r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 4c9ec202b798d350b6582220b7bb8457
d16ca24cd60b349231ad06fa5db32f54a3bc9e09
df036d315a613ac6396b77afb0a4ea5f793091786be0cbf3f3a0d043bc1d1d3c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF036D315A613AC6396B77AFB0A4EA5F793091786BE0CBF3F3A0D043BC1D1D3C"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4915
Expires: Fri, 28 Oct 2022 03:07:32 GMT
Date: Fri, 28 Oct 2022 01:45:37 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 221b3fe9a6458de64d8bbfcd4a8e2f36
988c93428ff15108d46a11865e1c7e2782fbae34
a5ff1b60b9ef85086d0c6617d9d39cf17ae45855bf7b0ee24ec49ad5a863c18e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4032
Cache-Control: max-age=118364
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:37 GMT
Etag: "635a4fdd-1d7"
Expires: Sat, 29 Oct 2022 10:38:21 GMT
Last-Modified: Thu, 27 Oct 2022 09:31:09 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 22eebb819dc140cc288474d9891526b4
45c18772664e9e3efb6a44d7da93699c81f71827
ce6a96e470dbfb48ff42fdaf5eaa464a87dc60b495e3e2767086ec0b6564fdd7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CE6A96E470DBFB48FF42FDAF5EAA464A87DC60B495E3E2767086EC0B6564FDD7"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2652
Expires: Fri, 28 Oct 2022 02:29:49 GMT
Date: Fri, 28 Oct 2022 01:45:37 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: iTo4a/gbYh/I4b1v0gbjBYM2/j5by9DbWbITMje/Y16wAuWBglFAlUaVsAfLmTSeDnMVVMG+Kzc=
x-amz-request-id: TB26JQMAXNRYHM7D
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 28 Oct 2022 01:10:04 GMT
age: 2133
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 01:45:37 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cool-2.1.15.min.js
50.62.141.181200 OK 5.2 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cool-2.1.15.min.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type C source, ASCII text, with very long lines (585)
Hash a8a8316559534b9784a92826ab49b9f2
3836a3dbc421106117da4a97871aed09eedbdf0c
b11175156d2ff85a9f749c78ab961597cc0034db4df0295f2e57335e94f61b1e
GET /city.com/img/cool-2.1.15.min.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:37 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e2c-3643-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5197
Keep-Alive: timeout=5
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/
50.62.141.181200 OK 53 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (55779)
Hash 595fe907bc1dae1a9923bde5a202b1e9
55c670872571a4d970b0e846e8525be57c08231b
918b0e0f819455014c1bfec80ede5d2f60862f3d0e65b80ea10e98318ef3efc5
Analyzer Verdict Alert openphish Citigroup Inc.
GET /city.com/ HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:37 GMT
Server: Apache
X-Powered-By: PHP/8.1.11
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tc.min.js
50.62.141.181200 OK 6.2 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tc.min.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type C source, ASCII text, with very long lines (19497)
Hash a8f94d5105fd6d5fcbdb6435bab6ff43
e5bc21e369a0c149e12dcb854644568dd3963a11
dd136d20bbeb1aefa56500b77bb9008f9292677935bd59ffc5549a5b8e507600
GET /city.com/img/tc.min.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:37 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e0a-4c2a-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6162
Keep-Alive: timeout=5
Content-Type: application/javascript
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8d46a7e734bcb13c6d9479a8648152ca
4bf40ca790e8c606235dbee1daf973a28689b7aa
8c6e9ef8532752f21d89da8237a22fd14317dfe8a793497d6eda2f93cb41e122
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5136
Cache-Control: max-age=86360
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:38 GMT
Etag: "6359ce8a-1d7"
Expires: Sat, 29 Oct 2022 01:44:58 GMT
Last-Modified: Thu, 27 Oct 2022 00:19:22 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/clarity.js
50.62.141.181200 OK 19 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/clarity.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (53819)
Hash 1df44579a11164ddfcdce4e95874010f
7f52b8ef17db7b67c3357274b8ba92f33b5679fb
b19f8a7d2025ca7994af38b345c9311d599d5483230f7bc400af1beefb30bf59
GET /city.com/img/clarity.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:37 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e1c-d290-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18821
Keep-Alive: timeout=5
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f.txt
50.62.141.181200 OK 15 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f.txt
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (2165)
Hash 143a9342a09f8cafd071a4acd011ade6
828a2d4c58ea2847ef1bd595ac5193525c33f5db
96e8085b21c91627b12b2520b518314ff4609be36770c7868fe5b9f96b2e7abe
GET /city.com/img/f.txt HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:37 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62de4-9b33-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14886
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/plain
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8d46a7e734bcb13c6d9479a8648152ca
4bf40ca790e8c606235dbee1daf973a28689b7aa
8c6e9ef8532752f21d89da8237a22fd14317dfe8a793497d6eda2f93cb41e122
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5136
Cache-Control: max-age=86360
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:38 GMT
Etag: "6359ce8a-1d7"
Expires: Sat, 29 Oct 2022 01:44:58 GMT
Last-Modified: Thu, 27 Oct 2022 00:19:22 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8d46a7e734bcb13c6d9479a8648152ca
4bf40ca790e8c606235dbee1daf973a28689b7aa
8c6e9ef8532752f21d89da8237a22fd14317dfe8a793497d6eda2f93cb41e122
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5136
Cache-Control: max-age=86360
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:38 GMT
Etag: "6359ce8a-1d7"
Expires: Sat, 29 Oct 2022 01:44:58 GMT
Last-Modified: Thu, 27 Oct 2022 00:19:22 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.citi.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Regular.woff
104.110.29.32200 OK 79 kB URL HTTP/1.1 www.citi.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Regular.woff
IP 104.110.29.32:0
File type Web Open Font Format, TrueType, length 78762, version 1.197\012- data
Hash b1f3eca7de0c2cb35740f32dd0b83823
dffc474081c23fc151265b637a4468e82004ecc8
045cd226594cb32ddf9d4db8ee45611f4d0788675ae50180b68da975e66fe1fe
GET /cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Regular.woff HTTP/1.1
Host: www.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff
Content-Length: 78762
Accept-Ranges: bytes
Access-Control-Allow-Headers: action,challengeType,accesstoken,appVersion,,Content-Type,sid,CCPToken,CFIToken,countryCode,businessCode,channelId,uuid,client_id,environmentId
Access-Control-Allow-Methods: GET,PUT,POST,DELETE,HEAD
Access-Control-Expose-Headers: action,challengeType,bizToken,eventid,Eventid,Eventidexpirytime,eventidexpirytime,accesstoken,Authorization,sid,SessionId,CCPToken,CFIToken
Access-Control-Max-Age: 2147483647
Dclocation: GT1DMS
ETag: W/"133aa-183dfc404c8"
Last-Modified: Sun, 16 Oct 2022 07:48:29 GMT
Nonce: 4946641647140919
Referrer-Policy: no-referrer
Scope: VISITOR
Sid: f99c9574-f9d9-42a9-8d4b-1fa949287fce
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Uuid: 5fcbc76d-6aab-4cb1-91d5-0fa9a99deb47
X-Content-Type-Options: nosniff
X-Vcap-Request-Id: 60ca75ee-3933-4dd5-6178-79229edafa9f
X-Xss-Protection: 1 ; mode=block
X-Akamai-CITISITE: GTDC
Cache-Control: public, no-transform, max-age=21600
Expires: Fri, 28 Oct 2022 07:45:38 GMT
Date: Fri, 28 Oct 2022 01:45:38 GMT
Connection: keep-alive
Set-Cookie: AKMTLTSID=0C43B84471959713384758CE2EEFB69E; path=/; domain=citi.com; secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://citimobile.citibankonline.com
www.citi.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Light.woff
104.110.29.32200 OK 76 kB URL HTTP/1.1 www.citi.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Light.woff
IP 104.110.29.32:0
File type Web Open Font Format, TrueType, length 75538, version 1.197\012- data
Hash 3d1d3153b04b6ce8a33a20f60df9d723
60e91c7766bdc415134c1111a283ffed3749dbae
f327a0ba3e41b1e8154e1c18fc114baff0bd057151e3afe7fa6f33cc0cb18296
GET /cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Light.woff HTTP/1.1
Host: www.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff
Content-Length: 75538
Accept-Ranges: bytes
Access-Control-Allow-Headers: action,challengeType,accesstoken,appVersion,,Content-Type,sid,CCPToken,CFIToken,countryCode,businessCode,channelId,uuid,client_id,environmentId
Access-Control-Allow-Methods: GET,PUT,POST,DELETE,HEAD
Access-Control-Expose-Headers: action,challengeType,bizToken,eventid,Eventid,Eventidexpirytime,eventidexpirytime,accesstoken,Authorization,sid,SessionId,CCPToken,CFIToken
Access-Control-Max-Age: 2147483647
Dclocation: GT1DMS
ETag: W/"12712-183dfc404c8"
Last-Modified: Sun, 16 Oct 2022 07:48:29 GMT
Nonce: 9558980773858857
Referrer-Policy: no-referrer
Scope: VISITOR
Sid: 2a431325-e68f-4569-a8e6-33f8d8ee274f
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Uuid: 81756972-cfb7-40da-98c1-96e1cec91a7e
X-Content-Type-Options: nosniff
X-Vcap-Request-Id: 13a095d8-8cf0-476a-4b64-88f44d690462
X-Xss-Protection: 1 ; mode=block
X-Akamai-CITISITE: GTDC
Cache-Control: public, no-transform, max-age=21600
Expires: Fri, 28 Oct 2022 07:45:38 GMT
Date: Fri, 28 Oct 2022 01:45:38 GMT
Connection: keep-alive
Set-Cookie: AKMTLTSID=F679DBE709F56F86D5344F577D5F36F8; path=/; domain=citi.com; secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://citimobile.citibankonline.com
www.citi.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Bold.woff
104.110.29.32200 OK 72 kB URL HTTP/1.1 www.citi.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Bold.woff
IP 104.110.29.32:0
File type Web Open Font Format, TrueType, length 71874, version 1.197\012- data
Hash 9fd45584370dd1c58e1ed9050efb925f
7b41085678166c62e23e8cf3c8c9ab13e13c356d
e9e9a67395a0d83b584208a19b95af203df8e8e6c6952fe76c690d60ea9381c7
GET /cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Bold.woff HTTP/1.1
Host: www.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff
Content-Length: 71874
Accept-Ranges: bytes
Access-Control-Allow-Headers: action,challengeType,accesstoken,appVersion,,Content-Type,sid,CCPToken,CFIToken,countryCode,businessCode,channelId,uuid,client_id,environmentId
Access-Control-Allow-Methods: GET,PUT,POST,DELETE,HEAD
Access-Control-Expose-Headers: action,challengeType,bizToken,eventid,Eventid,Eventidexpirytime,eventidexpirytime,accesstoken,Authorization,sid,SessionId,CCPToken,CFIToken
Access-Control-Max-Age: 2147483647
Dclocation: GT1DMS
ETag: W/"118c2-183dfc404c8"
Last-Modified: Sun, 16 Oct 2022 07:48:29 GMT
Nonce: 2899288251232378
Referrer-Policy: no-referrer
Scope: VISITOR
Sid: 65a69b6c-a6c9-4d94-9429-669e660e626f
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Uuid: cbcaf534-44f9-4eeb-9069-c35533d39c77
X-Content-Type-Options: nosniff
X-Vcap-Request-Id: 76cfb8fe-4330-4a21-4e28-5eb164daf75e
X-Xss-Protection: 1 ; mode=block
X-Akamai-CITISITE: GTDC
Cache-Control: public, no-transform, max-age=21600
Expires: Fri, 28 Oct 2022 07:45:38 GMT
Date: Fri, 28 Oct 2022 01:45:38 GMT
Connection: keep-alive
Set-Cookie: AKMTLTSID=89C07D83875AC33E4F1A7DA253A43AC4; path=/; domain=citi.com; secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://citimobile.citibankonline.com
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(2)
50.62.141.181200 OK 103 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(2)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1640)
Size 103 kB (103187 bytes)
Hash a5857f45dc475f0d0248f0e88b1910fe
801f894e1e1f8f45a002108d6db22b99a86078d3
b6f517c4279c052b89206db39d95274ef20699f4142aaa9e4339790d3228a64f
GET /city.com/img/js(2) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:37 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e3b-19313-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 103187
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d72d2f5d05f03753594e43fd34398221
ac6795c1c33f3fa2139e7f8dc601c3e6de6029a5
036c965156cf07faecc342cb2e30b7a20def68ad4a10423951ce871a7a3a6777
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5986
Cache-Control: max-age=115257
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:38 GMT
Etag: "635a3c19-1d7"
Expires: Sat, 29 Oct 2022 09:46:35 GMT
Last-Modified: Thu, 27 Oct 2022 08:06:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js
50.62.141.181200 OK 103 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1640)
Size 103 kB (103051 bytes)
Hash cc3f006c0d20688bd4d5760854e6fbfa
86c1c9948bad89d8978f121666970ca75a6041cf
7e035fe791d86c0346cacc50c10ab1cea6941f3dae04a87b7acc0e30ce6436d9
GET /city.com/img/js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:37 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e02-1928b-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 103051
Vary: Accept-Encoding
Keep-Alive: timeout=5
push.services.mozilla.com/
35.83.91.138101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.83.91.138:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bTb+CCX2tLjtmUptU8f4kg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3E++t5bhM5LJ5OgwvPykc7WSAN0=
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(5)
50.62.141.181200 OK 103 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(5)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1640)
Size 103 kB (103281 bytes)
Hash e20ba53af81eb737de7fad96944aa60b
530cce66fe22697dc035d6881942ff7bb0c409ff
e76caa473d34a77670863ffd51ee0e59b44c4bdc6367aa0e8e698bf6b264919f
GET /city.com/img/js(5) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e3c-19371-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 103281
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/bat.js
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/bat.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/bat.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(3)
50.62.141.181200 OK 103 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(3)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1640)
Size 103 kB (103051 bytes)
Hash a838afd9a56c8f89018f10bd09cc6421
84ee9b65a3192f5e64141e640a2ee6dc276204b0
0e8665d56063213d42b3650b1325534735f0fefe09ee48a7f734f83b5e4bfdfe
GET /city.com/img/js(3) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:37 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e30-1928b-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 103051
Vary: Accept-Encoding
Keep-Alive: timeout=5
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(6)
50.62.141.181200 OK 103 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(6)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1640)
Size 103 kB (103187 bytes)
Hash e1340ee2f64e9f54d9dbb4611f02ff99
b509c86c7c8add2aaef171af708d002a76838fc8
ac3211cc5864f812b2e7fe668137258fe2e2405cc42642d4fbcd07199f3c4028
GET /city.com/img/js(6) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e1b-19313-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 103187
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(7)
50.62.141.181200 OK 103 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(7)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1640)
Size 103 kB (103187 bytes)
Hash ee67077451cebf8876f2de2297fa96ca
35ef8b8e91654c9b777ad0393237cf7646f6bd2b
4027f452062da70c1206681e4d1e3ad20d633d217bcd0f954f98e4ea7743c842
GET /city.com/img/js(7) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e17-19313-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 103187
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/dpm_pixel_min.js
50.62.141.181200 OK 32 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/dpm_pixel_min.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (60150)
Hash a13c13bfc8e3a6eed56db40635dcfed8
8f7d95d999e8324bfa118d7a496df5f5f5c6e5f0
8e604cadc25d40a2ae050c1d6f15f273dd875f780411686b576284148cc697ad
GET /city.com/img/dpm_pixel_min.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e2f-19a96-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 31914
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(12)
50.62.141.181200 OK 93 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(12)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1567)
Hash 79c8eea8898418116e2341640f0ec400
7c123217fd21ddd24fa8cb33674b185e5616793d
5a2aa8a1ce876434e8f0912c3be63026f79d0b0f24ea591e5379d9186fae451f
GET /city.com/img/js(12) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e5b-16abf-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 92863
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(11)
50.62.141.181200 OK 93 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(11)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1567)
Hash 1d3e9d76d4f76b08cb4ceb30652535dc
b42727daec4a0e7f8e2665283c31be654a3f4e80
0264c5423e565a05bcc16d1abdfec999c4e92fd5ea90146251a8549cb93773f6
GET /city.com/img/js(11) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e44-16abf-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 92863
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash db7684d8de2b6aaa9e7a031edbd734b2
16d414d150cf708ab4a9d7c1178971db00d84382
200a1387c01af6e537905ae5aa590b719def68b6a6b2014925b8c3393ac21f98
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133884
Date: Fri, 28 Oct 2022 01:45:39 GMT
Etag: "635a83ea-1d7"
Expires: Sat, 29 Oct 2022 14:57:03 GMT
Last-Modified: Thu, 27 Oct 2022 13:13:14 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IblHWjue4uHzvHooJv8kQAHq-WCnma5rt962MAij7OMAv5NryAs8UA==
Age: 6229
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/3fac67bbed26d3e121bb84cefe395515.js
50.62.141.181200 OK 894 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/3fac67bbed26d3e121bb84cefe395515.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (518)
Hash 00a79177ffbf1161d3039c2f0f8541b6
4253bd5ea9a5bccd6f105677d90cbb77c3a2b139
feba39ed1bc19f5dc8733c76421db6294a9d9d868ca128551664fb623ba9c3d1
GET /city.com/img/3fac67bbed26d3e121bb84cefe395515.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e3f-fe5-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 894
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(10)
50.62.141.181200 OK 93 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(10)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1567)
Hash e8027c272fc8b146d2d67687166dcbf6
79ffac5d6ce9debd2fd3fefd927d4e8ad6e09cfa
e83c9c5a686b6460be3df5f34ddbe456588d4f575083e74045a00c4ff2be7db0
GET /city.com/img/js(10) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e35-16abf-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 92863
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash db7684d8de2b6aaa9e7a031edbd734b2
16d414d150cf708ab4a9d7c1178971db00d84382
200a1387c01af6e537905ae5aa590b719def68b6a6b2014925b8c3393ac21f98
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133941
Date: Fri, 28 Oct 2022 01:45:39 GMT
Etag: "635a83ea-1d7"
Expires: Sat, 29 Oct 2022 14:58:00 GMT
