| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd2560f62890e75b8de444fed96c22f52 334ce0c48e606ee029f31eeb1463af87b1024bb9 4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9049
Expires: Mon, 26 Sep 2022 01:05:36 GMT
Date: Sun, 25 Sep 2022 22:34:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash19c560e684aecef6975e0cc8dd3778c9 9a672a2ab8c4ba5eefa68ef5c4d331f423dda3bf 80a5368c14f9c89b7c247eef70d98cc7886d0c1e1607cb39e061121603467265
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80A5368C14F9C89B7C247EEF70D98CC7886D0C1E1607CB39E061121603467265"
Last-Modified: Sun, 25 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14697
Expires: Mon, 26 Sep 2022 02:39:44 GMT
Date: Sun, 25 Sep 2022 22:34:47 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 143.204.55.110 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP143.204.55.110:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bdg5TBoB5_RrFzJOrgowzFLG3-CWXokf-oqKSMC91aJx9iNWH9M7ig==
age: 64773
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1p5/TV_DWN7o6tI | 142.250.74.3 | 200 OK | 472 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1p5/TV_DWN7o6tI IP142.250.74.3:0
Hash54e7b50cfb5505c860ed863ac82a820a 2ba427c6392b7d64e52c357bc67d74df1aac29c1 022c33317bd8cb3858262516c33f079395baf7207506aeb5b929f13c09b229a9
POST /s/gts1p5/TV_DWN7o6tI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:34:47 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 | 34.120.5.221 | 200 OK | 39 kB |
URL HTTP/2getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 IP34.120.5.221:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hashf206454095dfb8dd3f30680b085a4b4a d05423656a05fdd437a9587f7a3e4ba35d9090ef 914dea94784b6368df86df7a0dabf1e4e29b0b566ff23d3e0411496e65782528
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: tEST3sYEio1FfT7bfJ6BXoA5027kbXF7UUaEexZBLn0piCe5dq8bRA==
content-encoding: gzip
via: 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:20:39 GMT
content-type: application/json
content-length: 38754
age: 848
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/ | 143.204.55.27 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.27:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash2d12f67fe57a87e7366b662d153a5582 d7b02d81cc74f24a251d9363e0f4b0a149264ec1 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 22:15:14 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NYRgVk8GQKZ90b_JbpfvttkbV3h9pP1VIE4_-kTw-GmJEN7tPEBR6A==
Age: 1173
|
|
| ocsp.pki.goog/s/gts1p5/TV_DWN7o6tI | 142.250.74.3 | 200 OK | 472 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1p5/TV_DWN7o6tI IP142.250.74.3:0
Hash54e7b50cfb5505c860ed863ac82a820a 2ba427c6392b7d64e52c357bc67d74df1aac29c1 022c33317bd8cb3858262516c33f079395baf7207506aeb5b929f13c09b229a9
POST /s/gts1p5/TV_DWN7o6tI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:34:47 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 22:34:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| myciti-res.onlineactivitieses.workers.dev/ | 172.67.167.106 | 200 OK | 787 kB |
URL HTTP/2myciti-res.onlineactivitieses.workers.dev/ IP172.67.167.106:0
File typeHTML document, ASCII text, with very long lines (65534) Size787 kB (787356 bytes) Hash828ced3dee16db6ee51e3f19138f3d75 4427c446a65e80a8148faa29990bf3abbcf63580 16d292df98b87c41b23d1646a5db4bf2c9307ce0ec4ecd195518999921004b12
Analyzer | Verdict | Alert | openphish | Citigroup Inc. | | fortinet | Phishing | |
GET / HTTP/1.1
Host: myciti-res.onlineactivitieses.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:34:47 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8rorVuIK74iCCpzdYf6X2TWcsLwSGKeOCnl6hDZvz2N%2FnsqWN5Rz4qRQzMbPkeGe7vVnhvDy30gAlWDdRQs6H44NKziDXTzIdfeQtgHy%2FdlOA1kmKVJHEi2GKtiLlu3UO7OmPf1L%2Fk%2BO4kGJ0%2BLPjvyAezyoNpJ4XvJO3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75073aad9b8f1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 34.214.17.205 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.214.17.205:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VhYvKwV4FWWKKgfWje8Aeg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iUC5w8oP7yNzCAelEW6I3TvxaWg=
