Overview

URLcitytox.com/wp-content/plugins/yuidghh/secure/login.php
IP 87.116.13.124 (Denmark)
ASN#31027 GlobalConnect NN A/S
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-29 03:47:14 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (22)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (7) 344 No data No data 23.36.76.226
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
widget.trustpilot.com (6) 6018 2017-09-05 07:45:53 UTC 2022-11-28 11:56:55 UTC 143.204.55.78
cookiemanager.dk (2) 0 No data No data 104.21.47.43 Unknown ranking
cdn.weply.chat (7) 923947 2021-10-29 06:35:41 UTC 2022-11-28 14:57:13 UTC 99.80.139.86
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-11-28 06:50:41 UTC 216.239.32.36 Domain (google-analytics.com) ranked at: 8401
img-getpocket.cdn.mozilla.net (5) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-11-28 16:39:41 UTC 142.250.74.10
citytox.com (49) 0 2015-09-01 19:42:08 UTC 2022-11-27 20:22:12 UTC 87.116.13.124 Unknown ranking
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-28 05:53:26 UTC 34.117.237.239
fonts.gstatic.com (5) 0 2014-09-09 00:40:21 UTC 2022-11-28 23:28:37 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
ocsp.sectigo.com (2) 487 2019-11-29 11:50:24 UTC 2021-09-17 20:05:40 UTC 172.64.155.188
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-11-28 21:28:05 UTC 142.250.74.174
ocsp.pki.goog (8) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.35
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.36.24.174
maps.gstatic.com (1) 0 2016-01-11 16:55:17 UTC 2022-11-28 21:41:06 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
app.weply.chat (2) 360158 No data No data 63.32.60.80
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-28 05:55:58 UTC 34.102.187.140
e1.o.lencr.org (2) 6159 No data No data 23.36.76.226
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-11-28 20:10:04 UTC 142.250.74.168
app.crowdio.com (1) 0 No data No data 63.32.60.80 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-29 2 citytox.com/wp-content/plugins/yuidghh/secure/login.php Phishing
2022-11-29 2 citytox.com/wp-content/plugins/yuidghh/secure/login.php Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 3 reports on IP: 87.116.13.124
Date UQ / IDS / BL URL IP
2023-01-04 00:38:55 +0000 0 - 0 - 2 citytox.com/wp-content/plugins/yuidghh/secure (...) 87.116.13.124
2022-11-29 03:47:14 +0000 0 - 0 - 2 citytox.com/wp-content/plugins/yuidghh/secure (...) 87.116.13.124
2022-09-25 04:02:45 +0000 0 - 0 - 2 citytox.com/wp-content/plugins/yuidghh/secure (...) 87.116.13.124


Last 5 reports on ASN: GlobalConnect NN A/S
Date UQ / IDS / BL URL IP
2023-02-07 06:46:25 +0000 0 - 2 - 0 download.milestonesys.com/MTSKB/hotfixes/13.3 (...) 130.185.131.9
2023-02-06 16:49:34 +0000 0 - 1 - 0 download.milestonesys.com/2022%20R3/Milestone (...) 130.185.131.9
2023-02-01 10:50:45 +0000 0 - 1 - 0 www.microsystools.com/products/website-search (...) 178.20.216.31
2023-01-24 13:04:25 +0000 0 - 0 - 0 www.survey-xact.no/answer?key66QYGMJ4D44H 217.195.184.81
2023-01-17 12:04:22 +0000 0 - 1 - 0 produkter.geoteam.dk/Software_Firmware/Win10_ (...) 83.136.91.123


Last 3 reports on domain: citytox.com
Date UQ / IDS / BL URL IP
2023-01-04 00:38:55 +0000 0 - 0 - 2 citytox.com/wp-content/plugins/yuidghh/secure (...) 87.116.13.124
2022-11-29 03:47:14 +0000 0 - 0 - 2 citytox.com/wp-content/plugins/yuidghh/secure (...) 87.116.13.124
2022-09-25 04:02:45 +0000 0 - 0 - 2 citytox.com/wp-content/plugins/yuidghh/secure (...) 87.116.13.124


No other reports with similar screenshot

JavaScript

Executed Scripts (64)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (108)