Last-Modified: Thu, 27 Oct 2022 13:13:14 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: l_Dl0KviXA7F6UpKommFY22bKn49xmQMhL9Z3Nn5iHHFYtytGf71tg==
Age: 6286
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(8)
50.62.141.181200 OK 103 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(8)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1640)
Size 103 kB (103165 bytes)
Hash 150f0f4c807995a977803d2ff092f3eb
53586f85f91df62000e9951a676153cd93435e9b
efcb0e09a533713a54d617f43991909e46d6430c9c1531787ea15492a15b9e86
GET /city.com/img/js(8) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62def-192fd-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 103165
Vary: Accept-Encoding
Keep-Alive: timeout=5
p.tvpixel.com/com.snowplowanalytics.snowplow/tp2
52.22.42.247200 OK 0 B URL HTTP/2 p.tvpixel.com/com.snowplowanalytics.snowplow/tp2
IP 52.22.42.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: p.tvpixel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:39 GMT
content-length: 0
server: nginx
access-control-allow-origin: http://verify-citybankonline.alert.brownboyboardbooks.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(13)
50.62.141.181200 OK 93 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(13)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1567)
Hash 351f91dc956821f77df4a3df9e488a4f
1c13fa31eff0e9d7d500650ae9f7d006ac40c4b9
8a13175818c1064520ce05abb77e35d1c88111dcf0cd991d5227a55ff196a7e3
GET /city.com/img/js(13) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e40-16aa9-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 92841
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/8e31a20960f50a1c34f7ccb1cd9737ec.js
50.62.141.181200 OK 250 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/8e31a20960f50a1c34f7ccb1cd9737ec.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (340), with no line terminators
Hash 588fcac72b049bfc02ab7e13f3b8aad1
ba9f376b983c31182cbfe9685b384fcafeed1bbc
4b0345e4841f9aaa14740b503c5f41fae2c6d6f57ff96607ee77d4425e4b15f9
GET /city.com/img/8e31a20960f50a1c34f7ccb1cd9737ec.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e52-154-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 250
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
p.tvpixel.com/com.snowplowanalytics.snowplow/tp2
52.22.42.247200 OK 2 B URL HTTP/2 p.tvpixel.com/com.snowplowanalytics.snowplow/tp2
IP 52.22.42.247:0
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: p.tvpixel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1618
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:39 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=86396b19-897f-4a6d-9e18-2a07d7eb2e3b; Expires=Sat, 28 Oct 2023 01:45:39 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: http://verify-citybankonline.alert.brownboyboardbooks.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/d77cad342c2e126c752063748cd63d48.js
50.62.141.181200 OK 7.4 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/d77cad342c2e126c752063748cd63d48.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (571)
Hash 8d7d1a07a42f1829164c181a86d4a5ce
15df732664fc173a68e640a70be122a88d5ae64e
2225e983ca98645af9de8be31506fccdfdf8f68317bd6837bdd7b8ddec50ab55
GET /city.com/img/d77cad342c2e126c752063748cd63d48.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e28-7899-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7391
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(14)
50.62.141.181200 OK 93 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(14)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1567)
Hash 07d6e770baf6cef24f751f89e0450919
d04a2ee8a5cf36e2b5ed43789f9e1f1974642b08
02e871a789bf3801140ce6b9d8a205d308ca81bce448e87fb6bdd60ee98cafc1
GET /city.com/img/js(14) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e1a-16aa9-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 92841
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/468b3e37a21c4198f4939c8aaca98066.js
50.62.141.181200 OK 652 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/468b3e37a21c4198f4939c8aaca98066.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (528)
Hash cf575532ba4fe60b8d117c943767685a
fa11dec769eb6f5d47e029ab2c13f5d1d215fcc6
8d234f7a5e62d07e57d23e8e5dd9af6cf32ed67efd3fe9f8ffd8b2548473b67d
GET /city.com/img/468b3e37a21c4198f4939c8aaca98066.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e4a-5c5-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 652
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(9)
50.62.141.181200 OK 93 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(9)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1567)
Hash dc97114eb2971a8778934dd712c1b0de
90927dda01826d8403a55c598c2e825e87811622
c9c84a02bd7802730402506e08933a2bf019ce78600f266189b86a2d53c0bdd6
GET /city.com/img/js(9) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e37-16abf-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 92863
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/6c8ea0384518f24fa6367b97cbf3fd9d.js
50.62.141.181200 OK 36 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/6c8ea0384518f24fa6367b97cbf3fd9d.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (614)
Hash 75978b9a0d65859315b8804798e21d1b
bd5729b9691e7c0135272b3a7110296c79ef8638
155d20b32a7244c1e8544abb772cba5f797d6287f3b250aa7b20a199f5d5f3f7
GET /city.com/img/6c8ea0384518f24fa6367b97cbf3fd9d.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62de5-1fee2-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 36095
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2559
Expires: Fri, 28 Oct 2022 02:28:18 GMT
Date: Fri, 28 Oct 2022 01:45:39 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2559
Expires: Fri, 28 Oct 2022 02:28:18 GMT
Date: Fri, 28 Oct 2022 01:45:39 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2559
Expires: Fri, 28 Oct 2022 02:28:18 GMT
Date: Fri, 28 Oct 2022 01:45:39 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2559
Expires: Fri, 28 Oct 2022 02:28:18 GMT
Date: Fri, 28 Oct 2022 01:45:39 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d74fd61a9f3caa5eada0b6b9f7154475
eb94382c5deaf0de61635a7d4ecc89928ef84e65
b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2559
Expires: Fri, 28 Oct 2022 02:28:18 GMT
Date: Fri, 28 Oct 2022 01:45:39 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4510a3cc-dfbb-45ed-b8d6-9bb45a47cad9.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4510a3cc-dfbb-45ed-b8d6-9bb45a47cad9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64dc32b98b1b728bf4324c6ddb8bfc21
88e5606d51d034ff9865bfd363c6a1721ccc9904
ea02af9d94c82fee1fa1f1086c6241fa4995ed4d2389fa5d5258d920c18cdb51
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4510a3cc-dfbb-45ed-b8d6-9bb45a47cad9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11395
x-amzn-requestid: 74d92b9c-c8c2-43d3-b084-4a0503a2ce2c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arxL5H2mIAMFfFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afbe5-396fc42b1c1365791d6889bf;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:45:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4ZkIg3rnrulTnmOI3xoz0pnx5rjM8SyOXHof9LkbtfNKUWPc6Yo1FA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:25:49 GMT
age: 11990
etag: "88e5606d51d034ff9865bfd363c6a1721ccc9904"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a4f2e78-4c98-4f44-b823-f9f9c3850dab.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a4f2e78-4c98-4f44-b823-f9f9c3850dab.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 36abb19bfc8dc656604d1aaf0f9535f8
2a9686597b6baded54a9dbead224193825d2fddf
d1577656aafce56a2088479a357df0df8bfef92952290cef14cca89d43043ab8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a4f2e78-4c98-4f44-b823-f9f9c3850dab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8759
x-amzn-requestid: b8158571-eda8-4aec-9595-a4082b7bee5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arwwIEdzIAMFvnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb33-7f65d3997faa3c5520e6b51f;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:11 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U7Xxk7NDKFyC4jUkSmUBeLvBTqqEnQOR8tzfKAzyf2sFbw9JOQ7QWw==
via: 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:27:25 GMT
age: 11894
etag: "2a9686597b6baded54a9dbead224193825d2fddf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07dce919-c8e0-41fb-b154-26cd9bb719d4.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07dce919-c8e0-41fb-b154-26cd9bb719d4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f86efbf3a0e8cc6b6a4958061afd888c
37eaa2d75be51ba0c67f614cd6ba190b18eb0523
23578ad0c56516329022eda2d82a05c15afcfba2558500fe7d448d6f62be972b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07dce919-c8e0-41fb-b154-26cd9bb719d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6649
x-amzn-requestid: a26bc0d2-4171-4017-8d6e-630e173130d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: amd3pH6koAMFrZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358dcfd-0b9039d2688e5e9b326ea26c;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 07:08:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 0euEwpxRQQM2xkLGXDrlhgaOsfILJReCNFjn2S6HKOV3c6l8W78BEA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 07:09:21 GMT
age: 66978
etag: "37eaa2d75be51ba0c67f614cd6ba190b18eb0523"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ee9a743-41f5-42f0-855e-53c4f9175a44.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ee9a743-41f5-42f0-855e-53c4f9175a44.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 348e4d5f46d652d497f9ad078d1dea3e
7ab34ed8ae4e7048edd25f8b533d5237dea83688
dd02da6461e36a128579a3fb26da4c7f303b5683b27a7bd7a50309d4101cba3e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ee9a743-41f5-42f0-855e-53c4f9175a44.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8323
x-amzn-requestid: 4b90019d-6e8c-498d-8627-e4f0c9dda30e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arw0gGYKoAMFRBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb4f-620a4264143fc3fd207acc5e;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NPWfRW5iNN1bcEzJGGlGa8kBWq-t_cOrbImZBUTaFi7QjGhjAj0GZQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 21:58:21 GMT
age: 13638
etag: "7ab34ed8ae4e7048edd25f8b533d5237dea83688"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5dac341-2b9d-4d07-ab3f-dafe74f88664.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5dac341-2b9d-4d07-ab3f-dafe74f88664.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2193431d88baf9af6829421cd13743ff
a192ab139ad0dc5cf206986eb06028ddad224e46
c535e09fb4a53ca580f5f5926d1494c50b6ad6c7c9ec78df6b7015213852b737
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5dac341-2b9d-4d07-ab3f-dafe74f88664.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9720
x-amzn-requestid: 6b4749ca-bcb9-4274-a309-e6d463851a6a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aV_n6FOSIAMFroA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63524632-56186f1f2a0bf68f6dba843b;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 07:11:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DjRLNrY4BFc3GwHGBW40LIyh-RYT3hshdKPxXok4KE97fGvatXN6yQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 11:05:53 GMT
age: 52786
etag: "a192ab139ad0dc5cf206986eb06028ddad224e46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c17e2f3-4edf-44ae-9b49-0a83b2498309.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c17e2f3-4edf-44ae-9b49-0a83b2498309.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ec53913f994b99340024aa1958102a2
8a2e935e59efbe8a6b4f4fad1ef0b87241731dec
7a17e72f6767e8d129ce43ec41aa535827fbc90b085898f5a764166c7600b48b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c17e2f3-4edf-44ae-9b49-0a83b2498309.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10330
x-amzn-requestid: d1306110-4c96-44f6-86c9-542354fb5f26
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arw3DHedoAMFegg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb60-236067d573debd7b248a3579;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:56 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FEgc1gYGoQvntxdOiUoXrDNK6irThtVu-E1iztiw5Zry4zyLE3V9eQ==
via: 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:02:13 GMT
age: 13406
etag: "8a2e935e59efbe8a6b4f4fad1ef0b87241731dec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/51aba9f62787efbaa13e53a8d1ae3892.js
50.62.141.181200 OK 649 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/51aba9f62787efbaa13e53a8d1ae3892.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (524)
Hash 980e52a2c9e28fdf32301b6716d81b73
4d161c3ab8796be6fcdf86d92ffce216acf5209c
2542302ed836267987c3491480930774754864cbd24cfd2b6c8684da02ea91b5
GET /city.com/img/51aba9f62787efbaa13e53a8d1ae3892.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e3a-52a-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 649
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/d74f82b561a6aa5d9247eaf72394131a.js
50.62.141.181200 OK 663 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/d74f82b561a6aa5d9247eaf72394131a.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (549)
Hash 6bde9e19d3aed7b919afc44ac0b8822e
7561ce9117a75bc19c10b06dea84636e6e3e5b9b
0bd0e1ec976540cbfafa53e7fa4e90041e747e456f01a4dd5165703c937ff9f1
GET /city.com/img/d74f82b561a6aa5d9247eaf72394131a.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e38-631-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 663
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/557566dc60916e3de69e006bef252459.js
50.62.141.181200 OK 763 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/557566dc60916e3de69e006bef252459.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1964)
Hash 317da12924228063a155ef6c18f54170
fecd1e51b4925ccda28b428e512ef25cb65b34ea
2ef1ab0033be93a4c92819bf929938a96738d6ee544bc5b4bdd9fe6eb4aa00ae
GET /city.com/img/557566dc60916e3de69e006bef252459.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e39-887-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 763
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/42d4d669434e7d621371bd59ca097dbf.js
50.62.141.181200 OK 1.6 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/42d4d669434e7d621371bd59ca097dbf.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (532)
Hash 230475f73e9749be49930b65b85a6301
c9b51ddb3463ddaee285e45d202114135045ce33
1fee4765de2c66c0bfde9bbbfa65b24fc5996373d7c7791c6337eabeb1f141fb
GET /city.com/img/42d4d669434e7d621371bd59ca097dbf.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62de7-12bc-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1570
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/d90ce1a791ada193ee0ca4e9ce66632d.js
50.62.141.181200 OK 1.2 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/d90ce1a791ada193ee0ca4e9ce66632d.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1194)
Hash ea5eebc93c345cb7ecd508f205e7c399
45eefd66ad099e29c4ebde526de527408a8fb966
64feb844f72ea374cf5addb837ded6badd366b847ab7523b809f4a3903c14aeb
GET /city.com/img/d90ce1a791ada193ee0ca4e9ce66632d.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e61-12f1-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1200
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/9d552101ccdbc20ef239307e0ace1356.js
50.62.141.181200 OK 34 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/9d552101ccdbc20ef239307e0ace1356.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (573)
Hash bea764b82d812efd4dbf1a14c053bcf1
781b620451e19e8ed72b400f0e28af3ddbf43a44
3d4d45f928036ac102ef92f25607cac07ce29c7e39168466d31bf39e70d2fc11
GET /city.com/img/9d552101ccdbc20ef239307e0ace1356.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62df0-2705b-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 34355
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/fdf45a7c15c1cee06bb71e10dac4e26e.js
50.62.141.181200 OK 548 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/fdf45a7c15c1cee06bb71e10dac4e26e.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (524)
Hash 38e6a3a3c9a5b9bdbf4c2afa815a0eab
e59ec1f408515c29253192f01d6c445152ed6c7e
44f8d4a027af822df7160def12841736ccb9b39e6431121acae31a8713baf045
GET /city.com/img/fdf45a7c15c1cee06bb71e10dac4e26e.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62dec-3dd-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 548
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/serverComponent.php
50.62.141.181200 OK 751 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/serverComponent.php
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (2006)
Hash 2569922762a2f5f19123e851e6768d54
b9beebfb91cacd70b63bdc3e105cbd583781f025
98d353b6f63d91a83a3278f8b1db1aebf1c007b15702b90bc5e2a018b6ea3b11
GET /city.com/img/serverComponent.php HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
X-Powered-By: PHP/8.1.11
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 751
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tagging.min.js
50.62.141.181200 OK 11 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tagging.min.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (45425), with no line terminators
Hash 88e1054ab6d33e9defe7ec049eb50ba5
1e2712fbcea34c4a4dc6f3a7e38ee72011a336d3
8831d2aa2ab752f277b9c61258b5506bf6ec53b814d9ca88a0d3611709f5eefe
GET /city.com/img/tagging.min.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62ded-b171-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10566
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/banner.min.js
50.62.141.181200 OK 4.8 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/banner.min.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (15581), with no line terminators
Hash e9b433ff656ba0687ad16bc9071a2a75
2d5a95f59a8c8087e6a2522166db8a16825736ef
5bc864b5da90ce783d3ef0e8d4d0a255966ee1f49671eb157c8d119c5050e186
GET /city.com/img/banner.min.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e21-3cdd-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4812
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tags.js
50.62.141.181200 OK 10 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tags.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (15031)
Hash 20fa0088d5e956d4edd38c48b886250e
83e6de0d6037c47f8bcff13dbf54f367991a5758
07e3fa4428d9e7cc2a2822f32875c4bcde1153103d95c417800650361e3d57dc
GET /city.com/img/tags.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e12-141f1-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10167
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/Bootstrap.js
50.62.141.181200 OK 71 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/Bootstrap.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (579)
Hash 6bccff550405fb6227bfa9ed1608f587
1259a5bee3ea2b7b72a2544ea1a8b3ff8da94903
4fbd3bd4726ed8c43b1ee693cd143fb519957b0f7a768e1f9cc2b25fd0de28e0
GET /city.com/img/Bootstrap.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62dfb-393a3-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/logo.js