|
|
| cdn.jsdelivr.net/npm/bootstrap@3.3.7/dist/js/bootstrap.min.js | 151.101.85.229 | 200 OK | 9.8 kB |
URL HTTP/2cdn.jsdelivr.net/npm/bootstrap@3.3.7/dist/js/bootstrap.min.js IP151.101.85.229:0
File typeASCII text, with very long lines (32033) Hash8f5516e2deb83c4c97ffcde6c908c118 769c171c51d77b3973ca33a5e9c065edb2dd33b9 2e1f2da05943fa83b074b3dbd377303f3c074b3cfe618875931fbad5542c0e0c
GET /npm/bootstrap@3.3.7/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myciti-res.onlineactivitieses.workers.dev
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.3.7
x-jsd-version-type: version
etag: W/"90b5-QwpEPXSDD+m+Ju/KQx9EjBs3QPk"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Sep 2022 22:34:48 GMT
age: 13214924
x-served-by: cache-fra19170-FRA, cache-bma1679-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 9832
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashf09a18ffd47757d6303864753f40a57c 6f056a04785c83dae4a4f40eaac5ac34a5a391f2 9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:34:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 | 104.18.20.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 IP104.18.20.226:0
Hasha2e7b1e242c57961b4cacce6245dd9f4 cebab82b082aa17f84faeccf3741f5dba0894b7f e6d16bdb5b9a569eda311bdce7c3d1d742b28bee3bb5ec2c3a043791c66dc0d5
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Sep 2022 22:34:49 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "E455161AC898BFD83BE5AE5E0493661770297675"
Expires: Mon, 26 Sep 2022 09:00:00 GMT
Last-Modified: Sun, 25 Sep 2022 21:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2382
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75073ab85aa7b503-OSL
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js | 172.217.21.170 | 200 OK | 31 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP172.217.21.170:0
File typeASCII text, with very long lines (65447) Hash7808e0e4b7a714230373852158500533 4a79d18722a68a2f38d52e2d3a11b550bdd30b3c 8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 09:42:03 GMT
expires: Tue, 19 Sep 2023 09:42:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 564766
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashf09a18ffd47757d6303864753f40a57c 6f056a04785c83dae4a4f40eaac5ac34a5a391f2 9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:34:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hash52ffef0d2d997dd4e459f10ec8d29dbf defbd633a54f929ea0ab343e754904a8c126f544 8c7cd542dc13712336db010bdd1bdca94dcc6dcbc57c8c4045ac2a42b3b5f58a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Sep 2022 22:34:49 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 25 Sep 2022 09:46:09 GMT
Expires: Sun, 02 Oct 2022 09:46:08 GMT
Etag: "defbd633a54f929ea0ab343e754904a8c126f544"
Cache-Control: max-age=558078,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75073ab86e4f1bfa-OSL
|
|
| api.ipify.org/?format=jsonp&callback=getIP | 54.91.59.199 | 200 OK | 29 B |
URL HTTP/1.1api.ipify.org/?format=jsonp&callback=getIP IP54.91.59.199:0
File typeASCII text, with no line terminators Hash90a39389063c7c5716745c3b3bb4fba1 a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69
GET /?format=jsonp&callback=getIP HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
Content-Type: application/javascript
Vary: Origin
Date: Sun, 25 Sep 2022 22:34:49 GMT
Content-Length: 29
Via: 1.1 vegur
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7038cca95198779d8bb479045eb56652 e9dcf9451e849f4d55b0909b33a51bd0b1a35296 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12072
Expires: Mon, 26 Sep 2022 01:56:01 GMT
Date: Sun, 25 Sep 2022 22:34:49 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7038cca95198779d8bb479045eb56652 e9dcf9451e849f4d55b0909b33a51bd0b1a35296 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12072
Expires: Mon, 26 Sep 2022 01:56:01 GMT
Date: Sun, 25 Sep 2022 22:34:49 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7038cca95198779d8bb479045eb56652 e9dcf9451e849f4d55b0909b33a51bd0b1a35296 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12072
Expires: Mon, 26 Sep 2022 01:56:01 GMT