Request Response
                                        
                                            GET /wp-content/plugins/yuidghh/secure/login.php HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         87.116.13.124
HTTP/1.1 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-redirect-by: WordPress
location: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
vary: Accept-Encoding,Accept-Encoding
cache-control: public, max-age=0
expires: Tue, 29 Nov 2022 03:47:02 GMT
content-length: 20
content-encoding: gzip
date: Tue, 29 Nov 2022 03:47:02 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  data
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2938
Expires: Tue, 29 Nov 2022 04:36:01 GMT
Date: Tue, 29 Nov 2022 03:47:03 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3394
Cache-Control: 'max-age=158059'
Date: Tue, 29 Nov 2022 03:47:03 GMT
Last-Modified: Tue, 29 Nov 2022 02:50:29 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 03:19:35 GMT
cache-control: public,max-age=3600
age: 1648
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5222
Expires: Tue, 29 Nov 2022 05:14:05 GMT
Date: Tue, 29 Nov 2022 03:47:03 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: jkrqTxpkz4nChcHIRFxtjngabOlYF14AxN/UQUNJA3ke0ZOXL3vrD0ji6YMYjV5FFdzpCDJ2ZsE=
x-amz-request-id: XZE1SG39HEJXZTJM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 03:42:21 GMT
age: 282
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 29 Nov 2022 03:47:03 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /wp-content/plugins/responsive-youtube-vimeo-popup/assets/css/wp-video-popup.css?ver=2.9.3 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Wed, 12 Oct 2022 08:25:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 291
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (849)
Size:   291
Md5:    a7101821d1382f327e5222da577bb88a
Sha1:   aeaa986be38bbe741f38b281b0d05b4c01b6ebf4
Sha256: 01583c9b563ae225c238e265f158870dacae2dc356697abb384c6132c0af8bf8
                                        
                                            GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Tue, 29 Nov 2022 01:28:24 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nZENWL_lJ3XtNgg8xAK6YjVsqJpgUje8mEMZ-5nB0kL6RwHfwkfPoA==
age: 8320
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Size:   6124
Md5:    5add60196e5f96a414fb4b9586764e5d
Sha1:   633f471b3c2fcedeef9cad90cb5bf56f5fe55588
Sha256: 5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
                                        
                                            GET /wp-content/themes/number-two/modules/slick/slick.css?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 473
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   473
Md5:    17265c4988f4c1c4a9873fd06cf8687c
Sha1:   8eae27c19a7d9a1a763420e2312106d687f4a97c
Sha256: e4fc89bbfbf516423de7ffa2cfb1127dd0ebea632596423ad43cff5873267545
                                        
                                            GET /wp-content/themes/number-two/modules/slick/slick-theme.css?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1266
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   1266
Md5:    edc786096334aa55f71e62d2a94a1f61
Sha1:   4f1d4bca3e858a1f233691a9137cd79d1225b674
Sha256: ac57a85520435fdd1fba51783086a9c922ad071af1042a3b7442e8bf93698d82
                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.9.4 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 07:22:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 2258
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (17637), with no line terminators
Size:   2258
Md5:    178aebe426e549bb14ad51a38d5e0dd9
Sha1:   3119c09f543d8e9e844cd6182c6f08efc248b1a0
Sha256: 1c1085668ee16d698c1bb6eca000ceed18177a1d24415d889b9cd81211c64074
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 7162
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (28088)
Size:   7162
Md5:    f40cd4c39a41bb5ed3f140460c0fca05
Sha1:   ac1f534660e4a9f2987fc4243228638a83103d09
Sha256: dec922a38fe1283ae5a87443786a840056ddce6ad773f4f48914f655f228232d
                                        
                                            GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=2.5.14 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 07:22:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 7355
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   7355
Md5:    bbc6c817dfd23b76b87a702f8d27fd47
Sha1:   0b21faaae17ae0186e1785301087b5a9b2352257
Sha256: 7cd393712956ed26420ac8222422d9b34ba63728bba06e6b81fb85c67d67aea7
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "344B31CC232EC2EB15599F5EAED1F52020A6CE3D15944377886493576D6D1047"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18530
Expires: Tue, 29 Nov 2022 08:55:53 GMT
Date: Tue, 29 Nov 2022 03:47:03 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=3.9.4 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 07:22:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 8369
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (62655), with no line terminators
Size:   8369
Md5:    209876ec74870f09ecd468aafc9242c9
Sha1:   6b1fa3224d33aae8e70e0146d1ce8be5073fd3f6
Sha256: 38dd9b413d80f3493a3e67a1b6a6e471b74679076e7502cbd03c525765e4025e
                                        