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/logo.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/logo.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
dpm.demdex.net/id?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&ts=1666921539080
34.249.106.217302 Found 0 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&ts=1666921539080
IP 34.249.106.217:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /id?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&ts=1666921539080 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v044-004e84d7b.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: http://dpm.demdex.net/id/rd?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&ts=1666921539080
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=31710009306560758811464809514209621048; Max-Age=15552000; Expires=Wed, 26 Apr 2023 01:45:40 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: RhqRNls2Rw0=
Content-Length: 0
Connection: keep-alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tags.js(1).download
50.62.141.181200 OK 82 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tags.js(1).download
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (15031)
Hash f7ab1198801b8843ae33d61a778ce15b
f00f5121ba45a47f2c57bf96aeb61e4e5aff12df
ecddeb2adfa02b823671f9e56787dd23cadfe86fa9042940d5fea9e38054c174
GET /city.com/img/tags.js(1).download HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e1f-141f1-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 82417
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/1-es2015.e6099f56b51f44414444.js
50.62.141.181200 OK 110 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/1-es2015.e6099f56b51f44414444.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65536), with no line terminators
Size 110 kB (109789 bytes)
Hash 49ccd713648338622978d8b39faf97e4
03a005976de4d0b377d6548004fd46c48d3b4e34
5d0fe77c4ca3fade748fe4cdcd6ddeaa56cf3b136aa938019b34495b516616d0
GET /city.com/img/1-es2015.e6099f56b51f44414444.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62dee-ba7f2-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
dpm.demdex.net/id/rd?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&ts=1666921539080
34.249.106.217200 OK 124 B URL HTTP/1.1 dpm.demdex.net/id/rd?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&ts=1666921539080
IP 34.249.106.217:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f6783349ac4177ec3b3845fd520dca6
d84e7a43a8c8ff6f1a568ad6cb4162767f5b32b7
64bc30aa6a9d9e5396bb67c6af32c31f5ca6610641f0bdea10d759281df6adca
GET /id/rd?d_visid_ver=3.1.2&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&ts=1666921539080 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Content-Type: application/x-www-form-urlencoded
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Connection: keep-alive
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v044-025937753.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Vary: Origin
X-Error: 172
X-TID: L8HsuM1cSLQ=
Content-Length: 124
Connection: keep-alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/embed.js
50.62.141.181200 OK 676 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/embed.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (449)
Hash 89c3892e6759fce75721ce954f3c35e5
b6c68164536f402b6440b20e98649bbee3a251f1
fc5ee98ac49e747826400feb07739cd07f96784fe6ee250a59d43900e1c271cb
GET /city.com/img/embed.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e19-625-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 676
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
metrics.citi.com/id?d_visid_ver=3.1.2&d_fieldgroup=MC&mcorgid=61834D9B5228A7430A490D45%40AdobeOrg&ts=1666921539301
15.188.95.229200 OK 89 B URL HTTP/1.1 metrics.citi.com/id?d_visid_ver=3.1.2&d_fieldgroup=MC&mcorgid=61834D9B5228A7430A490D45%40AdobeOrg&ts=1666921539301
IP 15.188.95.229:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 86f09d1a8cd06d206bd8de3c306279ed
571917f5a1fbb38356be340f9459621a58443fda
55b92109b6045ff228bf6b64297db981f77c00affa2d89dffd74dfbb9cbd6a0b
GET /id?d_visid_ver=3.1.2&d_fieldgroup=MC&mcorgid=61834D9B5228A7430A490D45%40AdobeOrg&ts=1666921539301 HTTP/1.1
Host: metrics.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
access-control-allow-origin: http://verify-citybankonline.alert.brownboyboardbooks.com
access-control-allow-credentials: true
date: Fri, 28 Oct 2022 01:45:40 GMT
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi=[CS]v1|31AD9A220B65867B-400008AFAB002185[CE]; Path=/; Domain=citi.com; Max-Age=63072000; Expires=Sun, 27 Oct 2024 01:45:45 GMT;
AMCV_61834D9B5228A7430A490D45%40AdobeOrg=0%7CMCMID%7C10327505217099720262373576193234727388; Path=/; Domain=citi.com; Max-Age=63072000; Expires=Sun, 27 Oct 2024 01:45:45 GMT;
s_ecid=MCMID%7C10327505217099720262373576193234727388; Path=/; Domain=citi.com; Max-Age=63072000; Expires=Sun, 27 Oct 2024 01:45:45 GMT; SameSite=Lax;
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 89
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/16003743.js
50.62.141.181200 OK 0 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/16003743.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /city.com/img/16003743.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e60-0-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 0
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
dpm.demdex.net/id?d_visid_ver=3.1.2&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&d_mid=10327505217099720262373576193234727388&d_cid_ic=AVID%0131AD9A220B65867B-400008AFAB002185&ts=1666921539435
34.249.106.217200 OK 302 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=3.1.2&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&d_mid=10327505217099720262373576193234727388&d_cid_ic=AVID%0131AD9A220B65867B-400008AFAB002185&ts=1666921539435
IP 34.249.106.217:0
File type JSON data\012- , ASCII text, with very long lines (358), with no line terminators
Hash 78699858833e960b63ae271277f297fc
814e8a25305adcb38245e4deded6ae07828e88a8
be0342cbc66a11ff452fb226c9b3701ab6a23c0dc7d4e5d9c947a34342341509
GET /id?d_visid_ver=3.1.2&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=61834D9B5228A7430A490D45%40AdobeOrg&d_nsid=0&d_mid=10327505217099720262373576193234727388&d_cid_ic=AVID%0131AD9A220B65867B-400008AFAB002185&ts=1666921539435 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v044-063b50a55.edge-irl1.demdex.com 1 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=05737989424213820412977786182190909567; Max-Age=15552000; Expires=Wed, 26 Apr 2023 01:45:40 GMT; Path=/; Domain=.demdex.net
Vary: Origin
X-TID: JhlA+8BjTXk=
Content-Length: 302
Connection: keep-alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/96e0eb995483e83e7b3f71968eedeed1.js
50.62.141.181200 OK 122 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/96e0eb995483e83e7b3f71968eedeed1.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (965)
Size 122 kB (122344 bytes)
Hash ca6fd7e47ea777f9526a4ad8babe5d29
f618c7b67c26a3928ae4f09244ad1b82fce65a7f
dbeecb1f966b92798a152c6f918ad42cb67652f8ee6908f3c8f1f7ca4ee0eaa4
GET /city.com/img/96e0eb995483e83e7b3f71968eedeed1.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:39 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e4f-63067-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/16001692.js
50.62.141.181200 OK 435 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/16001692.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (683), with CRLF line terminators
Hash b52fff442612ca5cb4421d120c836e08
7af38d2d4c808da1152ccb57f5ac7d0680165a4a
815e408d62635cf226ee1002238ef4d978c0afe9c22da9fda94816a082e27f53
GET /city.com/img/16001692.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e4c-2ad-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 435
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(1).txt
50.62.141.181200 OK 1.0 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(1).txt
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1707), with no line terminators
Hash 4f74d4e7894f6e9a5e8bb6972a2de856
670b5b0169a48169a0ebd5fd4b7fb99ac53dcde5
d170df1f45194591e6ec394653f027be2645be51caceb2a2407507886c8aad81
GET /city.com/img/f(1).txt HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e0b-6ab-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1033
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/plain
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(2).txt
50.62.141.181200 OK 1.0 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(2).txt
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1687), with no line terminators
Hash dbc4b7b5fd5ae97be6b6680a68bac057
2c5aa0b08c06a35bbdee0f9d667b6e6022619f06
376dd3ebfa1791363def7ec1870bff17a4e9395fadbf1f06106d31c9b117383c
GET /city.com/img/f(2).txt HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e08-697-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1029
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/plain
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tags.js(2).download
50.62.141.181200 OK 82 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/tags.js(2).download
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (15031)
Hash fe50cab64bcc9f5c84a2a6dae5ddb851
fd34b1022666c559a6db812aaba4b6932118ecfa
7c61e941b642ce421086c40e8edd357d643de75763ebe83073d329f2693f6786
GET /city.com/img/tags.js(2).download HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e27-141f1-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 82417
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(4).txt
50.62.141.181200 OK 1.0 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(4).txt
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1687), with no line terminators
Hash c671c874c379aa20886bb407dc3ed02d
4d9871480b56ff84625bea6fd18a4b41d15a1317
c4b15f8a829e17033fcb0f636684bda313321d63b1422b80bac65612e4ac3ac4
GET /city.com/img/f(4).txt HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e16-697-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1028
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/plain
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(3).txt
50.62.141.181200 OK 1.0 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(3).txt
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1687), with no line terminators
Hash e6bb6c7134f032b8832e06f8ca34671d
f3115032259f52fca13cc557da48682fb47df48c
351931952c69a2387a9c1f2c571a99af29efb9c543d729105b1e362803119380
GET /city.com/img/f(3).txt HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e2a-697-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1029
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/plain
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cedric.js
50.62.141.181200 OK 115 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cedric.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (63761)
Size 115 kB (114803 bytes)
Hash 0aee8b9a53e8c5dbcb2f7f6be4d13c0c
47312dabe77080b429e40d1edc7769479739d800
5fc5c3425a87a1f8c42d4c94be3e89d176389a47af2a4b146666bf7ff613feae
GET /city.com/img/cedric.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62de8-96983-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5
Transfer-Encoding: chunked
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(5).txt
50.62.141.181200 OK 1.0 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(5).txt
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1687), with no line terminators
Hash 2fad7d3a36c3cdb2bddb79302907d36d
59d3adf7aff60daebb3df7d2843fa34f615a9d9b
9a864c6dca0a20d38c7882125d8e99dcc8fb3c777c0b09daffce936d6f40dc46
GET /city.com/img/f(5).txt HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62dff-697-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1028
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/plain
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(6).txt
50.62.141.181200 OK 1.0 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(6).txt
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1687), with no line terminators
Hash a80de54c80ad3681234349c17b60fb97
c915a16d75f628a27f5103f54074e89b1c22e517
05110e11f13f21ad8c5fc914be1c38d2a087873e9668de6b7c16e162ec5f1597
GET /city.com/img/f(6).txt HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e29-697-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1029
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/plain
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(7).txt
50.62.141.181200 OK 1.0 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(7).txt
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1706), with no line terminators
Hash 857305e1625df88982ee173b3c5a59dc
c3a2c95afb3f45b6c1fe0913398449a33c7a00fb
113c6a2f238ba25b581d70f93ea0de4ac2613816f8520e83838d2b7e0b34e73f
GET /city.com/img/f(7).txt HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e05-6aa-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1040
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/plain
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(8).txt
50.62.141.181200 OK 1.0 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/f(8).txt
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type ASCII text, with very long lines (1687), with no line terminators
Hash fb91fc2bad1c3ec132eb6d3f3c841279
f69b2c2cb6975671b36ae0640a2a4500719bcb1f
b7f269982fad22d55914c1820e4c47079cdfdb26f2898c350a83002bd2a22f6a
GET /city.com/img/f(8).txt HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e50-697-5da1a18f0ea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1030
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/plain
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/bat.js
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/bat.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/bat.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
50.62.141.181200 OK 152 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type Unicode text, UTF-8 text, with very long lines (65017), with no line terminators
Size 152 kB (152500 bytes)
Hash 6fec417a3d17d627dafe4bfb42b6adc9
0163fedbe38e00a72062ec026dc716ad4ebf4cb2
d0f49e8a512369a4642d0ee74c29902e6978f26326f5c5be219d8d759640ec86
GET /city.com/img/styles.a4a9307b7b034ca614a7.css HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e18-134761-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/citilogoredesign.png
50.62.141.181200 OK 1.8 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/citilogoredesign.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 89 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash b8c9db53b866a0120618cd396e1513f1
5cfe9732c78e4eb7365681834cdd682b977a0232
102503acef6077fcf8e42a856fb4904fcd74224a32d5d8efcd13236ac6309fed
GET /city.com/img/citilogoredesign.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62df7-707-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 1799
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/laptop-and-phone-pairing.png
50.62.141.181200 OK 3.0 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/laptop-and-phone-pairing.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 132 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash b046a1c58205ebfbee7886df2de485b5
05a4dd6b988a6c55afa3225780e341e5db52a787
a9a43473908fb995ecdc6bd80d80fd42d3e43bf31687aff0978d7389de2573aa
GET /city.com/img/laptop-and-phone-pairing.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e62-be4-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 3044
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/social-media_youtube@3x.png
50.62.141.181200 OK 1.2 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/social-media_youtube@3x.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 72 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 3541c5442b1b90b4efe20ab4b2802323
ad778d35efc7b9950d2158d800b61966204b75d8
be9b5382b4526ffd3306d0292122ce3599123f1cd543f52f3035b4f24fbf9de8
GET /city.com/img/social-media_youtube@3x.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e26-497-5da1a190f6f00"
Accept-Ranges: bytes
Content-Length: 1175
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/appStore@3x.png
50.62.141.181200 OK 20 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/appStore@3x.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 351 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash d461f4d2e32e339372869b3f4be72007
d8e3a847a7d18c3948617f75622f6cd27bd4cd54
87c763c6b05015e55915d0a1e6647e4e5d0b996e78d79e1afe228dd33b68e65b
GET /city.com/img/appStore@3x.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e3e-4e4f-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 20047
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/phone.png
50.62.141.181200 OK 9.9 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/phone.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 396 x 270, 8-bit/color RGBA, non-interlaced\012- data
Hash 448436abd4bc903abc9a9c53cdd2fe5e
1f3731747ded20c04b25009d3a570d1164ddf1ed
5df469ee4da2bc124065cb8df0e24173c5cbc8b9e0c807960fc39c93ffb640c8
GET /city.com/img/phone.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e47-2691-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 9873
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/logo.js
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/logo.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/logo.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/social-media_twitter@3x.png
50.62.141.181200 OK 1.3 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/social-media_twitter@3x.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 66 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 60b0fec951727b4762fabc2570a1317f
56f9ed9699233f4cef1317a9a2c83179070b5e8a
5394d11ec8ad7a5494bcdb65cd95f885388532e14fb45a747e249112389bd837
GET /city.com/img/social-media_twitter@3x.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e03-4fd-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 1277
Keep-Alive: timeout=5
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/icon_globe_med-grey@2x.svg
50.62.141.181200 OK 3.5 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/icon_globe_med-grey@2x.svg
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (2189)
Hash 8409dd31d1b13d560ad4b9ae144054f7
37114f6c37aa187f5bdc360547678f22eaa9d9c6
a593628f2d5ba814f37fbcd3963162f094c2764d4b15d82464c2d1aef92f150f
GET /city.com/img/icon_globe_med-grey@2x.svg HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e09-dc3-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 3523
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/svg+xml
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/googlePlay@3x.png
50.62.141.181200 OK 25 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/googlePlay@3x.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 390 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 27b0482f8ebba1e3cc92d2eee497497e
379e9e2ed883250c02736c151a47d38248285572
a079bb0d5590826bcc664715122004dff51e76c79608bc29f586c9388b623b77