Date: Sun, 25 Sep 2022 22:34:49 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7038cca95198779d8bb479045eb56652 e9dcf9451e849f4d55b0909b33a51bd0b1a35296 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12072
Expires: Mon, 26 Sep 2022 01:56:01 GMT
Date: Sun, 25 Sep 2022 22:34:49 GMT
Connection: keep-alive
|
|
| files.catbox.moe/cgyngm.css | 107.160.74.131 | 200 OK | 12 kB |
URL HTTP/2files.catbox.moe/cgyngm.css IP107.160.74.131:0
Hashb5b3a049bf6126fb107835bb8a37da36 26783f010b4b5a2ec0f6c17e2a65fb8e5425a790 b79d858a57cb02e18b0bfa6cbc8dd24e50ad9e758f745beb4b944591f68c86bc
GET /cgyngm.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:50 GMT
vary: Accept-Encoding
etag: W/"6322057a-293e"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg | 34.120.237.76 | 200 OK | 9.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash65e3b72afc2f13978ee80cc87dc289f1 78a82653eb0e5aa4f1355c13b665da44a3412024 9f3a89f268fca25f5a6c7319b1f8412a193cd73bc9c8f4c5a9d294582df3a57b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9352
x-amzn-requestid: efae9f72-8dce-4899-9dc8-c6cc9b4b2540
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvwFwWoAMFmig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-744ade88393a83467fea2b97;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NOu92heW0-RynLU34xGoSq36WGjOu75Ukkd8IA3IoQ2FMHFUMlkJrA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 2693
etag: "78a82653eb0e5aa4f1355c13b665da44a3412024"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png | 34.120.237.76 | 200 OK | 7.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6d79a3a5bd7dc7aa6cab306176fafd11 0d5cb1f3e3ea510308034a5e569c0e65fae30835 57979dfcf6fdc76f04e4790c2b94b876e188ac780aa49d9bfc8a58c498dc4203
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7185
x-amzn-requestid: e7b997d7-f9ce-40c6-b9bb-372ee10d8ad0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTAfEX5oAMFcHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb9c-31e295e33ead940f381121a1;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:43:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p7rimTrmOgUnwPuESSKSrsWlzhiSBJYx9h8XIacxP8DUyyvXye2iyg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 2693
etag: "0d5cb1f3e3ea510308034a5e569c0e65fae30835"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/xjlofn.css | 107.160.74.131 | 200 OK | 5.8 kB |
URL HTTP/2files.catbox.moe/xjlofn.css IP107.160.74.131:0
Hash768d27a883d773f9eccd9163cb4a99a3 e5f916d2578f165becee6e568ca12a6d9b3949cf 8508f1b6aacf655e14b46174989196648523c90da3ed7196cd14d654d419db10
GET /xjlofn.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:49 GMT
vary: Accept-Encoding
etag: W/"63220579-b2d"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/d4pnyv.css | 107.160.74.131 | 200 OK | 16 kB |
URL HTTP/2files.catbox.moe/d4pnyv.css IP107.160.74.131:0
Hashb3fdc3e02282abe0e0f74f1606c6c20f 5af59cd83f2bd6b8d53efbac5e21b50f532208cd ed38da11f81dfdb11d2f10f0321e437cecd1b93a5846a9acdc51ffa44a16a2bb
GET /d4pnyv.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:50 GMT
vary: Accept-Encoding
etag: W/"6322057a-8c9"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/h0u76c.css | 107.160.74.131 | 200 OK | 13 kB |
URL HTTP/2files.catbox.moe/h0u76c.css IP107.160.74.131:0
Hash08b8d3cb14867e04a9f00a1d83d90ec1 c7f7ffe8a5a4048b2876eea8cabc5e85d306566b fb4ed7dd490707d80fe93b87c94e400f166eb084fe8af40c55e449e3eb86413b
GET /h0u76c.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:50 GMT
vary: Accept-Encoding
etag: W/"6322057a-86d"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/5y2x9b.css | 107.160.74.131 | 200 OK | 360 B |
URL HTTP/2files.catbox.moe/5y2x9b.css IP107.160.74.131:0
File typeASCII text, with CRLF line terminators Hashb7fe50e8adbd6589b58aadf1ab31788a 7e1d33d63206d8ee6f14f2e5caa072875f5ec87c 8f5c41bebd6cea696a365c0588195639cb46e896b4c5e37264848d059f4e7cea
GET /5y2x9b.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
content-length: 360
last-modified: Fri, 23 Sep 2022 17:18:33 GMT
etag: "632dea69-168"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/ahp6ci.css | 107.160.74.131 | 200 OK | 436 B |