                                            GET /wp-content/themes/number-two/css/font-awesome.min.css?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 12248
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (58929)
Size:   12248
Md5:    93cb03ebebf850310f531ab88bc78604
Sha1:   be3071eccd456f3f68bd4b19ba903e4fef4e4a68
Sha256: beb2a0b0981ec0f75a1afaf3c36793454bbb5507f8b5d83a497b70f9faf89242
                                        
                                            GET /wp-content/themes/number-two/css/woocommerce.css?ver=0a27438418b145437fca71afda000b4b HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Fri, 14 Oct 2022 10:59:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 8138
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   8138
Md5:    a67e841098b122e1881472a890facbec
Sha1:   7c0711ad3dc3a176137011873b87f3b5d91aead5
Sha256: 945993ae178cc7f9251a80d828c77d8e4d961049245951eb914c5ed05466e10d
                                        
                                            GET /wp-includes/css/dashicons.min.css?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 28351
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (47523)
Size:   28351
Md5:    a2f8a7f322419704fd40a1cf087b14e8
Sha1:   14144d89bfa8127879e7478bde4a884e74038f03
Sha256: 7760eb2bda6c1517773fbeb0d0c9880b68bc049bfb513de6b60d4d4607d587cd
                                        
                                            GET /wp-content/themes/number-two/css/photoswipe.css?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1144
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1144
Md5:    f9bdf2a3bd64c744c9fa8d38417db74f
Sha1:   31da39afe49c3a6846eba7dd930683ae9c861be3
Sha256: 16d50541b4ccb1201f50302e00fc3d65d3d05b751ba6a1e9ee15dfa2af79c90d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 3823
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9959)
Size:   3823
Md5:    7c4522c04f6ad8cc5ba9d83d27a652c9
Sha1:   9b3058c58d6f0f3bcf204d57d5e38fc3ef507b8f
Sha256: 186df88869ab6951e2647db3b07fc025857cdab144cd7367513944d1d2f0f26c
                                        
                                            GET /wp-content/uploads/2021/03/di-logo.png HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=10368000,public
expires: Wed, 29 Mar 2023 03:47:03 GMT
last-modified: Thu, 03 Feb 2022 13:15:56 GMT
accept-ranges: bytes
content-length: 4689
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 193 x 92, 8-bit colormap, non-interlaced\012- data
Size:   4689
Md5:    53cf90105afd441bc83e0463f7bb469e
Sha1:   202e6dcdd57c677a2855cf8415320f99778a552a
Sha256: ae0f321692258e13ff0ccfddc51e91fe58baff35aebde93707276bf73e557ba0
                                        
                                            GET /wp-content/uploads/2021/03/logo-hvid-300x61.png HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=10368000,public
expires: Wed, 29 Mar 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 08:16:10 GMT
accept-ranges: bytes
content-length: 7446
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 61, 8-bit/color RGBA, non-interlaced\012- data
Size:   7446
Md5:    db997652309614e5216e984dcb6cb0bb
Sha1:   11d04b5318d196c862d98e6cf2a370d56ce9ee2d
Sha256: 6f39f5584c2e51f9293bdb98f74a1ab0042ed13fe2f3a7af6d9306d8d6d3b540
                                        
                                            GET /wp-content/plugins/gravityforms/css/formreset.min.css?ver=2.4.18 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 339
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3860), with no line terminators
Size:   339
Md5:    acd182bb117119137a1d5c0db883e135
Sha1:   b9eb3379372d02ced85a7f22a5ecc4e071146a8e
Sha256: 8bb53cc01e1e143c36d62448c9456519b26b7d22d1141bfe5cef16c137f403fd
                                        
                                            GET /wp-content/themes/number-two/css/photoswipe-default-skin/default-skin.css?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 2758
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2758
Md5:    6d01137ae002ae222ab4af17ee3d1e4a
Sha1:   7b7c3aadcb6a16ac1e3edd58d03cda9c201e8af4
Sha256: 012e4c46a2f8e21afd4f5b6746146a6c00e981bd5d18e7c5a8a283bef5404def
                                        