GET /city.com/img/googlePlay@3x.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:41 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e56-61f5-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 25077
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/050-location@2x.svg
50.62.141.181200 OK 1.8 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/050-location@2x.svg
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (785)
Hash 2a7528b41a09c242728c2805a6c37219
44f73d9270a82962219bb314894d5b5624c55631
6336ae7b60dff18e0a37721a3a19fd5e18568577a64faa662969d35966dbf72b
GET /city.com/img/050-location@2x.svg HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e43-6d8-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 1752
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/svg+xml
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/social-media_facebook@3x.png
50.62.141.181200 OK 445 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/social-media_facebook@3x.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 27 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 1f627e41e84a3b87f57c9de2e3a722d0
a7d350d9d267149f60b46a454f021920f89df877
695788dc05d94be3b32060ffea15c1a4d74897bd32e5da7811e7ca76d82fc86b
GET /city.com/img/social-media_facebook@3x.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62df2-1bd-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 445
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/EqualHousing.png
50.62.141.181200 OK 1.6 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/EqualHousing.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced\012- data
Hash 83a5bb8d054fc7b4adab0615c487dc25
8a26d8e39da754c8f63d2a3122ed87a6e4a7f369
f23485e8b9c368f28f18a0bb110573df79c00ac3a2ca71d68017db100207639d
GET /city.com/img/EqualHousing.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62dea-646-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 1606
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/qrsignon.png
50.62.141.181200 OK 741 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/qrsignon.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced\012- data
Hash a5ee9c25c190474a2efe66a609a2ca19
890832b6a7115abd51f480dce8e74206f06a428a
dc876f814074650acde84db7a7f34c583f043b83130e5de49de65f18d1ee2683
GET /city.com/img/qrsignon.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e58-2e5-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 741
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/laptop-and-phone-success.png
50.62.141.181200 OK 2.5 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/laptop-and-phone-success.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type PNG image data, 132 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash d63ac8356aa91fa9f070d79dadaed88f
7990f46b70c992de92c29e2361ddf9f0bf369869
e5c725c5a6510cd7323ff66fa032e69cfe7aec1dd042911cae0607d071670eec
GET /city.com/img/laptop-and-phone-success.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e0e-9f0-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 2544
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
online.citi.com/nga-lite-signon/LSO_4959.jpg
23.13.42.166200 OK 108 kB URL HTTP/2 online.citi.com/nga-lite-signon/LSO_4959.jpg
IP 23.13.42.166:0
File type JPEG image data, progressive, precision 8, 2160x600, components 3\012- data
Size 108 kB (108233 bytes)
Hash 7dd9aa1bc81d1bf0e77e3e08de814096
0e251835579aa147fd88c76b85b74359856c6de9
dbdebfcc2ed9932006edcfc7f8190ca5c9a04ff737e990645712ccc33e5ce070
GET /nga-lite-signon/LSO_4959.jpg HTTP/1.1
Host: online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 25 Apr 2022 13:54:04 GMT
accept-ranges: bytes
content-length: 108233
x-akamai-citisite: GTDC
strict-transport-security: max-age=300
p3p: policyref="/w3c/p3p.xml", CP="CAO DSP CUR ADM DEV OUR NOR STP UNIo NAV STA PREi TAI"
content-type: image/jpeg
date: Fri, 28 Oct 2022 01:45:42 GMT
set-cookie: AKMTLTSID=DA9BB89AFE13F0E7C85C185EB782F456; path=/; domain=citi.com; secure
x-webkit-csp: frame-ancestors https://*.citi.com https://*.citigroup.net https://*.nsroot.net
x-content-security-policy: frame-ancestors https://*.citi.com https://*.citigroup.net https://*.nsroot.net
content-security-policy: frame-ancestors https://*.citi.com https://*.citigroup.net https://*.nsroot.net
X-Firefox-Spdy: h2
fast.citi.demdex.net/dest5.html?d_nsid=0
23.36.76.161200 OK 2.8 kB URL HTTP/1.1 fast.citi.demdex.net/dest5.html?d_nsid=0
IP 23.36.76.161:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash b8a1b21bd0651935d53a7bff0c2479d6
31527c952669b6d1d06c537eb50c9043f576e607
80888fb8b92d01d8dd990af664d273f6364b2917741b09911096099ce4eef1bd
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: fast.citi.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: text/html
ETag: "2c9c2ee145ee280b85a217ad7045fae5:1580750826.437238"
Last-Modified: Mon, 03 Feb 2020 17:27:06 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=21600
Date: Fri, 28 Oct 2022 01:45:42 GMT
Content-Length: 2785
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Light.woff
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Light.woff
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Light.woff HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Bold.woff
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Bold.woff
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Bold.woff HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Bold.woff
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Bold.woff
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/cds-assets/fonts/interstate/Interstate-Bold.woff HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/assets/partner-login/qr/images/qrsignon-1.png
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/assets/partner-login/qr/images/qrsignon-1.png
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /cbol-pre-login-static-assets/assets/partner-login/qr/images/qrsignon-1.png HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Light.ttf
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Light.ttf
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Light.ttf HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Bold.ttf
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Bold.ttf
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /cbol-pre-login-static-assets/commonui-assets/fonts/interstate/Interstate-Bold.ttf HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Bold.ttf
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Bold.ttf
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/cds-assets/fonts/interstate/Interstate-Bold.ttf HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8d0820323a8a2632f2b70da66b8c7be1
21fb306754d3db02826a8446625f5e143bb672d0
1e7aa665984cd38ca6ac3e6197ad5ebe3e7f81d49b97d9facff7f40af905f056
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=135884
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:42 GMT
Etag: "635aa412-1d7"
Expires: Sat, 29 Oct 2022 15:30:26 GMT
Last-Modified: Thu, 27 Oct 2022 15:30:26 GMT
Server: nginx
Content-Length: 471
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Light.woff
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Light.woff
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/cds-assets/fonts/interstate/Interstate-Light.woff HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/commonui-assets/fonts/interstate/Interstate-Bold.woff
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/commonui-assets/fonts/interstate/Interstate-Bold.woff
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/commonui-assets/fonts/interstate/Interstate-Bold.woff HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Bold.woff
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Bold.woff
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/cds-assets/fonts/interstate/Interstate-Bold.woff HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:42 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
contents2.00110.citi.com/client/v3.1/web/wup?cid=cedric
52.154.174.214200 OK 1.3 kB URL HTTP/2 contents2.00110.citi.com/client/v3.1/web/wup?cid=cedric
IP 52.154.174.214:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (1317), with no line terminators
Hash 35ea2a4d5295908393d36c931bbcfa1e
fbf7a057db8fe90a96cf0a47881c4a3abd0e714c
15263d64e7bd10804c2bb2a98381360a1958280b94477b0cce34b09e7fcec35a
POST /client/v3.1/web/wup?cid=cedric HTTP/1.1
Host: contents2.00110.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 172
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 1317
date: Fri, 28 Oct 2022 01:45:42 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: 5dcd9ec0-d108-469c-88a6-9f88be29b51a
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 2ffa21dd760aa90891f532813f65671e
1540aba0e472dbc49a56e292257df485564da9be
5995a53ea5e76db5d3ddb9b9c85b28ed8bdff1188319d1946e836c53753eab90
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 26 Oct 2022 12:17:21 GMT
Expires: Wed, 02 Nov 2022 12:17:20 GMT
Etag: "1540aba0e472dbc49a56e292257df485564da9be"
Cache-Control: max-age=469296,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760ffe5c6a430a28-ARN
1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html
54.230.111.57200 OK 221 B URL HTTP/2 1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html
IP 54.230.111.57:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 21e34cf6a03f570df49e212018a567d0
f0be4058936850ae0163f5137600d14b6632bbb3
0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6
GET /scripts/prod/crossdomain.html HTTP/1.1
Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 221
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Thu, 27 Oct 2022 21:00:58 GMT
etag: "21e34cf6a03f570df49e212018a567d0"
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WvzbeKcgoxPv5QX8KXixgVPQE9OZmH4oyHwq5DZfzw8g2lEX0h34rg==
age: 17086
X-Firefox-Spdy: h2
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Light.ttf
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Light.ttf
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/cds-assets/fonts/interstate/Interstate-Light.ttf HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:43 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/commonui-assets/fonts/interstate/Interstate-Bold.ttf
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/commonui-assets/fonts/interstate/Interstate-Bold.ttf
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/commonui-assets/fonts/interstate/Interstate-Bold.ttf HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:43 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
54.230.111.57200 OK 3.2 kB URL HTTP/2 1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
IP 54.230.111.57:0
File type ASCII text, with very long lines (3227), with no line terminators
Hash 9ee48a4da9c402e8a23ad085fb71f28f
f0c59306d6313f9bee02b53ca8903991bd24bfd7
9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622
GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1
Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3227
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Thu, 27 Oct 2022 21:00:58 GMT
etag: "9ee48a4da9c402e8a23ad085fb71f28f"
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QzHQ_VKgNk8fN--AIhW2LcnAiZxb-_Y53qdmHNQ-UJ0Ib-r1nR6SvA==
age: 17086
X-Firefox-Spdy: h2
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Bold.ttf
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/cds-assets/fonts/interstate/Interstate-Bold.ttf
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/cds-assets/fonts/interstate/Interstate-Bold.ttf HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:43 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 574a24652a04f5fccb3b0a46211d8e00
cfd55d587eabdad1b2e8ac65e1c2ce94ac153adb
54f8f20994d653b543eff039605748a4f297144ed491bc1e6bbbe4a64855fc91
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 06:00:09 GMT
Expires: Tue, 01 Nov 2022 06:00:08 GMT
Etag: "cfd55d587eabdad1b2e8ac65e1c2ce94ac153adb"
Cache-Control: max-age=360264,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760ffe5c6a7c98fa-ARN
1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html
54.230.111.57200 OK 221 B URL HTTP/2 1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html
IP 54.230.111.57:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 21e34cf6a03f570df49e212018a567d0
f0be4058936850ae0163f5137600d14b6632bbb3
0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6
GET /scripts/prod/crossdomain.html HTTP/1.1
Host: 1.c81358859121583b7adf2ace89cb39f44.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 221
date: Thu, 27 Oct 2022 19:20:42 GMT
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
etag: "21e34cf6a03f570df49e212018a567d0"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uyMLFKi-88anvNHyTAlC9DQkaX9LVXsgXAsyHenv7qsquOY3rEkzYg==
age: 23102
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash bbda7abd2453a7a92404104b510b715d
4cae4690092c3f6db7202f35315a56291abf170c
9a3a50e21252ca15150351d657f273e562d2e925312c3801c87138c0db1ba791
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 27 Oct 2022 23:15:48 GMT
Expires: Thu, 03 Nov 2022 23:15:47 GMT
Etag: "4cae4690092c3f6db7202f35315a56291abf170c"
Cache-Control: max-age=595203,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760ffe5c6ba009af-ARN
1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html
54.230.111.103200 OK 221 B URL HTTP/2 1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html
IP 54.230.111.103:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 21e34cf6a03f570df49e212018a567d0
f0be4058936850ae0163f5137600d14b6632bbb3
0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6
GET /scripts/prod/crossdomain.html HTTP/1.1
Host: 1.b406929acabac9b095f124c81bdfcf57f.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 221
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Thu, 27 Oct 2022 19:20:42 GMT
etag: "21e34cf6a03f570df49e212018a567d0"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oFmTamo3JpmssPg2WjeWf7G5Ai00Twoq3c_9mcZS-11kwzAuCCGt4w==
age: 23102
X-Firefox-Spdy: h2
1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
54.230.111.57200 OK 3.2 kB URL HTTP/2 1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
IP 54.230.111.57:0
File type ASCII text, with very long lines (3227), with no line terminators
Hash 9ee48a4da9c402e8a23ad085fb71f28f
f0c59306d6313f9bee02b53ca8903991bd24bfd7
9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622
GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1
Host: 1.c81358859121583b7adf2ace89cb39f44.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3227
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Thu, 27 Oct 2022 13:09:06 GMT
etag: "9ee48a4da9c402e8a23ad085fb71f28f"
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fO0pUfOtIWo_n7_2gd0LqA20b2lQP8NYIgK3KWnX_h5I9oGGCyTEYA==
age: 45398
X-Firefox-Spdy: h2
1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
54.230.111.103200 OK 3.2 kB URL HTTP/2 1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
IP 54.230.111.103:0
File type ASCII text, with very long lines (3227), with no line terminators
Hash 9ee48a4da9c402e8a23ad085fb71f28f
f0c59306d6313f9bee02b53ca8903991bd24bfd7
9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622
GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1
Host: 1.b406929acabac9b095f124c81bdfcf57f.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3227
last-modified: Tue, 13 Oct 2020 12:04:25 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Thu, 27 Oct 2022 20:41:05 GMT
etag: "9ee48a4da9c402e8a23ad085fb71f28f"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wrFz7Om_vXH7LLB_AhjrgUA0yi0ANTDrqW9zqiiBWIEcK9g2ni0N1A==
age: 18279
X-Firefox-Spdy: h2
nexus.ensighten.com/error/e.gif?msg=_dl%20is%20not%20defined&lnn=481&fn=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2Fimg%2FBootstrap.js&cid=1129&client=citi&publishPath=na_prod&rid=3092996&did=622672&errorName=ReferenceError
54.230.111.14204 No Content 0 B URL HTTP/1.1 nexus.ensighten.com/error/e.gif?msg=_dl%20is%20not%20defined&lnn=481&fn=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2Fimg%2FBootstrap.js&cid=1129&client=citi&publishPath=na_prod&rid=3092996&did=622672&errorName=ReferenceError
IP 54.230.111.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /error/e.gif?msg=_dl%20is%20not%20defined&lnn=481&fn=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2Fimg%2FBootstrap.js&cid=1129&client=citi&publishPath=na_prod&rid=3092996&did=622672&errorName=ReferenceError HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 204 No Content
Content-Length: 0
Connection: keep-alive
Server: CloudFront
Date: Fri, 28 Oct 2022 01:05:23 GMT
Cache-Control: no-cache, no-store
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: d32i44Z6YtoCOg6aKtHku7gtgccgBjW8Gu8uJTL7SwkdLvI3WjqoAw==
Age: 2420
cm.everesttech.net/cm/dd?d_uuid=05737989424213820412977786182190909567
54.74.40.111301 Moved Permanently 134 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=05737989424213820412977786182190909567
IP 54.74.40.111:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /cm/dd?d_uuid=05737989424213820412977786182190909567 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Fri, 28 Oct 2022 01:45:43 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://cm.everesttech.net:443/cm/dd?d_uuid=05737989424213820412977786182190909567
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a63ea2903767bb46326d85331e42e34e
b113b248df6025ed117551b7baa1960316122415
4ba54e12a06237d2c396d93e1cf9513b066074df9993ee408ee2bfb365c5f3c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/6c8322c7341eac98645c10e3d1d3c7ae.js
50.62.141.181200 OK 471 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/6c8322c7341eac98645c10e3d1d3c7ae.js
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
Hash a63ea2903767bb46326d85331e42e34e
b113b248df6025ed117551b7baa1960316122415
4ba54e12a06237d2c396d93e1cf9513b066074df9993ee408ee2bfb365c5f3c6
GET /city.com/img/6c8322c7341eac98645c10e3d1d3c7ae.js HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:28 GMT
ETag: "2b62e04-3a4f5-5da1a190f6f00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/commonui-assets/fonts/interstate/Interstate-Light.woff
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/commonui-assets/fonts/interstate/Interstate-Light.woff
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/commonui-assets/fonts/interstate/Interstate-Light.woff HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72; cdSNum=1666921542903-sjn0000598-e61a3a7f-b382-449e-8cee-a6f763678e58
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:43 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a63ea2903767bb46326d85331e42e34e
b113b248df6025ed117551b7baa1960316122415
4ba54e12a06237d2c396d93e1cf9513b066074df9993ee408ee2bfb365c5f3c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.citi.com/cbol-pre-login-static-assets/assets/favicon.ico
104.110.29.32200 OK 8.1 kB URL HTTP/1.1 www.citi.com/cbol-pre-login-static-assets/assets/favicon.ico