URL HTTP/2files.catbox.moe/ahp6ci.css IP107.160.74.131:0
File typeASCII text, with CRLF line terminators Hash3ce0b5b37bb689b697e6d43a02223de9 6d8eb6b6b33ac6729df6c56022d28f31cd6574fb 7fb9be3025d8eda1cb21fbc11afc5c1aeeb24bcd0c2b51a2d50903c414eaa3e2
GET /ahp6ci.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
content-length: 436
last-modified: Fri, 23 Sep 2022 17:18:37 GMT
etag: "632dea6d-1b4"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/xkuh28.woff | 107.160.74.131 | 200 OK | 79 kB |
URL HTTP/2files.catbox.moe/xkuh28.woff IP107.160.74.131:0
File typeWeb Open Font Format, TrueType, length 78762, version 1.197\012- data Hashb1f3eca7de0c2cb35740f32dd0b83823 dffc474081c23fc151265b637a4468e82004ecc8 045cd226594cb32ddf9d4db8ee45611f4d0788675ae50180b68da975e66fe1fe
GET /xkuh28.woff HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myciti-res.onlineactivitieses.workers.dev
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: application/font-woff
content-length: 78762
last-modified: Fri, 23 Sep 2022 17:01:03 GMT
etag: "632de64f-133aa"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/ug4kmg.css | 107.160.74.131 | 200 OK | 304 B |
URL HTTP/2files.catbox.moe/ug4kmg.css IP107.160.74.131:0
File typeASCII text, with CRLF line terminators Hash87919f838de475dfdb77e3937992e319 02072929538495aed2b662ec3bfa29cd0f003846 7a0765d25960198bf0d69e9d32b2e29a8bff03940135623aa974bdad391e90ef
GET /ug4kmg.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
content-length: 304
last-modified: Fri, 23 Sep 2022 17:18:37 GMT
etag: "632dea6d-130"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/4uq1fz.css | 107.160.74.131 | 200 OK | 122 B |
URL HTTP/2files.catbox.moe/4uq1fz.css IP107.160.74.131:0
File typeASCII text, with CRLF line terminators Hashca0d4befba49aeac17665041995754e9 6c4faf903cf4d02f3e604914cc7c80a0245c1479 44a63f91388d7e379b4135044e4e2cf2027f433fff881065c1df8c986e340fe5
GET /4uq1fz.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
content-length: 122
last-modified: Fri, 23 Sep 2022 17:18:40 GMT
etag: "632dea70-7a"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/83oz7d.css | 107.160.74.131 | 200 OK | 479 B |
URL HTTP/2files.catbox.moe/83oz7d.css IP107.160.74.131:0
File typeASCII text, with CRLF line terminators Hashfff6245968dc5d83ab5e70dba1f8a600 8b63609bc0efeb7d305c1fcc99163e9531be17f5 b75bec018193136ab2442d17823afddb9cc363228cd29d6989136a6e3b3e1861
GET /83oz7d.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
content-length: 479
last-modified: Fri, 23 Sep 2022 17:18:41 GMT
etag: "632dea71-1df"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/8h1zb7.woff | 107.160.74.131 | 200 OK | 72 kB |
URL HTTP/2files.catbox.moe/8h1zb7.woff IP107.160.74.131:0
File typeWeb Open Font Format, TrueType, length 71874, version 1.197\012- data Hash9fd45584370dd1c58e1ed9050efb925f 7b41085678166c62e23e8cf3c8c9ab13e13c356d e9e9a67395a0d83b584208a19b95af203df8e8e6c6952fe76c690d60ea9381c7
GET /8h1zb7.woff HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myciti-res.onlineactivitieses.workers.dev
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: application/font-woff
content-length: 71874
last-modified: Fri, 23 Sep 2022 17:01:02 GMT
etag: "632de64e-118c2"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/ip9pfu.woff | 107.160.74.131 | 200 OK | 76 kB |
URL HTTP/2files.catbox.moe/ip9pfu.woff IP107.160.74.131:0
File typeWeb Open Font Format, TrueType, length 75538, version 1.197\012- data Hash3d1d3153b04b6ce8a33a20f60df9d723 60e91c7766bdc415134c1111a283ffed3749dbae f327a0ba3e41b1e8154e1c18fc114baff0bd057151e3afe7fa6f33cc0cb18296
GET /ip9pfu.woff HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myciti-res.onlineactivitieses.workers.dev
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: application/font-woff
content-length: 75538
last-modified: Fri, 23 Sep 2022 17:01:02 GMT
etag: "632de64e-12712"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd40a655f52feb19bd95cc482c9dbe133 edb8301a7a9a27ee223b2a30a073be0dae2886a7 934c08dc4c0071f66e8c5617298fb53dc21e69bc727456c9ff811c95f8aec424
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1711