                                            GET /wp-content/plugins/gravityforms/css/readyclass.min.css?ver=2.4.18 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 3136
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30439), with no line terminators
Size:   3136
Md5:    669f4aa9fcdc8009af633c9b1c7e500a
Sha1:   40ba4696154ac0dfe2b17210f633fb7cd7878669
Sha256: 82337d71c49c129aaab72417f89d6b18c69b61087ccbeaf1b3fccb45e530a51d
                                        
                                            GET /wp-content/plugins/responsive-youtube-vimeo-popup/assets/js/wp-video-popup.js?ver=2.9.3 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Wed, 12 Oct 2022 08:25:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 909
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   909
Md5:    952e222e493618bff8f59ac1389d012b
Sha1:   8bd5a07903ef5f82ccfe1bd80d01b20e0632e780
Sha256: 84c9acf329ab8f637d932049757a51a5a57fefdf97661c343ddf5d346e5812d2
                                        
                                            GET /wp-content/plugins/gravityforms/css/browsers.min.css?ver=2.4.18 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1107
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7545), with no line terminators
Size:   1107
Md5:    799fbfd03257b0e9bb5ce4dd375e31d3
Sha1:   fd10777a2bf527abd69d17dad43b7f183a0606cc
Sha256: df95b33f723d2620860d6c1e8c85a21eecbc9948a532150034f122d0e265ba4c
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 07:22:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 3280
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9172)
Size:   3280
Md5:    9c7ae47bcf0dc0d73dc2efa79ad93080
Sha1:   d6666e4f67d9ce2a031613735c462e8c509e7203
Sha256: 326fc19eb1b917c2bd26de1196715e9ad6736988d89823e7418cab6f28eb2126
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.9.4 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 07:22:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 938
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2940), with no line terminators
Size:   938
Md5:    b0b78a02b18f4e4585d69d009ede4df4
Sha1:   c03f17d58f54b62f770bee9c75246d8960919a5a
Sha256: 88594d81dad7ba341a2fedec5edb45e51028353314ae7a5aea9527e93a76c1a4
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.9.4 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 07:22:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 655
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1985), with no line terminators
Size:   655
Md5:    45d7e53f0103f52c09686a2e00189775
Sha1:   9441759cd9f42216696475cb9a6ddde65215e8e3
Sha256: 186592ce82dcd921c4d1624c421761541b4f149b9ee583506b192fda1a15aeda
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 07:22:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 894
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1680)
Size:   894
Md5:    dfcc770336a2eead262dd6f877e80755
Sha1:   c201c1011320e8bf6b428fc4ada657b17b5b9650
Sha256: 044ac2994997d874b7b9a5d02fb4e9d911529c4bfa4f62554f1b1b71a48b2943
                                        
                                            GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.9.4 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 07:22:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 906
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2750), with no line terminators
Size:   906
Md5:    fb5d90435c05795ee5c15a70f1d4c34a
Sha1:   d0f332bcc5d92d0bc9a6597d760281dfb7641725
Sha256: b4b18dc266b786b67e456d9c0e1d1b5192c600bdf09db6ff6f5763da8d7573b7
                                        
                                            GET /wp-content/themes/number-two/js/woocommerce.js?ver=ed1cf4bcb5cb7e5047134cf2c0e4c566 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 2419
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   2419
Md5:    22034d6a9ced0dcf87338bbb61fd6c7c
Sha1:   c6860eaa0c20123d2ef926a66aa7a61957ee0387
Sha256: d0ea3b54c710aa3b907c71a9dcaf321c59f391f14de6b766ac581f743880ea33
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 32853
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (31997)
Size:   32853
Md5:    a95303ca3b1a9372809d72ffa31bca40
Sha1:   65130bca144d3b49d5f97387173c423b9b4abfe3
Sha256: c5d914b6693616fcf2c61bc363660dcc5f6ea7de5a25b1d6a5a2a95f39846565
                                        