IP 104.110.29.32:0
File type PNG image data, 367 x 367, 8-bit/color RGBA, non-interlaced\012- data
Hash 7408f1858b7d67263a001f84022b33a4
89161c6255a5559cc1282c5a9c7d4d84623bd12f
0cffb7ed99266581c5b90b6b2d8c758232f6746f9784ead6ae85725806691eb6
GET /cbol-pre-login-static-assets/assets/favicon.ico HTTP/1.1
Host: www.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/x-icon
Accept-Ranges: bytes
Access-Control-Max-Age: 2147483647
Content-Encoding: gzip
Dclocation: GT1DMS
ETag: W/"222b-183dfc404c8"
Last-Modified: Sun, 16 Oct 2022 07:48:29 GMT
Nonce: 6852511524104248
Referrer-Policy: no-referrer
Scope: VISITOR
Sid: 236f8120-d61f-48e7-9af0-3449b9269301
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Uuid: 37372d63-9379-4b11-87b5-a5e445d1dbfd
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Vcap-Request-Id: 00d6152d-8fda-480b-5d78-579aebcd3e49
X-Xss-Protection: 1 ; mode=block
X-Akamai-CITISITE: GTDC
Content-Length: 8116
Cache-Control: public, no-transform, max-age=21600
Expires: Fri, 28 Oct 2022 07:45:43 GMT
Date: Fri, 28 Oct 2022 01:45:43 GMT
Connection: keep-alive
Set-Cookie: AKMTLTSID=10183D10606AC0D9B794D3C664B63EC5; path=/; domain=citi.com; secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://citimobile.citibankonline.com
nexus.ensighten.com/citi/na_prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/citi/na_prod/code/&publishedOn=Thu%20Feb%2017%2015:16:12%20GMT%202022&ClientID=1129&PageID=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F
54.230.111.14200 OK 533 B URL HTTP/1.1 nexus.ensighten.com/citi/na_prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/citi/na_prod/code/&publishedOn=Thu%20Feb%2017%2015:16:12%20GMT%202022&ClientID=1129&PageID=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F
IP 54.230.111.14:0
File type ASCII text, with very long lines (1155)
Hash 6b33d42fbb13b06ca2a15550a17836be
856e207ac62bb8a607a85cba1c6ca43b82096899
64531dbc88e0d3e00744b192671767b7dd8d477633f5e49bb2361ed9cf77a87a
GET /citi/na_prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/citi/na_prod/code/&publishedOn=Thu%20Feb%2017%2015:16:12%20GMT%202022&ClientID=1129&PageID=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Fri, 28 Oct 2022 01:45:43 GMT
Expires: Fri, 28 Oct 2022 01:45:42 GMT
Cache-Control: no-cache, no-store
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LJRfbLkAD7jLmGcKsqXK_bYxKNnO2KjKX4DMNbHghiIqUdh1fb2M-w==
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(4)
50.62.141.181200 OK 1.8 kB URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(4)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
Hash 16e32dd6a4839edc30c58e7e69753923
9fdfdee1f6f123867d8830be2cd9d90c2f3561a3
b1a18cfe5d3d73bcb85b08a78d08fc9606b3e0892a576cac5b0fb6b544fc2e22
GET /city.com/img/js(4) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:38 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62dfe-19313-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 103187
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
www.google.com/pagead/1p-user-list/975701947/?random=1645199688158&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3742915801&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/975701947/?random=1645199688158&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3742915801&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/975701947/?random=1645199688158&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3742915801&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a63ea2903767bb46326d85331e42e34e
b113b248df6025ed117551b7baa1960316122415
4ba54e12a06237d2c396d93e1cf9513b066074df9993ee408ee2bfb365c5f3c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/695231162/?random=1645199688136&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=2490011135&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/695231162/?random=1645199688136&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=2490011135&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/695231162/?random=1645199688136&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=2490011135&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/959299794/?random=1645199688176&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=2969722864&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/959299794/?random=1645199688176&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=2969722864&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/959299794/?random=1645199688176&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=2969722864&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/819500023/?random=1645199688162&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&eid=376635471&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=934572699&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/819500023/?random=1645199688162&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&eid=376635471&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=934572699&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/819500023/?random=1645199688162&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&eid=376635471&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=934572699&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/830907969/?random=1645199688154&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3929776891&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/830907969/?random=1645199688154&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3929776891&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/830907969/?random=1645199688154&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3929776891&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/644574043/?random=1645199688142&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3716761758&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/644574043/?random=1645199688142&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3716761758&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/644574043/?random=1645199688142&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3716761758&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/916451471/?random=1645199688127&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=1013547421&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/916451471/?random=1645199688127&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=1013547421&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/916451471/?random=1645199688127&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=1013547421&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/960621875/?random=1645199688150&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3640341865&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/960621875/?random=1645199688150&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3640341865&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/960621875/?random=1645199688150&cv=9&fst=1645196400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=768&u_aw=1366&u_cd=24&u_his=2&u_tz=60&u_java=false&u_nplug=5&u_nmime=2>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.citi.com%2Flogin&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=3640341865&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c14c3f7d8817b44fda85ba769cc83062
bf41520c5a807058748db49621e7d6ee4ecf5729
eb15bf461ab810e1487ece424600f22d33bebc4f438ef6a10927df18dda0d216
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.clarity.ms/c.gif
20.234.93.27302 Found 0 B IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=617B940B3E78423687C8979B6D8741E0&RedC=c.clarity.ms&MXFR=0F2ED9B481966EDA1D1BCBFF85966005
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=0F2ED9B481966EDA1D1BCBFF85966005; domain=.clarity.ms; expires=Wed, 22-Nov-2023 01:45:43 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Fri, 28 Oct 2022 01:45:42 GMT
content-length: 0
X-Firefox-Spdy: h2
nexus.ensighten.com/citi/na_prod/code/7c8ae1f9c206930028672949c6703f6d.js?conditionId0=4849963
54.230.111.14200 OK 1.2 kB URL HTTP/1.1 nexus.ensighten.com/citi/na_prod/code/7c8ae1f9c206930028672949c6703f6d.js?conditionId0=4849963
IP 54.230.111.14:0
File type ASCII text, with very long lines (619)
Hash a05915f969bf171c0654f5d393072216
75cefb35166449bf83bb2d37aef23573e0a84b08
545459f7e277145aae24c10c6871e7de74c5b7d890fd6b8fee26b9d578ab1976
GET /citi/na_prod/code/7c8ae1f9c206930028672949c6703f6d.js?conditionId0=4849963 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 18 Oct 2022 17:57:04 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 18 Oct 2022 17:52:59 GMT
ETag: W/"7df0440e45009010a99db868682aafb3"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000
x-amz-version-id: fn0OQIG24n9jjHSfN2OozphT08M6eW_x
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QQh2OuLaJAhhgeUr4tF50Kre2CHfIM4lSm6-wGVLqpAMS-csdFgvPQ==
Age: 805720
nexus.ensighten.com/citi/na_prod/code/e89e922d42191212e2571eceaae47b48.js?conditionId0=486757
54.230.111.14200 OK 41 kB URL HTTP/1.1 nexus.ensighten.com/citi/na_prod/code/e89e922d42191212e2571eceaae47b48.js?conditionId0=486757
IP 54.230.111.14:0
File type ASCII text, with very long lines (609)
Hash e8319dc798fd58d9821b91140f0beb3e
601eaa27019335fdc089e063d7d3f151cbb452c0
c796eac27bb6c86123218ccebc1f9ad4dea5e00e288955e98045266eb6e6b26c
GET /citi/na_prod/code/e89e922d42191212e2571eceaae47b48.js?conditionId0=486757 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 18 Oct 2022 19:50:31 GMT
x-amz-replication-status: PENDING
Last-Modified: Tue, 18 Oct 2022 19:50:01 GMT
ETag: W/"60cea34a01b7b0cf3a2957ad282e1872"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000
x-amz-version-id: hUuUk3pAtYHN0sXn0vLTg11CAYuvLZtL
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KvcmSJ5eMOEy8glTis1n71ODo_hioSO4k-DmKHOoEWzcTWHIN0sAXg==
Age: 798913
nexus.ensighten.com/citi/na_prod/code/af3b21070dd01ab22a4f331056324374.js?conditionId0=4897099
54.230.111.14200 OK 2.2 kB URL HTTP/1.1 nexus.ensighten.com/citi/na_prod/code/af3b21070dd01ab22a4f331056324374.js?conditionId0=4897099
IP 54.230.111.14:0
File type ASCII text, with very long lines (542)
Hash 9d386182dee76bbeb1ac0e9a82925cf3
bfcc4073c4cf16fdda856cedce3cd2f426ef9111
f101e196596d8661d1818dc1ee55ec446a91fa7e76ad9bca2dd34a6caf33a4ec
GET /citi/na_prod/code/af3b21070dd01ab22a4f331056324374.js?conditionId0=4897099 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 25 Aug 2022 04:11:09 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 16 Aug 2022 21:43:05 GMT
ETag: W/"412eb38d6a797c24fd5d7e30e1b9799d"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000
x-amz-version-id: QTYOdEvDbSbtudwcv3X6K9qpVGIDVLJs
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: a8ct_zso1rEUMODikyF7TeBu7zXtYl3-Lub4PDUylFb4AkQm4v-qfQ==
Age: 5520875
nexus.ensighten.com/citi/na_prod/code/8204b4c1a9fcdef40de9b73bd23c6299.js?conditionId0=421908
54.230.111.14200 OK 34 kB URL HTTP/1.1 nexus.ensighten.com/citi/na_prod/code/8204b4c1a9fcdef40de9b73bd23c6299.js?conditionId0=421908
IP 54.230.111.14:0
File type ASCII text, with very long lines (557)
Hash 82c500f36336a4b0ff22daa1d8c882b0
3afee6375eb9ecd1870e04c47fd3913e6f0d2a88
1f66a3f735fdd1d64a76030d863dee0286442311a8812622c61a5f137ea476d4
GET /citi/na_prod/code/8204b4c1a9fcdef40de9b73bd23c6299.js?conditionId0=421908 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 19 Oct 2022 17:26:35 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 19 Oct 2022 17:25:16 GMT
ETag: W/"3e8ddafa10c1bf7bdc0ee41bf12a6564"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000
x-amz-version-id: DImJBOAARztOE8HMom2X7otBe4Pv8NwT
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: X6l5EQR5ZNRU_D6j_yxqQrXwMHeQ_fiEf0XXrcakDvn1mRf29CmpPw==
Age: 721149
nexus.ensighten.com/citi/na_prod/code/51aba9f62787efbaa13e53a8d1ae3892.js?conditionId0=4827153
54.230.111.14200 OK 655 B URL HTTP/1.1 nexus.ensighten.com/citi/na_prod/code/51aba9f62787efbaa13e53a8d1ae3892.js?conditionId0=4827153
IP 54.230.111.14:0
File type ASCII text, with very long lines (524)
Hash b7502c8f355586be76d0ab4936375bfe
e4014d3e5120ec3bb5be0f649652479d2d16129d
0824bcd7ee969ebbb74439cf598b21f89eebd4724b12ccbbe2d1f34f89227034
GET /citi/na_prod/code/51aba9f62787efbaa13e53a8d1ae3892.js?conditionId0=4827153 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 21 Aug 2022 00:41:34 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 31 Aug 2021 17:19:04 GMT
ETag: W/"4d37444c012a76a0557182615bf5cdd3"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000
x-amz-version-id: wbqnWd5jL63548esNkWLxT1ImQDA0TC0
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zgrQ88An35n5yTKNQKJPiyP1OxcUlQxLy-tTwXMJQHbjrxMjZIle3Q==
Age: 5879050
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 55ec15f091e95050cb3fa6592e5adefc
3228b465fcedd35447e87054cd201d62cf331aba
952f47b986a61a945bae4b86a0889038f4385033b3fccd6946bf53c13fd21fd7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=130756
Date: Fri, 28 Oct 2022 01:45:44 GMT
Etag: "635a8109-1d7"
Expires: Sat, 29 Oct 2022 14:05:00 GMT
Last-Modified: Thu, 27 Oct 2022 13:00:57 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oRA00XiFOeVwNO1z5RqvZ-ui-ZTHRu5sxjdy4b1RJ3uESQBdz9QNIQ==
Age: 3843
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/commonui-assets/fonts/interstate/Interstate-Light.ttf
50.62.141.181500 Internal Server Error 704 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/commonui-assets/fonts/interstate/Interstate-Light.ttf
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 24af1c0f9857df7d4c0b40f8baf286ee
1de98129c06f3b25f8c8d8fc9954836d417a5c0e
c83c4459149c328e59103996902f3de12f7ed0828bf826abd8b3a4a6c6a1af79
GET /city.com/img/commonui-assets/fonts/interstate/Interstate-Light.ttf HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/styles.a4a9307b7b034ca614a7.css
Cookie: AMCV_61834D9B5228A7430A490D45%40AdobeOrg=-330454231%7CMCIDTS%7C19294%7CMCMID%7C10327505217099720262373576193234727388%7CMCAID%7C31AD9A220B65867B-400008AFAB002185%7CMCOPTOUT-1666928739s%7CNONE%7CMCAAMLH-1667526339%7C6%7CMCAAMB-1667526339%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C3.1.2; AMCVS_61834D9B5228A7430A490D45%40AdobeOrg=1; cdContextId=1; cdContextId=1; cdContextId=1; bmuid=1666921540663-D8FE4097-522F-4E1F-8D31-D5567D022E72; cdSNum=1666921542903-sjn0000598-e61a3a7f-b382-449e-8cee-a6f763678e58
HTTP/1.1 500 Internal Server Error
Date: Fri, 28 Oct 2022 01:45:43 GMT
Server: Apache
Content-Length: 704
Connection: close
Content-Type: text/html; charset=iso-8859-1
cm.everesttech.net/cm/dd?d_uuid=05737989424213820412977786182190909567
54.74.40.111302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=05737989424213820412977786182190909567
IP 54.74.40.111:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=05737989424213820412977786182190909567 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Fri, 28 Oct 2022 01:45:44 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y1s0SAAAALwGRAOV; Domain=.everesttech.net; Expires=Sat, 28-Oct-2023 01:45:44 GMT; Path=/
everest_session_v2=Y1s0SAAAALwGRQOV; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y1s0SAAAALwGRAOV
Server: AMO-cookiemap/1.1
c1.rfihub.net/js/tc.min.js
54.230.111.29200 OK 6.2 kB URL HTTP/1.1 c1.rfihub.net/js/tc.min.js
IP 54.230.111.29:0
File type C source, ASCII text, with very long lines (19497)
Hash ab5a2e3f2414c0a2b622e48c0b6da2fd
1a894787bde6cbf9b58d47b8f4245607420112ad
a5ef19cf7ca85f760c462ed2f228430c8d0a6d9daf3aa34894a5c42113cfdb8f
GET /js/tc.min.js HTTP/1.1
Host: c1.rfihub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 6162
Connection: keep-alive
Date: Fri, 28 Oct 2022 01:30:35 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Cache-Control: public, max-age=3600
Expires: Fri, 28 Oct 2022 02:30:35 GMT
Last-Modified: Fri, 28 Oct 2022 01:30:25 GMT
Content-Encoding: gzip
Server: Jetty(9.3.29.v20201019)
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 86GRZOaXrbjlJx0rb3ES8_Gpdn4TgxgTvcItZn6-yCMHztkw7dafng==
Age: 909
contents2.00110.citi.com/client/v3.1/web/wup?cid=cedric
52.154.174.214200 OK 558 B URL HTTP/2 contents2.00110.citi.com/client/v3.1/web/wup?cid=cedric
IP 52.154.174.214:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (558), with no line terminators
Hash f4984ae87da690656ee5f85f66e02c5a
0d06fff675249e2640940887be6b6a7e67429ff6
0d72e2fdd1a540c4841b01a508510c398a8f4cc88b9e849422ee87c48480252e
POST /client/v3.1/web/wup?cid=cedric HTTP/1.1
Host: contents2.00110.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1218
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 558
date: Fri, 28 Oct 2022 01:45:43 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: f8ca8dac-e362-44c9-b635-7cf170e509b8
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=617B940B3E78423687C8979B6D8741E0&MUID=2844E8F2E04463EB25C2FAB9E11362EA
20.234.93.27200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=617B940B3E78423687C8979B6D8741E0&MUID=2844E8F2E04463EB25C2FAB9E11362EA
IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=617B940B3E78423687C8979B6D8741E0&MUID=2844E8F2E04463EB25C2FAB9E11362EA HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 28-Oct-2022 01:55:44 GMT; path=/; SameSite=None; Secure;
date: Fri, 28 Oct 2022 01:45:43 GMT
content-length: 42
X-Firefox-Spdy: h2
20766699p.rfihub.com/ca.html?ver=9&ra=611&rb=648&ca=20766699&_o=17169175&_t=&_rev=1&_pcode=1&_orderid=1&ssv_cuuid=&ssv_package=null&ssv_prodlist=null&ssv_pagename=&pe=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&pf=&ra=9116570235379836
193.0.160.128302 Found 0 B URL HTTP/1.1 20766699p.rfihub.com/ca.html?ver=9&ra=611&rb=648&ca=20766699&_o=17169175&_t=&_rev=1&_pcode=1&_orderid=1&ssv_cuuid=&ssv_package=null&ssv_prodlist=null&ssv_pagename=&pe=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&pf=&ra=9116570235379836
IP 193.0.160.128:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ca.html?ver=9&ra=611&rb=648&ca=20766699&_o=17169175&_t=&_rev=1&_pcode=1&_orderid=1&ssv_cuuid=&ssv_package=null&ssv_prodlist=null&ssv_pagename=&pe=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&pf=&ra=9116570235379836 HTTP/1.1
Host: 20766699p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Fri, 28 Oct 2022 01:45:44 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Location: https://20766699p.rfihub.com/sr/ca.html?ver=9&ra=611&rb=648&ca=20766699&_o=17169175&_t=&_rev=1&_pcode=1&_orderid=1&ssv_cuuid=&ssv_package=null&ssv_prodlist=null&ssv_pagename=&pe=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&pf=&ra=9116570235379836
Content-Length: 0
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cb2fad488dade0fc384a0476d896382d
0d4c7831b92c6d76de26e4496c29c6c1d6888609
170fb30ca9710c8596f0375caf43221487313cf9bc83f7117b846326a6254f23
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5379
Cache-Control: max-age=103849
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:44 GMT
Etag: "635a11ee-1d7"
Expires: Sat, 29 Oct 2022 06:36:33 GMT
Last-Modified: Thu, 27 Oct 2022 05:06:54 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
dpm.demdex.net/ibs:dpid=411&dpuuid=Y1s0SAAAALwGRAOV