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:34:50 GMT
Last-Modified: Sun, 25 Sep 2022 22:06:19 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd40a655f52feb19bd95cc482c9dbe133 edb8301a7a9a27ee223b2a30a073be0dae2886a7 934c08dc4c0071f66e8c5617298fb53dc21e69bc727456c9ff811c95f8aec424
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1711
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:34:50 GMT
Last-Modified: Sun, 25 Sep 2022 22:06:19 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
|
|
| files.catbox.moe/60rgkf.gif | 107.160.74.131 | 200 OK | 37 kB |
URL HTTP/2files.catbox.moe/60rgkf.gif IP107.160.74.131:0
File typeGIF image data, version 89a, 60 x 60\012- data Hash9132ad37e83e5eef39e5e315c2b6c94f 9036fb328a9266e1f6fb95021464a77a11894ec1 79206ccd37edbafc46266406417abb5be984a5d0fb9f38e693d67b6d30cba8bb
GET /60rgkf.gif HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://files.catbox.moe/3zxwn2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:50 GMT
content-type: image/gif
content-length: 36855
last-modified: Fri, 23 Sep 2022 18:17:10 GMT
etag: "632df826-8ff7"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dl.dropboxusercontent.com/s/tx4dbqw0bze09il/social-media_facebook%403x.png | 162.125.71.15 | 200 OK | 445 B |
URL HTTP/2dl.dropboxusercontent.com/s/tx4dbqw0bze09il/social-media_facebook%403x.png IP162.125.71.15:0
File typePNG image data, 27 x 48, 8-bit/color RGBA, non-interlaced\012- data Hash1f627e41e84a3b87f57c9de2e3a722d0 a7d350d9d267149f60b46a454f021920f89df877 695788dc05d94be3b32060ffea15c1a4d74897bd32e5da7811e7ca76d82fc86b
GET /s/tx4dbqw0bze09il/social-media_facebook%403x.png HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://files.catbox.moe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=60
content-disposition: inline; filename="social-media_facebook@3x.png"; filename*=UTF-8''social-media_facebook%403x.png
content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'
etag: 1661968884486105n
pragma: public
set-cookie: uc_session=0v1gd5zXaWECN1C1zgIMZn8GgjPAMiEMByi1ZhzS1axmrvlVbrI0zxCxXmt2zKDS; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-server-response-time: 177
content-type: image/png
date: Sun, 25 Sep 2022 22:34:50 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-length: 445
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 16d364868de045489513be28aae557f2
X-Firefox-Spdy: h2
|
|
| dl.dropboxusercontent.com/s/fcfmeua8xtc4hqg/Appstore-Googleplay-JDPower-Sprite.png | 162.125.71.15 | 200 OK | 45 kB |
URL HTTP/2dl.dropboxusercontent.com/s/fcfmeua8xtc4hqg/Appstore-Googleplay-JDPower-Sprite.png IP162.125.71.15:0
File typePNG image data, 120 x 203, 8-bit/color RGBA, interlaced\012- data Hash7be7c9b6b21cee4ae9dffb234765a60e ec853bb38a24a01498cff42a8ef53d8707b39cb0 b8e446605f92c29a178dd6494688103ac268004592afe06643df46f4bff68577
GET /s/fcfmeua8xtc4hqg/Appstore-Googleplay-JDPower-Sprite.png HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://files.catbox.moe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=60
content-disposition: inline; filename="Appstore-Googleplay-JDPower-Sprite.png"; filename*=UTF-8''Appstore-Googleplay-JDPower-Sprite.png
content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'
etag: 1661968650157896n
pragma: public
set-cookie: uc_session=IpKOONCNmz6hNQ9xprzAgRCRXIGYBRl0QtnwpqXTHPnkC2HcuyEoDEk0eWklDi4P; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-server-response-time: 212
content-type: image/png
date: Sun, 25 Sep 2022 22:34:50 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-length: 44996
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 886b1c5c3a5a417399f8358cc49deda4
X-Firefox-Spdy: h2
|
|
| dl.dropboxusercontent.com/s/5pecxff6thpa7bk/Interstate-Light.woff | 162.125.71.15 | 200 OK | 76 kB |
URL HTTP/2dl.dropboxusercontent.com/s/5pecxff6thpa7bk/Interstate-Light.woff IP162.125.71.15:0
File typeWeb Open Font Format, TrueType, length 75538, version 1.197\012- data Hash3d1d3153b04b6ce8a33a20f60df9d723 60e91c7766bdc415134c1111a283ffed3749dbae f327a0ba3e41b1e8154e1c18fc114baff0bd057151e3afe7fa6f33cc0cb18296