                                            GET /wp-content/uploads/2021/03/logo-hvid.png HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=10368000,public
expires: Wed, 29 Mar 2023 03:47:03 GMT
last-modified: Thu, 03 Feb 2022 13:16:02 GMT
accept-ranges: bytes
content-length: 24540
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 918 x 187, 8-bit colormap, non-interlaced\012- data
Size:   24540
Md5:    72b4aeff435e2a08d8f93fb820cd1868
Sha1:   7757031c36e2eab04e4772b20ca5aa37a0ee8a26
Sha256: a28fa3ae48e588411db92fad5c7466b2c6630a17ede948033cd4d0ca275f993a
                                        
                                            GET /wp-content/themes/number-two/modules/slick/slick.min.js?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 10103
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32076)
Size:   10103
Md5:    d9aaf9095a4edcbac13ed9849974fe8c
Sha1:   d81411b52c9633dc15947b7f5969fb8fb52a90c1
Sha256: 61e3382ddc55c4778972c1a37ae40fe4b9a45e314b3ab61a2d6f382763db2298
                                        
                                            GET /wp-content/themes/number-two/css/responsive.css?ver=37387df3b0cec6e0c048b300780b6a91 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 23 Aug 2022 10:41:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 4230
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   4230
Md5:    b6ca03fcbd7323962f9e73fe9472f411
Sha1:   6c5b6d080b32c6fbf9cf9497657ddde6414465af
Sha256: 9926abc2352b40432bdebec6e2d5a77905bdadd3cdc04e0fadb80978948422de
                                        
                                            GET /wp-content/plugins/gravityforms/css/formsmain.min.css?ver=2.4.18 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 11107
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   11107
Md5:    077877cf17039a34298025d1b7d3feab
Sha1:   d63f0251517c641d158fe5d53afaedb9c6c5e4f2
Sha256: 29b3940391cbb9503838a5a82c3460ec32b34010b5a7e212d8eb9f19ad8927d7
                                        
                                            GET /wp-content/themes/number-two/js/photoswipe/photoswipe.min.js?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 11849
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (31802)
Size:   11849
Md5:    3ba1ff7902899454c86b05d7e6a8dec7
Sha1:   55296c17316cac465b471e36848bdbe9f4e1fbc4
Sha256: a80f815910a57c75d4cd95eeefc6f7c6692fa443bddc8c95258961646e0d942e
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "344B31CC232EC2EB15599F5EAED1F52020A6CE3D15944377886493576D6D1047"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18529
Expires: Tue, 29 Nov 2022 08:55:53 GMT
Date: Tue, 29 Nov 2022 03:47:04 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/themes/number-two/js/skip-link-focus-fix.js?ver=aaf376b96abfbd1fc7a29375ea135c94 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 242
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (580), with no line terminators
Size:   242
Md5:    4127f8ff449fd8dffdab0b561d29c15f
Sha1:   f68c158dae4edfa0a54ad5b6ed1784cce42fc184
Sha256: 008f0da3c003b26b18ef335d6e422f72a6d0a5f236a49c0b95aeec6b183eab27
                                        
                                            GET /wp-content/themes/number-two/js/photoswipe/photoswipe-ui-default.min.js?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 3555
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (9767)
Size:   3555
Md5:    103f0e2ae813c6087c193529e5ed29a4
Sha1:   58a3fcc1016c76f7047cd39226fcaddc6c82abc5
Sha256: a7b982dc4f204045bd3a6431ab400c40d27c26a990a7d6b3046e1d2f01ae9f89
                                        
                                            GET /wp-content/themes/number-two/js/navigation.js?ver=55eef512d584fe6d2abd504b55097419 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1644
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1644
Md5:    b88b359d9f60c247a3ac90095697f05e
Sha1:   b46250f283e5ed891a1739cb36001e1c129674e3
Sha256: 8ce9260807803bee1c59fca577703263ebd8e79546fd7317f00822f6dadc6c7d
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=5.4.1 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 668
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1399)
Size:   668
Md5:    79acb960d2840c1804fb08a4acec7375
Sha1:   b1dd9a0a51809a1894bc9cf843b20bb3481438c7
Sha256: addcb763d383b8de327e8e4ecdff8671f38c78910efaeec3a3e098cdbab183e7
                                        
