL HTTP/2 kathaamqi.com/sf/tpl9/bundle.22466536478dfedd6f3a.css?t=1672932649848
IP
GET /sf/tpl9/bundle.22466536478dfedd6f3a.css?t=1672932649848 HTTP/1.1
Host: kathaamqi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/sf/tpl9/?logo=total&item=ARFC&sub1=6JQU&sub2=470447&sub3=372919bd-1465-4425-8326-473d901a2168
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: text/css
last-modified: Thu, 05 Jan 2023 15:31:43 GMT
vary: Accept-Encoding
etag: W/"63b6ed5f-7bc20"
expires: Sun, 28 Jan 2024 14:01:54 GMT
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dtuHzo6G2QjykiqAPS5UZJjVdCKU70Ac6TlCjO7upgdow1uo2dZEJVkFH8LmUJRrrWMYTJy7H6%2B0d0ltBOBUyZR6tzAkpDxiiSq76JRuiZalPFE57fbjSRGES1qRxy1%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790c0f755ecfb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
virtualpushplatform.com/ace-push.js
200 OK 0 B URL HTTP/2 virtualpushplatform.com/ace-push.js
IP
GET /ace-push.js HTTP/1.1
Host: virtualpushplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kathaamqi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=13442
etag: W/"1d92f368ded3782"
last-modified: Mon, 23 Jan 2023 14:25:34 GMT
cache-control: max-age=3600
cf-cache-status: HIT
age: 2675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EGt6P9Tj4gexIIWTaKyfVzsv6DGh%2BKXfQAjVj2srkX0Ra50r0tqLOSmKEiXqtu6WcNfHks3VxfMUMBp5O78YoY6glKXfvy4QbqETzhtCQGz7MnpMXPamnCUU2OV%2FXWZX0Y674d3GbLg6xQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 790c0f789f7a1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=268a7048dd
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=268a7048dd
IP
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=268a7048dd HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kathaamqi.com/
Origin: https://kathaamqi.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 19:16:04 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 65465b26d806dce678b2cef9e0066d06.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P1
x-amz-cf-id: w5FtfWxginvePu_Pt8QdbkA6Hwbye_3yHII9SwUqrbBzNGrYl93_Ew==
age: 33666
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ax7ZkcbnUDWem66sqqSV%2BTNnRhFTzAB%2FCP%2FHre%2BL0Y23EuFskNx7QtfpwJXrCLOy95JATVDRLg1ZPTRD2uPkmVbyeSWxz6A7hyAPFTOhJwE4o1wIFXWFRqZL5hwru%2BmPdOwZDhMb3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790c0f77e83de688-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
34.229.34.46
54.39.238.133
185.176.220.68
95.101.11.115
20.50.64.3
104.21.67.146
93.184.220.29