GET /s/5pecxff6thpa7bk/Interstate-Light.woff HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myciti-res.onlineactivitieses.workers.dev
Connection: keep-alive
Referer: https://files.catbox.moe/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
cache-control: max-age=60
content-disposition: inline; filename="Interstate-Light.woff"; filename*=UTF-8''Interstate-Light.woff
content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'
etag: 1661968851764500n
pragma: public
set-cookie: uc_session=jJsMLb3YOQltIAk2z1NXXbI01VOYgRq0z0iTuwyymVVXPn9UOToAB2O2xvUKQ3jL; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-server-response-time: 266
content-type: application/octet-stream
date: Sun, 25 Sep 2022 22:34:50 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-length: 75538
x-dropbox-response-origin: far_remote
x-dropbox-request-id: baefdedf99584073b2e6d33ab2768de1
X-Firefox-Spdy: h2
|
|
| dl.dropboxusercontent.com/s/d7sibblybve5blb/social-media_youtube%403x.png | 162.125.71.15 | 200 OK | 1.2 kB |
URL HTTP/2dl.dropboxusercontent.com/s/d7sibblybve5blb/social-media_youtube%403x.png IP162.125.71.15:0
File typePNG image data, 72 x 48, 8-bit/color RGBA, non-interlaced\012- data Hash3541c5442b1b90b4efe20ab4b2802323 ad778d35efc7b9950d2158d800b61966204b75d8 be9b5382b4526ffd3306d0292122ce3599123f1cd543f52f3035b4f24fbf9de8
GET /s/d7sibblybve5blb/social-media_youtube%403x.png HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://files.catbox.moe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=60
content-disposition: inline; filename="social-media_youtube@3x.png"; filename*=UTF-8''social-media_youtube%403x.png
content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'
etag: 1661968897745048n
pragma: public
set-cookie: uc_session=u3boTOfkq2ZNsX8mHO7mvngh5ZgRdtDcSswAfZLSBe5ZMjSjIBrOcf64lVtAhinL; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-server-response-time: 233
content-type: image/png
date: Sun, 25 Sep 2022 22:34:50 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-length: 1175
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 1af7273eea2749b88f974905b5a93766
X-Firefox-Spdy: h2
|
|
| dl.dropboxusercontent.com/s/13p0ciw1yl1ifq5/Citi-Branding-Sprite.png | 162.125.71.15 | 200 OK | 5.0 kB |
URL HTTP/2dl.dropboxusercontent.com/s/13p0ciw1yl1ifq5/Citi-Branding-Sprite.png IP162.125.71.15:0
File typePNG image data, 140 x 349, 8-bit colormap, non-interlaced\012- data Hasheec8cbc4608427f66f2c1e5a74911748 8cd18d8ece8c75fa4821cdbf1edcb8d15d785ad1 3fca3de24621f0f10186594054444d608016297c2e853e548710b3521e42a609
GET /s/13p0ciw1yl1ifq5/Citi-Branding-Sprite.png HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://files.catbox.moe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=60
content-disposition: inline; filename="Citi-Branding-Sprite.png"; filename*=UTF-8''Citi-Branding-Sprite.png
content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'
etag: 1661968652168104n
pragma: public
set-cookie: uc_session=OPoRs5RooSjQ2gMAFUqJRGOgwc7IXllnoXjQkDuL3WbUZ4a4XzyQy97CK2lmhV72; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-server-response-time: 213
content-type: image/png
date: Sun, 25 Sep 2022 22:34:50 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-length: 4952
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 12facf1c5bc14258899640d59ef15463
X-Firefox-Spdy: h2
|
|
| dl.dropboxusercontent.com/s/onrn6uufd9w6dw9/Interstate-Bold.woff | 162.125.71.15 | 200 OK | 72 kB |
URL HTTP/2dl.dropboxusercontent.com/s/onrn6uufd9w6dw9/Interstate-Bold.woff IP162.125.71.15:0
File typeWeb Open Font Format, TrueType, length 71874, version 1.197\012- data Hash9fd45584370dd1c58e1ed9050efb925f 7b41085678166c62e23e8cf3c8c9ab13e13c356d e9e9a67395a0d83b584208a19b95af203df8e8e6c6952fe76c690d60ea9381c7
GET /s/onrn6uufd9w6dw9/Interstate-Bold.woff HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myciti-res.onlineactivitieses.workers.dev
Connection: keep-alive
Referer: https://files.catbox.moe/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
cache-control: max-age=60
content-disposition: inline; filename="Interstate-Bold.woff"; filename*=UTF-8''Interstate-Bold.woff