                                            GET /wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.4.18 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 874
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1848), with no line terminators
Size:   874
Md5:    569cec542e91a53db3c674b77edfd95e
Sha1:   a9e5514619e799b56c1fdb2103895ac91325d574
Sha256: 0bcb1d07d201328f3f747a59a5f8fa977d02a44122b78c4961141abfae4bba57
                                        
                                            GET /wp-content/plugins/gravityforms/js/placeholders.jquery.min.js?ver=2.4.18 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1604
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4610)
Size:   1604
Md5:    2b96c3043a08342b977de709acd53932
Sha1:   27ceb58a8544635b4c7d7c4de024e4e98ae2f13a
Sha256: b30aecb4a62460655692318b3d34698246a7be43ebe5708dd7c76d7b321713a1
                                        
                                            GET /wp-content/themes/number-two/js/number-two.js?ver=3c8209d1161199d2ec6af2e02efccb02 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Wed, 21 Apr 2021 07:49:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 6009
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   6009
Md5:    c2708ab2c7f7c231f519e720729b7332
Sha1:   165a708690531659d5eaf30d6853f0ef36cbf236
Sha256: 0515d0bf5fc89f502ab24232d3bc2402d1190f9a5ec2f5f9d3bcd28eac5e65a7
                                        
                                            GET /wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.4.18 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 10081
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35070), with no line terminators
Size:   10081
Md5:    24ca6786b5ef79d4b11a40d428ecce5c
Sha1:   26943e1a8a6bcb175fbf731e80353c7a11e6be98
Sha256: 622953f8aa6d80d8d2210a48d64c0544e1f09718e9e267c2cc7deb7ad5775361
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 03:11:13 GMT
cache-control: public,max-age=3600
age: 2151
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4043
Cache-Control: max-age=109634
Date: Tue, 29 Nov 2022 03:47:04 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:14:18 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.9.4 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 11 Oct 2022 07:22:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 944
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6758), with no line terminators
Size:   944
Md5:    0a28db2029034c85fb7443a4c0a72eff
Sha1:   f57daabd412e81693f3fc8af28b9947d6db9a655
Sha256: bfc5d397b04ea4885ce26c8933a0b1fdd98892ab9f2141f7b3f3b65bef865222
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-KS8M3T7 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 03:47:04 GMT
expires: Tue, 29 Nov 2022 03:47:04 GMT
cache-control: private, max-age=900
last-modified: Tue, 29 Nov 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 49158
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3371)
Size:   49158
Md5:    e821cdcbc53418782ffdbe016ac28167
Sha1:   41a12320f3dbcc9ffc1f3679f0a1d94ea565dee9
Sha256: e33e85c651ff62a871af1cc13d5a367fad47f5dfbdea81688378ffb1dba56361
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2021/03/citytox6-1.jpg HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: image/jpeg
                                        
cache-control: public, max-age=10368000,public
expires: Wed, 29 Mar 2023 03:47:03 GMT
last-modified: Thu, 03 Feb 2022 13:16:11 GMT
accept-ranges: bytes
content-length: 45500
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x800, components 3\012- data
Size:   45500
Md5:    a20ff83f07bc53faaa3cb24f15b165ab
Sha1:   945a49e3bbdcb73bbee170f0967da2fbdfdb79aa
Sha256: 2b9c1c479764a7ed7796b0c5d13bf6080bd9e445214a0ddb14f3c2857d75d981
                                        
                                            GET /wp-content/themes/number-two/images/CTA-Home.png HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/themes/number-two/css/style.css?ver=ee5189a70f47b058fb0bff0bfe9096d8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=10368000,public
expires: Wed, 29 Mar 2023 03:47:03 GMT
last-modified: Mon, 29 Mar 2021 13:34:00 GMT
accept-ranges: bytes
content-length: 451146
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1920 x 553, 8-bit colormap, non-interlaced\012- data
Size:   451146
Md5:    9360d0f7e72c660cbcc68f228fbb1c06
Sha1:   1b6c1c913d2fd26bfb140a8de7bce6aa219675c6
Sha256: db6b0096dbe0f6555a3de3963c404eda8e57c71261bd4d61af1ec596b052bc0b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/number-two/fonts/font-awesome/fa-brands-400.woff2 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://citytox.com/wp-content/themes/number-two/css/font-awesome.min.css?ver=5.4.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: font/woff2
                                        