34.249.106.217302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y1s0SAAAALwGRAOV
IP 34.249.106.217:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y1s0SAAAALwGRAOV HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v044-0055adaf6.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y1s0SAAAALwGRAOV
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=89118621540372512111476229190826432653; Max-Age=15552000; Expires=Wed, 26 Apr 2023 01:45:44 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: F4ghQuenQOw=
Content-Length: 0
Connection: keep-alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y1s0SAAAALwGRAOV
34.249.106.217200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y1s0SAAAALwGRAOV
IP 34.249.106.217:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y1s0SAAAALwGRAOV HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v044-0b431e8b6.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: NoyxWuR1SRM=
Content-Length: 59
Connection: keep-alive
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 0b027ac4914a82fd2a83a0b1f9ada853
6332e22b0235d8c6d4a00d1126abf6a2546119c8
821d3526210cf3044a1575758d239c18dea010db5ea72c1adde7ab7cab09115b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 26 Oct 2022 02:15:47 GMT
Expires: Wed, 02 Nov 2022 02:15:46 GMT
Etag: "6332e22b0235d8c6d4a00d1126abf6a2546119c8"
Cache-Control: max-age=433201,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 760ffe63fddd0a28-ARN
20766699p.rfihub.com/sr/ca.html?ver=9&ra=611&rb=648&ca=20766699&_o=17169175&_t=&_rev=1&_pcode=1&_orderid=1&ssv_cuuid=&ssv_package=null&ssv_prodlist=null&ssv_pagename=&pe=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&pf=&ra=9116570235379836
193.0.160.128200 OK 118 B URL HTTP/1.1 20766699p.rfihub.com/sr/ca.html?ver=9&ra=611&rb=648&ca=20766699&_o=17169175&_t=&_rev=1&_pcode=1&_orderid=1&ssv_cuuid=&ssv_package=null&ssv_prodlist=null&ssv_pagename=&pe=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&pf=&ra=9116570235379836
IP 193.0.160.128:0
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 372d494a4cb82acdc6b44d6941392ec4
3c777c56cb89b34f2e15159282dca81dcdfe33d7
c437eb764a99e6cd5172d63c3fae564bbc51eda4981058d5edebd2bf0700eb76
GET /sr/ca.html?ver=9&ra=611&rb=648&ca=20766699&_o=17169175&_t=&_rev=1&_pcode=1&_orderid=1&ssv_cuuid=&ssv_package=null&ssv_prodlist=null&ssv_pagename=&pe=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&pf=&ra=9116570235379836 HTTP/1.1
Host: 20766699p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:44 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjI0MTAyNDY2MBbiM9QN8XMOyjIvjU93yTIFAH6Fz9klAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 22 Nov 2023 01:45:44 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTQyNLAwMjI0MTAyNDY2MBbiM9QN8XMOyjIvjU93yTIFAH6Fz9klAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: text/html;charset=utf-8
Content-Length: 118
Server: Jetty(9.3.29.v20201019)
www.googletagmanager.com/gtag/js?id=AW-916451471
142.250.74.168302 Found 253 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-916451471
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash e789be587e31a97443893e23f9ba9666
4ed47d40af4fa861cb2bbcf556aa608d5a8f2a85
541f9cb1e731f1d53dd0232ad1574a3ee000a83f52cea3c134edb2a9ae5a9fe7
GET /gtag/js?id=AW-916451471 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-916451471
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:44 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 253
X-XSS-Protection: 0
resources.digital-cloud-citi.medallia.com/wdcusciti/50/onsite/generic1642556755234.js
151.101.85.230301 Moved Permanently 0 B URL HTTP/1.1 resources.digital-cloud-citi.medallia.com/wdcusciti/50/onsite/generic1642556755234.js
IP 151.101.85.230:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wdcusciti/50/onsite/generic1642556755234.js HTTP/1.1
Host: resources.digital-cloud-citi.medallia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://resources.digital-cloud-citi.medallia.com/wdcusciti/50/onsite/generic1642556755234.js
Accept-Ranges: bytes
Date: Fri, 28 Oct 2022 01:45:44 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1640-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1666921545.690302,VS0,VE1
Strict-Transport-Security: max-age=31557600
verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(1)
50.62.141.181200 OK 471 B URL HTTP/1.1 verify-citybankonline.alert.brownboyboardbooks.com/city.com/img/js(1)
IP 50.62.141.181:0
ASN #398101 GO-DADDY-COM-LLC
Hash 1ecdf371128647f6041abffa66694706
16b529f9991570340224acd3b466d752afae4fac
9569e058045caeafbbd1abf8caf325a2e1fd06cdcee4a5f991d99451fda061c5
GET /city.com/img/js(1) HTTP/1.1
Host: verify-citybankonline.alert.brownboyboardbooks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/city.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:40 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2022 14:08:26 GMT
ETag: "2b62e07-1928b-5da1a18f0ea80"
Accept-Ranges: bytes
Content-Length: 103051
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4cdf16c5333628708fae7b304303fc48
23654b66838aa89e8b975a9e6c0251d2f8f18366
6f3935f102b0dcfee703eb07abcf04d9181fdfe13fae4d7566aed743a00beb9c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.digital-cloud-citi.medallia.com/wdcusciti/50/onsite/generic1642556755234.js
151.101.85.230200 OK 89 kB URL HTTP/2 resources.digital-cloud-citi.medallia.com/wdcusciti/50/onsite/generic1642556755234.js
IP 151.101.85.230:0
File type Unicode text, UTF-8 text, with very long lines (53734)
Hash 0910c09f371905190d92a517f6664582
82015ba51fdafebdc71f17b7c2650025bfba0770
25707832992c14c98b3e72d17579ba9a4e082de9f544750d8576a84d3e3b4bbb
GET /wdcusciti/50/onsite/generic1642556755234.js HTTP/1.1
Host: resources.digital-cloud-citi.medallia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: iv/yghRrD5fROWuUy6p9l763vATq3uxrOqnJEPS79aAL1oTIrBbgLTPJ7Ug6H36d4ZrzHsDY+1I=
x-amz-request-id: 3KBZXW97T5V86QNH
last-modified: Wed, 19 Jan 2022 01:45:56 GMT
etag: "23e4d609fe08b7a8c3e4f1da77c7f96c"
x-amz-version-id: rSjn3UrYpUyqzJwJI83SrWd_Yi2yQGv5
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Fri, 28 Oct 2022 01:45:44 GMT
via: 1.1 varnish
age: 43808
x-served-by: cache-bma1674-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666921545.765148,VS0,VE2
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 89391
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-916451471
142.250.74.168200 OK 67 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-916451471
IP 142.250.74.168:0
File type ASCII text, with very long lines (2917)
Hash d4ea071ecd1b064d6604056fcbdffd5b
5d29d71ba07ac281eb62aac60a11bdf7dcce0266
211004dbfe307e0390e9514e14ed071063814896f3aaa9c9c7129d09756bb5a5
GET /gtag/js?id=AW-916451471 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 28 Oct 2022 01:45:44 GMT
expires: Fri, 28 Oct 2022 01:45:44 GMT
cache-control: private, max-age=900
last-modified: Fri, 28 Oct 2022 00:17:40 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 66638
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b218cb28e47441f117d4373e6cbcc708
1ac15b0ab1aae39c1c3fbedf91f985f62fe2c89e
df76efbe431ad3fea2917645731a7b071e9b2d3e39ee58f3055d7aa702f7ee4b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=95248
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:44 GMT
Etag: "635a0558-1d7"
Expires: Sat, 29 Oct 2022 04:13:12 GMT
Last-Modified: Thu, 27 Oct 2022 04:13:12 GMT
Server: nginx
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b218cb28e47441f117d4373e6cbcc708
1ac15b0ab1aae39c1c3fbedf91f985f62fe2c89e
df76efbe431ad3fea2917645731a7b071e9b2d3e39ee58f3055d7aa702f7ee4b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1208
Cache-Control: max-age=96455
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:44 GMT
Etag: "635a0558-1d7"
Expires: Sat, 29 Oct 2022 04:33:19 GMT
Last-Modified: Thu, 27 Oct 2022 04:13:12 GMT
Server: ECS (amb/6B81)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b218cb28e47441f117d4373e6cbcc708
1ac15b0ab1aae39c1c3fbedf91f985f62fe2c89e
df76efbe431ad3fea2917645731a7b071e9b2d3e39ee58f3055d7aa702f7ee4b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4659
Cache-Control: max-age=99907
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:44 GMT
Etag: "635a0558-1d7"
Expires: Sat, 29 Oct 2022 05:30:51 GMT
Last-Modified: Thu, 27 Oct 2022 04:13:12 GMT
Server: ECS (amb/6B89)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 30c5107c8f49f7471978d43d30847010
9f5c74e117f8cd972c5ca0983bc4023910601113
1c4451ea36f959819a5d50296603c2352c380ff89bf8812db857df6b8ac7bf69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&ck=0&m=2
91.235.133.67200 OK 81 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&ck=0&m=2
IP 91.235.133.67:0
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&ck=0&m=2 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:44 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&ck=0&m=1
91.235.133.67200 OK 81 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&ck=0&m=1
IP 91.235.133.67:0
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&ck=0&m=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:44 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
nebula-cdn.kampyle.com/resources/onsite/js/cool-2.1.15.min.js
151.101.85.175301 Moved Permanently 0 B URL HTTP/1.1 nebula-cdn.kampyle.com/resources/onsite/js/cool-2.1.15.min.js
IP 151.101.85.175:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /resources/onsite/js/cool-2.1.15.min.js HTTP/1.1
Host: nebula-cdn.kampyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://nebula-cdn.kampyle.com/resources/onsite/js/cool-2.1.15.min.js
Accept-Ranges: bytes
Date: Fri, 28 Oct 2022 01:45:44 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1656-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1666921545.943262,VS0,VE0
Strict-Transport-Security: max-age=31557600
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&ck=0&m=2
91.235.133.67200 OK 81 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&ck=0&m=2
IP 91.235.133.67:0
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&ck=0&m=2 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:44 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/png
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&ck=0&m=1
91.235.133.67200 OK 81 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&ck=0&m=1
IP 91.235.133.67:0
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&ck=0&m=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:44 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/png
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&ck=0&m=1
91.235.133.67200 OK 81 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&ck=0&m=1
IP 91.235.133.67:0
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&ck=0&m=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:44 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: image/png
ocsp.digicert.com/
93.184.220.29200 OK 20 kB IP 93.184.220.29:0
Hash 1f072a74a82582a52264e97910b4443a
c3f6a6d9144c641e8a477e90566f56f920293f08
d60b2bbd10ea6a182d1f8feff26571401d499bd7ca11ef5d1a1b27992ee8d10e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=95248
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:44 GMT
Etag: "635a0558-1d7"
Expires: Sat, 29 Oct 2022 04:13:12 GMT
Last-Modified: Thu, 27 Oct 2022 04:13:12 GMT
Server: nginx
Content-Length: 471
content22.online.citi.com/fp/check.js;CIS3SID=69B4B09FD8A728BF2EE7FCB11A1B9673?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jb=3732242668736f753d4c6b6e7d7a266a73673f4c69667770246a73627d3d46697067646d78246273623d46697265646f78253030333237
91.235.133.67200 OK 79 kB URL HTTP/1.1 content22.online.citi.com/fp/check.js;CIS3SID=69B4B09FD8A728BF2EE7FCB11A1B9673?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jb=3732242668736f753d4c6b6e7d7a266a73673f4c69667770246a73627d3d46697067646d78246273623d46697265646f78253030333237
IP 91.235.133.67:0
File type ASCII text, with very long lines (3703)
Hash 0366e147662bc327eedbcd9b23254084
b1bd1a6bf9eef57c088391f52a1bd599d29bcd29
71024e8e75c44f099a9bfd8b97560faf628f356a4d29bbbd7711ffe00ea2a927
GET /fp/check.js;CIS3SID=69B4B09FD8A728BF2EE7FCB11A1B9673?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jb=3732242668736f753d4c6b6e7d7a266a73673f4c69667770246a73627d3d46697067646d78246273623d46697265646f78253030333237 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:44 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
tmx-nonce: 6b89f78c1aa12a6c
Set-Cookie: thx_guid=27f5bf9af357b3e2d5b0c092785fd781; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure;
P3P: CP=IVAa PSAa
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked
www.googletagmanager.com/gtag/js?id=AW-960621875&l=dataLayer&cx=c
142.250.74.168302 Found 278 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-960621875&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash ba8206089b7af80ec9bb4fe0c07977b4
4b0c036a5124f06026772a92168d3799e37c8ed3
64a3447f03ef43acc94b9bb1cdc44bffee396a1b3ab6c839a6bcc4d498f86f62
GET /gtag/js?id=AW-960621875&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-960621875&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 278
X-XSS-Protection: 0
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b218cb28e47441f117d4373e6cbcc708
1ac15b0ab1aae39c1c3fbedf91f985f62fe2c89e
df76efbe431ad3fea2917645731a7b071e9b2d3e39ee58f3055d7aa702f7ee4b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=95248
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:44 GMT
Etag: "635a0558-1d7"
Expires: Sat, 29 Oct 2022 04:13:12 GMT
Last-Modified: Thu, 27 Oct 2022 04:13:12 GMT
Server: nginx
Content-Length: 471
www.googletagmanager.com/gtag/js?id=AW-644574043&l=dataLayer&cx=c
142.250.74.168302 Found 278 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-644574043&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash da059e66474ac8e0fcb7e70b7ed4be44
7ef754dde242d41e1ceae88f3cf3ef36fc94fd6b
904c2ee1c18ede7911199f83d02b25ef37c9974e3872662abc7c50e666f1c9eb
GET /gtag/js?id=AW-644574043&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-644574043&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 278
X-XSS-Protection: 0
www.googletagmanager.com/gtag/js?id=AW-975701947&l=dataLayer&cx=c
142.250.74.168302 Found 278 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-975701947&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash d7c2cd80c8899405c8ead9dcd82aa484
8d0248ffaaf1594d89e077cb3904f0ad42ec474e
2713f4450768c9e167bb579902498016cfcedef0583300aff6754a4c50863fce
GET /gtag/js?id=AW-975701947&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-975701947&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 278
X-XSS-Protection: 0
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&ck=0&m=2
91.235.133.67200 OK 81 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&ck=0&m=2
IP 91.235.133.67:0
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&ck=0&m=2 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
www.googletagmanager.com/gtag/js?id=AW-830907969&l=dataLayer&cx=c
142.250.74.168302 Found 278 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-830907969&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 6d8c6cf61840045919f4789eac2d3d9c
ef5e66f528ab1701f99e467593020d263d6220f0
ac4fc3a6c6038531534ab22894bcc3a43eaea3a8f0f4fa2de9e6dafadd16eb6e
GET /gtag/js?id=AW-830907969&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-830907969&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 278
X-XSS-Protection: 0
www.googletagmanager.com/gtag/js?id=AW-695231162&l=dataLayer&cx=c
142.250.74.168302 Found 278 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-695231162&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 3cdb7a0d8774281c45d6a09b22e28af2
eee92813bf3130c7e6ca8be5911197c1ee486daa
cf75d10606678529391c0c7bd8cd9b13abb532df9640785934a7555f872caed4
GET /gtag/js?id=AW-695231162&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-695231162&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 278
X-XSS-Protection: 0
www.googletagmanager.com/gtag/js?id=AW-819500023&l=dataLayer&cx=c
142.250.74.168302 Found 278 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-819500023&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash f20987509aaa3b3f9e52f7581afd6a4d
7147419bbeb1605a89733067d195356fc73c3cd3
5f515e275abf4e06842ad3774fbb0a07bc2d8f40a4d8ac91a4d606395a39254c
GET /gtag/js?id=AW-819500023&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-819500023&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 278
X-XSS-Protection: 0
www.googletagmanager.com/gtag/js?id=AW-959299794&l=dataLayer&cx=c
142.250.74.168302 Found 278 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-959299794&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 16d7ad56818dde4bc80864654bfbd12e
c95b93882c98641b7f1b648c122194a9fb2534c7
5981f369e21dcc6f0bbfcc0f8c51a2536ee1ba2cb5332f353c41518a3a3dad64
GET /gtag/js?id=AW-959299794&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-959299794&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 278
X-XSS-Protection: 0
www.googletagmanager.com/gtag/js?id=AW-10955006959&l=dataLayer&cx=c
142.250.74.168302 Found 280 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-10955006959&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash a262f0126f939827df765f078136498b
5843ee0c458442b5031e9e4aa26ff2d6205b3dc4
7143489cfbb6ba5e39ffbda796042f3b25d54d3d8aa9c9a40d7be4d646375ecd
GET /gtag/js?id=AW-10955006959&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-10955006959&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 280
X-XSS-Protection: 0
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 433770b2f2b1019c18ae799363eacb5e
22974be4a031dd9ab70cbbef409e8d16f78ee6c2
ad79fe0f40f530ceb6d15b0bd065171abd5ad29dbb583d1f86abd1f9c4e12db3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3071
Cache-Control: max-age=106964
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:45 GMT
Etag: "635a271e-1d7"
Expires: Sat, 29 Oct 2022 07:28:29 GMT
Last-Modified: Thu, 27 Oct 2022 06:37:18 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtag/js?id=AW-10955006959&l=dataLayer&cx=c
142.250.74.168302 Found 280 B URL HTTP/1.1 www.googletagmanager.com/gtag/js?id=AW-10955006959&l=dataLayer&cx=c
IP 142.250.74.168:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash a262f0126f939827df765f078136498b
5843ee0c458442b5031e9e4aa26ff2d6205b3dc4
7143489cfbb6ba5e39ffbda796042f3b25d54d3d8aa9c9a40d7be4d646375ecd
GET /gtag/js?id=AW-10955006959&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-10955006959&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 280
X-XSS-Protection: 0
content22.online.citi.com/fp/check.js;CIS3SID=69915BADAB241B2E060746F35B8AB099?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jb=37322e2668716f773f4c616c77782468736f3d4c69667778266a7362753f46697067646f7a246273623f46697265666d78273030313035