content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'
etag: 1661968844676205n
pragma: public
set-cookie: uc_session=WjPR9mLAKBkc2N8T2SOaOPhmyBAVNsUBYIc3QDWu4dvaLhA10iqdjJ0TvFjJjWB8; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-server-response-time: 327
content-type: application/octet-stream
date: Sun, 25 Sep 2022 22:34:50 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-length: 71874
x-dropbox-response-origin: far_remote
x-dropbox-request-id: e4a040839baf4ba8a32ef0266fe1f56d
X-Firefox-Spdy: h2
|
|
| dl.dropboxusercontent.com/s/al8h1wt4q4z80q1/social-media_twitter%403x.png | 162.125.71.15 | 200 OK | 1.3 kB |
URL HTTP/2dl.dropboxusercontent.com/s/al8h1wt4q4z80q1/social-media_twitter%403x.png IP162.125.71.15:0
File typePNG image data, 66 x 48, 8-bit/color RGBA, non-interlaced\012- data Hash60b0fec951727b4762fabc2570a1317f 56f9ed9699233f4cef1317a9a2c83179070b5e8a 5394d11ec8ad7a5494bcdb65cd95f885388532e14fb45a747e249112389bd837
GET /s/al8h1wt4q4z80q1/social-media_twitter%403x.png HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://files.catbox.moe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=60
content-disposition: inline; filename="social-media_twitter@3x.png"; filename*=UTF-8''social-media_twitter%403x.png
content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none'
etag: 1661968891955128n
pragma: public
set-cookie: uc_session=i7pH5B1XMHTQET46FCwSX0uwnja3GFdioRZeNkYua0znFX4Ml5dB06JpA4T2feS1; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-server-response-time: 235
content-type: image/png
date: Sun, 25 Sep 2022 22:34:50 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-length: 1277
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 39cd5d90d0884859bfb78cc1510b31d3
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/4pgrxf.ico | 107.160.74.131 | 200 OK | 8.7 kB |
URL HTTP/2files.catbox.moe/4pgrxf.ico IP107.160.74.131:0
File typePNG image data, 367 x 367, 8-bit/color RGBA, non-interlaced\012- data Hash5c529d13403aaef133f480514b0d7b3f 73b6a54f396770a92bd13f0af7b0530e7a68b546 2f6d73a312361b30f573d8f97bf9b345f2316c3d8b40723592b3145e360f8c32
GET /4pgrxf.ico HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:50 GMT
content-type: image/x-icon
content-length: 8747
last-modified: Wed, 14 Sep 2022 16:45:20 GMT
etag: "63220520-222b"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/5fat72.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/5fat72.css IP107.160.74.131:0
GET /5fat72.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 17:18:40 GMT
vary: Accept-Encoding
etag: W/"632dea70-7e9"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/m25qi2.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/m25qi2.css IP107.160.74.131:0
GET /m25qi2.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:50 GMT
vary: Accept-Encoding
etag: W/"6322057a-3d81"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/a0a1hp.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/a0a1hp.css IP107.160.74.131:0
GET /a0a1hp.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 17:18:44 GMT
vary: Accept-Encoding
etag: W/"632dea74-7840"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/talj6r.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/talj6r.css IP107.160.74.131:0
GET /talj6r.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 17:50:03 GMT
vary: Accept-Encoding
etag: W/"6322144b-152fe5"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/l2pwom.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/l2pwom.css IP107.160.74.131:0
GET /l2pwom.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:51 GMT
vary: Accept-Encoding
etag: W/"6322057b-1e41"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/5kveg2.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/5kveg2.css IP107.160.74.131:0
GET /5kveg2.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 17:18:47 GMT
vary: Accept-Encoding
etag: W/"632dea77-7e4"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/3zxwn2.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/3zxwn2.css IP107.160.74.131:0
GET /3zxwn2.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 18:20:46 GMT