cache-control: public, max-age=10368000
expires: Wed, 29 Mar 2023 03:47:03 GMT
last-modified: Thu, 25 Mar 2021 13:30:56 GMT
accept-ranges: bytes
content-length: 64144
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 64144, version 1.0\012- data
Size:   64144
Md5:    6814d0e8136d34e313623eb7129d538e
Sha1:   d902f8db3e021155f177f698a252fb98d6e61768
Sha256: 4d0130d314f1669c9ea5a911d401d6250f96386a52b0c38f7b3fb43cdcd10589
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://citytox.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:21 GMT
expires: Thu, 23 Nov 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 461563
last-modified: Wed, 11 May 2022 19:24:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Size:   15740
Md5:    b9c29351c46f3e8c8631c4002457f48a
Sha1:   e57e59c5780995ff2937ab2b511a769212974a87
Sha256: f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://citytox.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:40:18 GMT
expires: Fri, 24 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 385606
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            GET /s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://citytox.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26100
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:28:35 GMT
expires: Thu, 23 Nov 2023 18:28:35 GMT
cache-control: public, max-age=31536000
age: 465509
last-modified: Fri, 24 Jun 2022 18:41:34 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26100, version 1.0\012- data
Size:   26100
Md5:    312bcfa92b0b0a09c3f404b2c662a0b6
Sha1:   5398ff9ee3c10bffc54e3a9f7e5e7506a822b38a
Sha256: 979caf94add5b00ec59d8abde43d200523745c2f4b105c2906f4d9dda4afaeec
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://citytox.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:32 GMT
expires: Thu, 23 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 481172
last-modified: Wed, 11 May 2022 19:24:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://citytox.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 461576
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5mFB12QW/W3HfytTAaFhOQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.36.24.174
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: akQnpcepEoHjsXXvv/uuOgny4OY=

                                        
                                            POST /api/cookies/?lang=da HTTP/1.1 
Host: cookiemanager.dk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytox.com/
content-type: application/x-www-form-urlencoded
Origin: https://citytox.com
Content-Length: 18
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.21.47.43
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Tue, 29 Nov 2022 03:47:04 GMT
access-control-allow-origin: *
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Oy1shw7Xxrn6CTI4ZHnZnO%2BoK%2BV5vsVVkX7jEmYHb3KSp6%2BF2So8s6Ew7R1xY%2FDllmfp3oiHGceWuBvfoWL5LzpPlC5CQoOqecn82Cuw6536mRtgOMAhx30FCiiaFX1kGZy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77185c1eec0ab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (310)
Size:   2517
Md5:    3d406ee88287c583ced1efd109b71e87
Sha1:   d11441830782f2aebf7d8c9900c134bc1a96ffcf
Sha256: efcbda5386b85fb0e9dbe8bd79cf3756aa0605a4cf90dc812cb2bc5500732336
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /trustboxes/539adbd6dec7e10e686debee/index.html?templateId=539adbd6dec7e10e686debee&businessunitId=5786124c0000ff0005924663 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.78
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 3826
last-modified: Tue, 04 Oct 2022 10:32:16 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Tue, 29 Nov 2022 03:47:05 GMT
cache-control: max-age=86400
etag: "85b348fabe689b8221b4587943ffab87"
x-cache: RefreshHit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8G4vPlcfMfeDKsw-ALgGSFXWtRlfOOjfwGWrB2_jn5JJD0qQ3qQfYw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (16335)
Size:   3826
Md5:    85b348fabe689b8221b4587943ffab87
Sha1:   2bf99fbb292b426ce38ef22ca17772504cf2b269
Sha256: 7f799c2bfead09b6a87a352c642d0fd835d568775c12cfe53260edb98fedcc75
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 02:52:22 GMT
Expires: Tue, 06 Dec 2022 02:52:21 GMT
Etag: "eb3efeea2857e919bfa4dc008a34358216c69d10"
Cache-Control: max-age=600916,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77185c2138f51c02-OSL