91.235.133.67200 OK 80 kB URL HTTP/1.1 content22.online.citi.com/fp/check.js;CIS3SID=69915BADAB241B2E060746F35B8AB099?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jb=37322e2668716f773f4c616c77782468736f3d4c69667778266a7362753f46697067646f7a246273623f46697265666d78273030313035
IP 91.235.133.67:0
File type ASCII text, with very long lines (6058)
Hash 699ea324f74ca921e6062ef5f62f8de3
5a14d073762fa9ab8f35c82d238cf75f39e920ee
243fb3f3ae5d95ac64463bb35ba6729c0a3af6da83d0b2b98f77c4ed5a8f5b8c
GET /fp/check.js;CIS3SID=69915BADAB241B2E060746F35B8AB099?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jb=37322e2668716f773f4c616c77782468736f3d4c69667778266a7362753f46697067646f7a246273623f46697265666d78273030313035 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
tmx-nonce: 31f079b47db06ff4
Set-Cookie: thx_guid=2928c5ca9e289d05841f979bbdee4730; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure;
P3P: CP=IVAa PSAa
Content-Type: text/javascript;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked
nebula-cdn.kampyle.com/resources/onsite/js/cool-2.1.15.min.js
151.101.85.175200 OK 5.2 kB URL HTTP/2 nebula-cdn.kampyle.com/resources/onsite/js/cool-2.1.15.min.js
IP 151.101.85.175:0
File type C source, ASCII text, with very long lines (585)
Hash a8a8316559534b9784a92826ab49b9f2
3836a3dbc421106117da4a97871aed09eedbdf0c
b11175156d2ff85a9f749c78ab961597cc0034db4df0295f2e57335e94f61b1e
GET /resources/onsite/js/cool-2.1.15.min.js HTTP/1.1
Host: nebula-cdn.kampyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: P9bp4jwAu6dPsYq8rC/eLLJT8EBxcVTyVgZJkJ9btJWCqmGSzX+ReO0cwdvjLnTYNQUh0BVn/RaNv/GWYo7/gg==
x-amz-request-id: VJ4MMN36D5EBH6PQ
last-modified: Sun, 24 Jan 2021 11:03:10 GMT
etag: "80dd5e3be5152c5c72d552c6a26ef6ff"
x-amz-version-id: 9HCXbKZTbCJZkS8s9IuB.pE0JEvI0TGW
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Fri, 28 Oct 2022 01:45:45 GMT
via: 1.1 varnish
age: 325889
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1666921545.144962,VS0,VE1
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 5197
X-Firefox-Spdy: h2
content22.online.citi.com/fp/ls_fp.html;CIS3SID=6749B7F6C647E897D97699183E6A13F2?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1
91.235.133.67200 OK 13 kB URL HTTP/1.1 content22.online.citi.com/fp/ls_fp.html;CIS3SID=6749B7F6C647E897D97699183E6A13F2?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1
IP 91.235.133.67:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Hash ae1003057200dcd2cd6a523994c1af20
b2f99912d844bcabd0b071b4046bdafc4934ed65
7e716c1265bdba2d1144c35f26b3c921e82fdaea1af7937963a45ab7cae387bb
GET /fp/ls_fp.html;CIS3SID=6749B7F6C647E897D97699183E6A13F2?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=99
Transfer-Encoding: chunked
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&jb=3b34266e73633563356660643237316465313134646339396332633a633b343361386264383936
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&jb=3b34266e73633563356660643237316465313134646339396332633a633b343361386264383936
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&jb=3b34266e73633563356660643237316465313134646339396332633a633b343361386264383936 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/javascript
contents2.00110.citi.com/client/v3.1/web/wup?cid=cedric
52.154.174.214200 OK 558 B URL HTTP/2 contents2.00110.citi.com/client/v3.1/web/wup?cid=cedric
IP 52.154.174.214:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (558), with no line terminators
Hash a2e91bcf0c8e48cdae5fba7a23c5a626
f798808f82faf6b899386bd70f8a6d1e0147f4c3
ce8e8bae2d116f90ea2d5b35803e1ed4bb35c4865ab741db8c6098fb13faab62
POST /client/v3.1/web/wup?cid=cedric HTTP/1.1
Host: contents2.00110.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3518
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 558
date: Fri, 28 Oct 2022 01:45:44 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: 3feb562d-2b36-4879-9e93-fc4980c3e34e
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
zn3vi8kkuds0jjrfc-citifeedback.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_3VI8kkudS0JJRFc
104.17.208.240200 OK 3.7 kB URL HTTP/2 zn3vi8kkuds0jjrfc-citifeedback.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_3VI8kkudS0JJRFc
IP 104.17.208.240:0
File type ASCII text, with very long lines (6801)
Hash e0af37e5017ef1de791333625bfe1263
ff1efe8f199601900e7c5043a88853b2e9f7707a
98b6360a745ce7863cbfc724cb72a2fcb679cbf37677a2dfc90282ed6873ac45
GET /SIE/?Q_ZID=ZN_3VI8kkudS0JJRFc HTTP/1.1
Host: zn3vi8kkuds0jjrfc-citifeedback.siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:44 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 760ffe66bbc90a3d-ARN
access-control-allow-origin: *
age: 31706
cache-control: public, max-age=3600, s-maxage=604800
etag: W/"2127-pvIwo7cT5zoPB62onpmuFODCIcM"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=8487
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&jd=3d3726246a64663d35266864683d386431603637613865363234653733606437653f326161316637603838316d65266864746c3f303837313835
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&jd=3d3726246a64663d35266864683d386431603637613865363234653733606437653f326161316637603838316d65266864746c3f303837313835
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&jd=3d3726246a64663d35266864683d386431603637613865363234653733606437653f326161316637603838316d65266864746c3f303837313835 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/javascript
content22.online.citi.com/fp/top_fp.html;CIS3SID=6749B7F6C647E897D97699183E6A13F2?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1
91.235.133.67200 OK 14 kB URL HTTP/1.1 content22.online.citi.com/fp/top_fp.html;CIS3SID=6749B7F6C647E897D97699183E6A13F2?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1
IP 91.235.133.67:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Hash 7be6458b0f7d5f3d0853ede9f686af25
52f1eddcfda2da9177515928ac72da4190696641
c5a0ff9388509e676c92e1dcce2449ac0d04b31116a554b50d8155ba60b0db57
GET /fp/top_fp.html;CIS3SID=6749B7F6C647E897D97699183E6A13F2?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=98
Transfer-Encoding: chunked
content22.online.citi.com/fp/clear.png
91.235.133.67200 OK 81 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png
IP 91.235.133.67:0
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*, 89oebq5k/5527618d41f91b6a9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Fri, 28 Oct 2022 01:45:45 GMT
Expires: Wed, 27 Oct 2027 01:45:45 GMT
Etag: 760ace7727294c38995e6211c250760a
Cache-Control: private, must-revalidate, max-age=0
Access-Control-Allow-Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback
104.17.208.240200 OK 32 kB URL HTTP/2 siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback
IP 104.17.208.240:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 21bf0d579509a95d428cf54b9fe41e89
79eaf54c30fbc33460c5c21ffdcee6f29ee31139
c9bba8a02dfb0e930cd9202865371fa1a22f8d9ea16bd889d2e2edd10189e62b
GET /dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:45 GMT
content-type: application/javascript
cf-ray: 760ffe69bcec0a3d-ARN
access-control-allow-origin: *
age: 24966
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"19b73-183c2d70130"
last-modified: Mon, 10 Oct 2022 17:00:14 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=105331
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
content22.online.citi.com/fp/ls_fp.html;CIS3SID=61AEABC4D0292C5EC5E00C92B12CD139?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1
91.235.133.67200 OK 13 kB URL HTTP/1.1 content22.online.citi.com/fp/ls_fp.html;CIS3SID=61AEABC4D0292C5EC5E00C92B12CD139?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1
IP 91.235.133.67:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Hash 9f82dc8d29b241d85006a30715931936
7b35c4fd1269942f4e4a2faf19f7099c12a300c5
adc633a76b69d523cd530a003ca19a407f6dfc1f82616c4c662616551fd38404
GET /fp/ls_fp.html;CIS3SID=61AEABC4D0292C5EC5E00C92B12CD139?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=97
Transfer-Encoding: chunked
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jb=3136246c71613d63376660663a353164653b3134646b3b31633063386939363363326066383b3e
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jb=3136246c71613d63376660663a353164653b3134646b3b31633063386939363363326066383b3e
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jb=3136246c71613d63376660663a353164653b3134646b3b31633063386939363363326066383b3e HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: text/javascript
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jd=3735242668666e3d37266866603f3864316a36376130673e32366535396266376735306361336e37623838336565246a66746c3d323833333237
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jd=3735242668666e3d37266866603f3864316a36376130673e32366535396266376735306361336e37623838336565246a66746c3d323833333237
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jd=3735242668666e3d37266866603f3864316a36376130673e32366535396266376735306361336e37623838336565246a66746c3d323833333237 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/javascript
ocsp.securetrust.com/
23.36.79.25200 OK 638 B IP 23.36.79.25:0
ASN #20940 Akamai International B.V.
Hash d8d3d02c40dad4c7c611dbb8a0ece2f4
96d214e5166469ea994aa13468448d1449e78402
d325f9462edde57b3395040d65147cab9202b88b57128ad497c05115f1fb2fa4
POST / HTTP/1.1
Host: ocsp.securetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 638
Date: Fri, 28 Oct 2022 01:45:45 GMT
Connection: keep-alive
prod.report.nacustomerexperience.citi.com/glassbox/reporting/cls_report?_cls_s=25b3395d-1fe7-41ac-bb13-0c8bce509a5a%3A0&_cls_v=c00c4ba8-e9c9-4f4a-b923-fd67a82ca206&pv=2&f_cls_s=true
192.193.200.243200 OK 4.5 kB URL HTTP/1.1 prod.report.nacustomerexperience.citi.com/glassbox/reporting/cls_report?_cls_s=25b3395d-1fe7-41ac-bb13-0c8bce509a5a%3A0&_cls_v=c00c4ba8-e9c9-4f4a-b923-fd67a82ca206&pv=2&f_cls_s=true
IP 192.193.200.243:0
ASN #32287 SOLANA-CITIPLEX
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (39392), with no line terminators
Hash 1dc69a8c5992b63a32cc9f1e07612dca
1699403b69106052367ede40f92ff04dce925ada
2a0b3a6c8ed1601fecaa10bcc65fc28d03047c48a3bd8727180f3dd9244aadf6
GET /glassbox/reporting/cls_report?_cls_s=25b3395d-1fe7-41ac-bb13-0c8bce509a5a%3A0&_cls_v=c00c4ba8-e9c9-4f4a-b923-fd67a82ca206&pv=2&f_cls_s=true HTTP/1.1
Host: prod.report.nacustomerexperience.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: GlassBox Cligate
Access-Control-Allow-Origin: https://citi.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST, GET
Access-Control-Allow-Headers: accept,x-requested-method,origin
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubdomains;
Content-Type: application/json
vary: origin
content-encoding: gzip
content-length: 4460
set-cookie: _cls_cfgver=2a5e2186; Secure; SameSite=None;HttpOnly;Secure
_cls_v=c00c4ba8-e9c9-4f4a-b923-fd67a82ca206; Secure; SameSite=None;HttpOnly;Secure
_cls_s=25b3395d-1fe7-41ac-bb13-0c8bce509a5a:0; Secure; SameSite=None;HttpOnly;Secure
ROUTEID=.cligate1_swcrd14; path=/;HttpOnly;Secure
X-Akamai-CITISITE: SWDC
Connection: close
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&ja=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&jb=333131266e713d4d6f7a6b6c64632532463d2c30253a322055696e646777732530324c5625303831302e30253342273230576b6e343627314a253230783636273142273232727625334133303d2c3029253a3247656b696727324632383130303332332732324e697265666f782530463130372e32
91.235.133.67204 204 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&ja=3432342624633d30267a3f302e643d31323032783138303c2461663d393238307a33323232247b78793d307830266670723d332c33303a3224313032342c33303a302e313230322c31323a30243b33392c3930383024333830342c302430267361663f30342464683d6874747025314125324425304474677a6966792d636b767b62636e696f6e6c696e672e696e6572742660726f7f6c6a6d79626f697264626d6d69712e61676d2532466369747b2e636f6f25304424667a3d2668683d673a3064603531343230383633656c603965353e3239353d3131636437636d32266a716d3f4e696c7d78266a73623d466b7265666d78273032333835266a736f773f4e696c757a266a7362753f46617065666f70246e686b3f393426747a6c3d555441246f63746a7a3d3238393662383a633037676263366664693862613861343b3339663661636132303161353e67313832693261396c3b3c6361343438643334363460376636313026703d706c7565696e5f646c63716a273d4566616c736723726c77676b6e5f77696e666f7f715f6d656c6b615f786e697b6572253d4566616e716723706e7d67696e5f61646f60655f6161726d6063762d354566616c716723706e7565696e5f71756b636376696d652d374566696e7b6721706c7d67696e5d716a6d63697f61766525354566636c736523706e77656b665f7265616c726e6379677227354566616c716529726c7567616c5f76646157726c61796d7225354764636e736729706c7567696e5f666576616e76702737476e616c736521726e77676b6e5d7376675f766b657f677225354d64616c7b6729726c7567616e5f6a6374632735476e616c7365266363663d313730333536&jb=333131266e713d4d6f7a6b6c64632532463d2c30253a322055696e646777732530324c5625303831302e30253342273230576b6e343627314a253230783636273142273232727625334133303d2c3029253a3247656b696727324632383130303332332732324e697265666f782530463130372e32
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&ja=3432342624633d30267a3f302e643d31323032783138303c2461663d393238307a33323232247b78793d307830266670723d332c33303a3224313032342c33303a302e313230322c31323a30243b33392c3930383024333830342c302430267361663f30342464683d6874747025314125324425304474677a6966792d636b767b62636e696f6e6c696e672e696e6572742660726f7f6c6a6d79626f697264626d6d69712e61676d2532466369747b2e636f6f25304424667a3d2668683d673a3064603531343230383633656c603965353e3239353d3131636437636d32266a716d3f4e696c7d78266a73623d466b7265666d78273032333835266a736f773f4e696c757a266a7362753f46617065666f70246e686b3f393426747a6c3d555441246f63746a7a3d3238393662383a633037676263366664693862613861343b3339663661636132303161353e67313832693261396c3b3c6361343438643334363460376636313026703d706c7565696e5f646c63716a273d4566616c736723726c77676b6e5f77696e666f7f715f6d656c6b615f786e697b6572253d4566616e716723706e7d67696e5f61646f60655f6161726d6063762d354566616c716723706e7565696e5f71756b636376696d652d374566696e7b6721706c7d67696e5d716a6d63697f61766525354566636c736523706e77656b665f7265616c726e6379677227354566616c716529726c7567616c5f76646157726c61796d7225354764636e736729706c7567696e5f666576616e76702737476e616c736521726e77676b6e5d7376675f766b657f677225354d64616c7b6729726c7567616e5f6a6374632735476e616c7365266363663d313730333536&jb=333131266e713d4d6f7a6b6c64632532463d2c30253a322055696e646777732530324c5625303831302e30253342273230576b6e343627314a253230783636273142273232727625334133303d2c3029253a3247656b696727324632383130303332332732324e697265666f782530463130372e32 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 204
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Content-Type: text/javascript;charset=UTF-8
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
cdn.pbbl.co/r/1560.js
143.204.55.125403 Forbidden 986 B IP 143.204.55.125:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a5b696d449ae129a8a2047d27b10d86d
1c64af6f7ba6b02927897a96d152511ab671cb83
e5b84e49843d83af89ea521d04692b93f72b668164fea702651e53b3cbc4f0ed
GET /r/1560.js HTTP/1.1
Host: cdn.pbbl.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 28 Oct 2022 01:45:45 GMT
Content-Type: text/html
Content-Length: 986
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _D20VWsB71jVhZGb7uKrBJL6x7nCz95akfaEZMaF2o8ZRtvIrTie6w==
Vary: Origin
content22.online.citi.com/fp/clear.png
91.235.133.67304 Not Modified 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*, 89oebq5k/31f079b47db06ff46a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Fri, 28 Oct 2022 01:45:45 GMT
If-None-Match: 760ace7727294c38995e6211c250760a
HTTP/1.1 304 Not Modified
Date: Fri, 28 Oct 2022 01:45:45 GMT
Access-Control-Allow-Origin: *
Server: Apache
Connection: Keep-Alive
Keep-Alive: timeout=2, max=98
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jb=31362e6c71633d6135666a643037336665333334646b3b3961306338613b3633633260643a3b3e
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jb=31362e6c71633d6135666a643037336665333334646b3b3961306338613b3633633260643a3b3e
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jb=31362e6c71633d6135666a643037336665333334646b3b3961306338613b3633633260643a3b3e HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: text/javascript
content22.online.citi.com/fp/ls_fp.html;CIS3SID=4C3A69F65983E216E3A46244704977D2?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1
91.235.133.67200 OK 13 kB URL HTTP/1.1 content22.online.citi.com/fp/ls_fp.html;CIS3SID=4C3A69F65983E216E3A46244704977D2?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1
IP 91.235.133.67:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Hash 3bddfb2329dc77827f4fe30a29f704db
5726fb637012b6e9e93ef08c4c6e76518546f1d2
9d4db4c712218e1cab2ad6778949cb27b77af562962333924721d502efaddf0c
GET /fp/ls_fp.html;CIS3SID=4C3A69F65983E216E3A46244704977D2?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=95
Transfer-Encoding: chunked
89oebq5ke4nv7d4lu5o7uz5ykg5teccehmspyww56b89f78c1aa12a6cam1.e.aa.online-metrix.net/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&di=yes
91.235.134.131200 OK 81 B URL HTTP/1.1 89oebq5ke4nv7d4lu5o7uz5ykg5teccehmspyww56b89f78c1aa12a6cam1.e.aa.online-metrix.net/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&di=yes
IP 91.235.134.131:0
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&di=yes HTTP/1.1
Host: 89oebq5ke4nv7d4lu5o7uz5ykg5teccehmspyww56b89f78c1aa12a6cam1.e.aa.online-metrix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Content-Length: 81
Content-Type: image/png
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jd=37352e2668646e3f352662646a3d3a66316234376130673630366535316066376735306163336e37623a38336565266866766c3d303a31363a37
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jd=37352e2668646e3f352662646a3d3a66316234376130673630366535316066376735306163336e37623a38336565266866766c3d303a31363a37
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jd=37352e2668646e3f352662646a3d3a66316234376130673630366535316066376735306163336e37623a38336565266866766c3d303a31363a37 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: text/javascript
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5e83a28b4cf3704ed7ee9b5b209caec6
9da8bd6baa00c240f5fe8511be7ebdc5166c18cf
021e6992122fcdc5803bd23e45f2fbb7b26f2c7d1d027dd5f9163d90f9fd6a36
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
content22.online.citi.com/fp/top_fp.html;CIS3SID=4C3A69F65983E216E3A46244704977D2?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1
91.235.133.67200 OK 14 kB URL HTTP/1.1 content22.online.citi.com/fp/top_fp.html;CIS3SID=4C3A69F65983E216E3A46244704977D2?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1
IP 91.235.133.67:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (15506)
Hash c1448efafdfd3edf4849350d4c360003
713c7f11fef66c3469f66fddd88d5488ebd3918b
94c0b254c68775269e46560318d3d47aeb960a8d9cfb7eb937d8e6ce0e80fc4c
GET /fp/top_fp.html;CIS3SID=4C3A69F65983E216E3A46244704977D2?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=94
Transfer-Encoding: chunked