vary: Accept-Encoding
etag: W/"632df8fe-166c"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/58aech.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/58aech.css IP107.160.74.131:0
GET /58aech.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 17:18:31 GMT
vary: Accept-Encoding
etag: W/"632dea67-568"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/wt6r3o.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/wt6r3o.css IP107.160.74.131:0
GET /wt6r3o.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:49 GMT
vary: Accept-Encoding
etag: W/"63220579-c29"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/wtoeka.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/wtoeka.css IP107.160.74.131:0
GET /wtoeka.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:51 GMT
vary: Accept-Encoding
etag: W/"6322057b-3106"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/zg70v9.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/zg70v9.css IP107.160.74.131:0
GET /zg70v9.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 17:18:41 GMT
vary: Accept-Encoding
etag: W/"632dea71-5c1"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/a9t540.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/a9t540.css IP107.160.74.131:0
GET /a9t540.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:51 GMT
vary: Accept-Encoding
etag: W/"6322057b-545e"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/9lcxd4.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/9lcxd4.css IP107.160.74.131:0
GET /9lcxd4.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 17:18:44 GMT
vary: Accept-Encoding
etag: W/"632dea74-336a"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/adzmom.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/adzmom.css IP107.160.74.131:0
GET /adzmom.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 17:18:47 GMT
vary: Accept-Encoding
etag: W/"632dea77-3425"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/dn1wby.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/dn1wby.css IP107.160.74.131:0
GET /dn1wby.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:41:26 GMT
vary: Accept-Encoding
etag: W/"63220436-1bce"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/ou978y.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/ou978y.css IP107.160.74.131:0
GET /ou978y.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:44:08 GMT
vary: Accept-Encoding
etag: W/"632204d8-152fe7"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/q2u8sd.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/q2u8sd.css IP107.160.74.131:0
GET /q2u8sd.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:51 GMT
vary: Accept-Encoding
etag: W/"6322057b-6b71"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/v92ygm.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/v92ygm.css IP107.160.74.131:0
GET /v92ygm.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:51 GMT
vary: Accept-Encoding
etag: W/"6322057b-ce69"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/mmw7w6.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/mmw7w6.css IP107.160.74.131:0
GET /mmw7w6.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 16:46:51 GMT
vary: Accept-Encoding
etag: W/"6322057b-1b8b"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/wyojhq.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/wyojhq.css IP107.160.74.131:0
GET /wyojhq.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 17:18:44 GMT
vary: Accept-Encoding
etag: W/"632dea74-80f"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| files.catbox.moe/r5batv.css | 107.160.74.131 | 200 OK | 0 B |
URL HTTP/2files.catbox.moe/r5batv.css IP107.160.74.131:0
GET /r5batv.css HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myciti-res.onlineactivitieses.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.3
date: Sun, 25 Sep 2022 22:34:49 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 17:18:47 GMT
vary: Accept-Encoding
etag: W/"632dea77-1c59"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
content-encoding: gzip
X-Firefox-Spdy: h2
|
|