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&ja=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&jb=33313b266e733d4f6d7a616e6e61273046352e30253a322857696e646f75732530324c5427303831302c30253342253030556b6e36342531422532327a36362731422d323270762731413932372e322b25323047656b696f25324632303330303332332530324e697267666f782532443132372e30
91.235.133.67204 204 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&ja=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&jb=33313b266e733d4f6d7a616e6e61273046352e30253a322857696e646f75732530324c5427303831302c30253342253030556b6e36342531422532327a36362731422d323270762731413932372e322b25323047656b696f25324632303330303332332530324e697267666f782532443132372e30
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&ja=34323e2624613d32247a353224663f3332383078313830342661663d313038307a33323030247b78793f307830266472723f332c313238322c313030362c33303a3024313232322e333230322e39313b2c3132383024333032342c302c32267361663f32362464683d6a74747025334325304425324676677269667b2f636b767b62696e696d6e6e6b6e6d2c636c6770742e62726f7f6c626f79626f617064626d6d69732c61676d253046636974792c636d6f2532462666723d266a6a3d64616030303033333930616138663a64616764323061303e3a30396434656336266a716d3f4c6b6c7d78266873623d46697065646d782532303330352668716f773f4e6966757a246a71607535446b7267646f78266e686b3f313626747a643f555441246f61766a7a3d323a3936623838613035676261346464613862633a61343b33396c366161613032316b373465333a32613061396c3b346161343430663334363460356436313026723d706c75676b6e5d646c61736827354566636e736723726c7d676b6c5f756b6e6c6d75735d6f656469615f786e6179657225354766616e716721726e7d67696c5f61646f62675f6361726f62617625354564636c716723706475656b6e5d7375616169746b6f6525354566696e736521706c7565696e5d716a6f61697f61766725354566616e736723706c75676b6e5f7267636c726e63796d7227374564636c7b6723706e7767696e5f7664615f706c6179657025354764636c716729706c7767696e5f646776636e767225354766616c716721726e7767616e5d7176655d76616775657027354566616c7b6721706c7567696c5f6a6374632537476e616c7165266363643f323a32343234&jb=33313b266e733d4f6d7a616e6e61273046352e30253a322857696e646f75732530324c5427303831302c30253342253030556b6e36342531422532327a36362731422d323270762731413932372e322b25323047656b696f25324632303330303332332530324e697267666f782532443132372e30 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 204
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Content-Type: text/javascript;charset=UTF-8
Keep-Alive: timeout=2, max=95
Connection: Keep-Alive
googleads.g.doubleclick.net/pagead/viewthroughconversion/916451471/?random=1666921543460&cv=11&fst=1666921543460&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&auid=1217213715.1666921543&data=event%3Dgtag.config&rfmt=3&fmt=4
216.58.207.194200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/916451471/?random=1666921543460&cv=11&fst=1666921543460&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&auid=1217213715.1666921543&data=event%3Dgtag.config&rfmt=3&fmt=4
IP 216.58.207.194:0
File type ASCII text, with very long lines (2038), with no line terminators
Hash acf96afab7d55735624ea008571e4137
270f1e912ac21f7ae3fcff280eb469b24f767b50
74e50fcc57d5ebd28344ea275f3216ef98f9e75572160065606c0e671a4c0689
GET /pagead/viewthroughconversion/916451471/?random=1666921543460&cv=11&fst=1666921543460&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&auid=1217213715.1666921543&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1004
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 28-Oct-2022 02:00:45 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5e83a28b4cf3704ed7ee9b5b209caec6
9da8bd6baa00c240f5fe8511be7ebdc5166c18cf
021e6992122fcdc5803bd23e45f2fbb7b26f2c7d1d027dd5f9163d90f9fd6a36
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
89oebq5kczg3ghvfhl4btlj7hqcgbmpe5jomxzqk31f079b47db06ff4am1.e.aa.online-metrix.net/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&di=yes
91.235.134.131200 OK 81 B URL HTTP/1.1 89oebq5kczg3ghvfhl4btlj7hqcgbmpe5jomxzqk31f079b47db06ff4am1.e.aa.online-metrix.net/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&di=yes
IP 91.235.134.131:0
File type PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b6d2de2867a3e11063ba25aa1cd4209
bd20b0e089f31f35cba4d0fa7277e73aa74d944c
95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
GET /fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&di=yes HTTP/1.1
Host: 89oebq5kczg3ghvfhl4btlj7hqcgbmpe5jomxzqk31f079b47db06ff4am1.e.aa.online-metrix.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Content-Length: 81
Content-Type: image/png
udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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
35.241.45.82200 OK 0 B URL HTTP/1.1 udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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
IP 35.241.45.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1
Host: udc-neb.kampyle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 01:45:45 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, DELETE
Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept
Access-Control-Max-Age: 1800
X-ME: prod-instance-gatewayservice-blue-43pb
X-Application-Context: application:9090
Content-Type: image/gif; charset=UTF-8
Content-Length: 0
Server: Jetty(9.2.11.v20150529)
Via: 1.1 google
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&jf=3b34266e73603561633733333135373066356134306635396335336334646364383f3536353665
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&jf=3b34266e73603561633733333135373066356134306635396335336334646364383f3536353665
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1&jf=3b34266e73603561633733333135373066356134306635396335336334646364383f3536353665 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content22.online.citi.com/fp/ls_fp.html;CIS3SID=6749B7F6C647E897D97699183E6A13F2?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=93
Connection: Keep-Alive
Content-Type: text/javascript
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e4310918d6232571380ecdee01460a00
fde570a320de2d68089611ea286d8638d55dcb31
fc0209573f8bc2b00eadf4c750f336102d4d34cc4ea65fe60dfeb789970fcba1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/916451471/?random=1666921543460&cv=11&fst=1666918800000&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2916388253&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/916451471/?random=1666921543460&cv=11&fst=1666918800000&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2916388253&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/916451471/?random=1666921543460&cv=11&fst=1666918800000&bg=ffffff&guid=ON&async=1>m=2oaaq0&u_w=1280&u_h=1024&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2916388253&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jf=3136246c71623d616137333139373730663f6134306e3731633733613e6661643a35373435346d
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jf=3136246c71623d616137333139373730663f6134306e3731633733613e6661643a35373435346d
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1&jf=3136246c71623d616137333139373730663f6134306e3731633733613e6661643a35373435346d HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content22.online.citi.com/fp/ls_fp.html;CIS3SID=61AEABC4D0292C5EC5E00C92B12CD139?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:45 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=92
Connection: Keep-Alive
Content-Type: text/javascript
contents1.00110.citi.com/api/v1/sendLogs?cid=cedric&cdsnum=1666921542903-sjn0000598-e61a3a7f-b382-449e-8cee-a6f763678e58&csid=null&ds=js&sdkVer=2.17.2.285.6f55d57
13.89.105.232204 No Content 0 B URL HTTP/2 contents1.00110.citi.com/api/v1/sendLogs?cid=cedric&cdsnum=1666921542903-sjn0000598-e61a3a7f-b382-449e-8cee-a6f763678e58&csid=null&ds=js&sdkVer=2.17.2.285.6f55d57
IP 13.89.105.232:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/sendLogs?cid=cedric&cdsnum=1666921542903-sjn0000598-e61a3a7f-b382-449e-8cee-a6f763678e58&csid=null&ds=js&sdkVer=2.17.2.285.6f55d57 HTTP/1.1
Host: contents1.00110.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 836
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 28 Oct 2022 01:45:45 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/959299794/?random=1666921544192&cv=9&fst=1666918800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=1501859348&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/959299794/?random=1666921544192&cv=9&fst=1666918800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=1501859348&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/959299794/?random=1666921544192&cv=9&fst=1666918800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=1501859348&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/695231162/?random=1666921544189&cv=9&fst=1666918800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=431123268&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/695231162/?random=1666921544189&cv=9&fst=1666918800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=431123268&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/695231162/?random=1666921544189&cv=9&fst=1666918800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa2g0&sendb=1&data=event%3Dgtag.config&frm=0&url=http%3A%2F%2Fverify-citybankonline.alert.brownboyboardbooks.com%2Fcity.com%2F&tiba=Sign%20On%20to%20Your%20Citi%20Account%20-%20Citibank&async=1&fmt=3&is_vtc=1&random=431123268&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 28 Oct 2022 01:45:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e4310918d6232571380ecdee01460a00
fde570a320de2d68089611ea286d8638d55dcb31
fc0209573f8bc2b00eadf4c750f336102d4d34cc4ea65fe60dfeb789970fcba1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 01:45:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jf=31362e6c71603d63633739333335353266376334306e373961373361366461643a35373637346d
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jf=31362e6c71603d63633739333335353266376334306e373961373361366461643a35373637346d
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1&jf=31362e6c71603d63633739333335353266376334306e373961373361366461643a35373637346d HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://content22.online.citi.com/fp/ls_fp.html;CIS3SID=4C3A69F65983E216E3A46244704977D2?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:46 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Keep-Alive: timeout=2, max=91
Connection: Keep-Alive
Content-Type: text/javascript
contents2.00110.citi.com/client/v3.1/web/wup?cid=cedric
52.154.174.214200 OK 558 B URL HTTP/2 contents2.00110.citi.com/client/v3.1/web/wup?cid=cedric
IP 52.154.174.214:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type JSON data\012- , ASCII text, with very long lines (558), with no line terminators
Hash 6a3ca712e8b53dd0418d595189bad1e6
8cb8125093e7fa41ac8429441ec2d7dc3f4b19da
063ddc36e823fac0cf0d8d9bef935659994e426a99d2517bf4147d57af9ef46e
POST /client/v3.1/web/wup?cid=cedric HTTP/1.1
Host: contents2.00110.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2422
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 558
date: Fri, 28 Oct 2022 01:45:44 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: 2de7cf02-9810-4be3-8c7b-f113173a4d88
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/dxjsmodule/4.3b9b4addd065f99c38ba.chunk.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback
104.17.208.240200 OK 1.9 kB URL HTTP/2 siteintercept.qualtrics.com/dxjsmodule/4.3b9b4addd065f99c38ba.chunk.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback
IP 104.17.208.240:0
File type ASCII text, with very long lines (1754), with no line terminators
Hash 79fbd0ae2582522de657dffd4f7c4aaf
084280fdcce51e5cd8b112e3b5a7b792b8256369
dcacc86e17e077fb0fb37246aba7831e3d7719e2c3ff42dab903f544abae189f
GET /dxjsmodule/4.3b9b4addd065f99c38ba.chunk.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:46 GMT
content-type: application/javascript
cf-ray: 760ffe704fe70a3d-ARN
access-control-allow-origin: *
age: 24967
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"9eb-183c2d70130"
last-modified: Mon, 10 Oct 2022 17:00:14 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=2539
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_0AioryRkl8bxHM2&Version=10&Q_ORIGIN=http://verify-citybankonline.alert.brownboyboardbooks.com&Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web
104.17.208.240200 OK 1.2 kB URL HTTP/2 siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_0AioryRkl8bxHM2&Version=10&Q_ORIGIN=http://verify-citybankonline.alert.brownboyboardbooks.com&Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web
IP 104.17.208.240:0
File type JSON data\012- , ASCII text, with very long lines (5473), with no line terminators
Hash f60159d1135fb9b8646975b51c5863da
e23a99afe8ac37a00d210875f763575860f1883e
e690c1988ec7c5336bbbcdb1e6c93e77eed09ecf18c1ee0b922337f7edb9a2a0
GET /WRSiteInterceptEngine/Asset.php?Module=SI_0AioryRkl8bxHM2&Version=10&Q_ORIGIN=http://verify-citybankonline.alert.brownboyboardbooks.com&Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:46 GMT
content-type: application/json
cf-ray: 760ffe705fee0a3d-ARN
access-control-allow-origin: *
age: 18474
cache-control: public, max-age=604800, s-maxage=604800, max-age=315360000
expires: Sun, 24 Oct 2032 20:37:52 GMT
last-modified: Thu, 27 Oct 2022 20:37:52 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: false
edge-control: max-age=604800
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
servershortname:
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp/clear.png?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 6
Origin: https://content22.online.citi.com
Connection: keep-alive
Referer: https://content22.online.citi.com/fp/top_fp.html;CIS3SID=61AEABC4D0292C5EC5E00C92B12CD139?org_id=89oebq5k&session_id=f13ab1edeab18f4de9bda9c87dd095aabcc70280541a117ddef5b26c845e156f&nonce=6b89f78c1aa12a6c&pageid=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:46 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Access-Control-Allow-Origin: https://content22.online.citi.com
Content-Type: text/javascript
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp/clear.png?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 6
Origin: https://content22.online.citi.com
Connection: keep-alive
Referer: https://content22.online.citi.com/fp/top_fp.html;CIS3SID=6749B7F6C647E897D97699183E6A13F2?org_id=89oebq5k&session_id=9717568aca3ba00d5234104e6f4c362a19aaa5de751b91a371cfabbf6b804cec&nonce=5527618d41f91b6a&pageid=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:46 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Access-Control-Allow-Origin: https://content22.online.citi.com
Content-Type: text/javascript
content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1
91.235.133.67204 No Content 0 B URL HTTP/1.1 content22.online.citi.com/fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1
IP 91.235.133.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp/clear.png?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1 HTTP/1.1
Host: content22.online.citi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 6
Origin: https://content22.online.citi.com
Connection: keep-alive
Referer: https://content22.online.citi.com/fp/top_fp.html;CIS3SID=4C3A69F65983E216E3A46244704977D2?org_id=89oebq5k&session_id=6a85cc0b2587fa37e50459cde015dc512324b28dd7dd15460c2d10e6ae17cd32&nonce=31f079b47db06ff4&pageid=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Fri, 28 Oct 2022 01:45:46 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Access-Control-Allow-Origin: https://content22.online.citi.com
Content-Type: text/javascript
siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_6sPqDX4wKQujPO6&Version=1&Q_InterceptID=SI_0AioryRkl8bxHM2&Q_ORIGIN=http://verify-citybankonline.alert.brownboyboardbooks.com&Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web
104.17.208.240200 OK 0 B URL HTTP/2 siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_6sPqDX4wKQujPO6&Version=1&Q_InterceptID=SI_0AioryRkl8bxHM2&Q_ORIGIN=http://verify-citybankonline.alert.brownboyboardbooks.com&Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web
IP 104.17.208.240:0
GET /WRSiteInterceptEngine/Asset.php?Module=CR_6sPqDX4wKQujPO6&Version=1&Q_InterceptID=SI_0AioryRkl8bxHM2&Q_ORIGIN=http://verify-citybankonline.alert.brownboyboardbooks.com&Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:46 GMT
content-type: application/json
cf-ray: 760ffe705fef0a3d-ARN
access-control-allow-origin: *
age: 18474
cache-control: public, max-age=604800, s-maxage=604800, max-age=315360000
expires: Sun, 24 Oct 2032 20:37:52 GMT
last-modified: Thu, 27 Oct 2022 20:37:52 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: false
edge-control: max-age=604800
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
servershortname:
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_3VI8kkudS0JJRFc&Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web
104.17.208.240200 OK 0 B URL HTTP/2 siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_3VI8kkudS0JJRFc&Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web
IP 104.17.208.240:0
POST /WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_3VI8kkudS0JJRFc&Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 122
Origin: http://verify-citybankonline.alert.brownboyboardbooks.com
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:45 GMT
content-type: application/json
cf-ray: 760ffe68cc850a3d-ARN
access-control-allow-origin: http://verify-citybankonline.alert.brownboyboardbooks.com
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
trace-id: 340cbcf6932d1c81
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/dxjsmodule/1.abd4c1d883bf4b225b59.chunk.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback
104.17.208.240200 OK 0 B URL HTTP/2 siteintercept.qualtrics.com/dxjsmodule/1.abd4c1d883bf4b225b59.chunk.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback
IP 104.17.208.240:0
GET /dxjsmodule/1.abd4c1d883bf4b225b59.chunk.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:46 GMT
content-type: application/javascript
cf-ray: 760ffe704fe80a3d-ARN
access-control-allow-origin: *
age: 24967
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"7380-183c2d70130"
last-modified: Mon, 10 Oct 2022 17:00:14 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=29568
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback
104.17.208.240200 OK 0 B URL HTTP/2 siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback
IP 104.17.208.240:0
GET /dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=1.79.0&Q_CLIENTTYPE=web&Q_BRANDID=citifeedback HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://verify-citybankonline.alert.brownboyboardbooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 28 Oct 2022 01:45:46 GMT
content-type: application/javascript
cf-ray: 760ffe704fec0a3d-ARN
access-control-allow-origin: *
age: 24967
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"102f7-183c2d70130"
last-modified: Mon, 10 Oct 2022 17:00:14 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=66295
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2