                                        
                                            GET /trustboxes/539adbd6dec7e10e686debee/main.js HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539adbd6dec7e10e686debee/index.html?templateId=539adbd6dec7e10e686debee&businessunitId=5786124c0000ff0005924663
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         143.204.55.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
content-length: 28334
last-modified: Tue, 04 Oct 2022 10:32:18 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 28 Nov 2022 19:05:46 GMT
cache-control: max-age=86400
etag: "42fda7b185750336a6c113d704396a97"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qiBtHTbSylCSSjEiER3o1q30KK9i1N2aetSWix-jdhuV_ypOJPV6rg==
age: 31348
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (64281), with no line terminators
Size:   28334
Md5:    42fda7b185750336a6c113d704396a97
Sha1:   299dd4fee009d81aef1d5e1af01de66dc51f6d2b
Sha256: de9c28bc7cf914e00eb6ad83cd8228d3a843b34b4233c0309973ebb21a289669
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 02:41:08 GMT
expires: Tue, 29 Nov 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 3956
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
date: Tue, 29 Nov 2022 03:47:04 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070)
Size:   4996
Md5:    2100eb2304f4468da91ec9171c7299cd
Sha1:   6d0c118e21ac045d1176f9361ac47a50e95ebf6c
Sha256: 61412a245a5821fce4abaf45b822b36888d933b11bbb1ccb1439301a81103b10
                                        
                                            GET /maps-api-v3/embed/js/51/1/init_embed.js HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 68704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 07:12:45 GMT
expires: Thu, 23 Nov 2023 07:12:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 21:36:22 GMT
age: 506059
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2669)
Size:   68704
Md5:    c088038bb01fdc7f15f21e2216b6b8b4
Sha1:   fa724c5616022f6825ac476354c492b0bf544d21
Sha256: b0ecfa74efada796d206177e1bc78c7ac75250608051c6576335c6231fc2de78
                                        
                                            GET /visitor/loadjs/2391 HTTP/1.1 
Host: app.crowdio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         63.32.60.80
HTTP/1.1 200 OK
content-type: text/javascript
                                        
X-Powered-By: Weply
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
p3p: CP="Crowdio"
Cache-Control: public, max-age=1200
ETag: 2022291103
Date: Tue, 29 Nov 2022 03:45:47 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text
Size:   903
Md5:    596ae273c52e665dcbe9d2cf00722196
Sha1:   97530a4585b46c23fd6f51e03f06224cdd44ca1b
Sha256: 2510d1c174f547c2b4a76dfdb43d1f67abdc301005c4dbccbd8c9546c218771f
                                        
                                            GET /stats/TrustboxImpression?locale=da-DK&styleHeight=200px&styleWidth=100%25&theme=light&stars=1%2C2%2C3%2C4%2C5&url=https%3A%2F%2Fcitytox.com%2Fwp-content%2Fplugins%2Fyuidghh%2Fsecure%2Flogin.php&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=5786124c0000ff0005924663&widgetId=539adbd6dec7e10e686debee HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539adbd6dec7e10e686debee/index.html?templateId=539adbd6dec7e10e686debee&businessunitId=5786124c0000ff0005924663
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         143.204.55.78
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Tue, 29 Nov 2022 03:47:03 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ipcv_G3Vx1fNMN49kgoXsovFw_Cz-7bgq1dxDM5FhSQ9pM0HZm01uw==
X-Firefox-Spdy: h2

                                        
                                            GET /stats/TrustboxView?locale=da-DK&styleHeight=200px&styleWidth=100%25&theme=light&stars=1%2C2%2C3%2C4%2C5&url=https%3A%2F%2Fcitytox.com%2Fwp-content%2Fplugins%2Fyuidghh%2Fsecure%2Flogin.php&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=5786124c0000ff0005924663&widgetId=539adbd6dec7e10e686debee HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539adbd6dec7e10e686debee/index.html?templateId=539adbd6dec7e10e686debee&businessunitId=5786124c0000ff0005924663
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         143.204.55.78
HTTP/2 204 No Content
                                        
cache-control: no-store,no-cache
date: Tue, 29 Nov 2022 03:47:03 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XbV8bNEwHZjNY8LIyl81LaErpTYqPW49_vXiaEO8pSejMr14QbmfHQ==
X-Firefox-Spdy: h2

                                        
                                            GET /trustbox-data/539adbd6dec7e10e686debee?businessUnitId=5786124c0000ff0005924663&locale=da-DK&reviewStars=1%2C2%2C3%2C4%2C5&reviewsPerPage=20 HTTP/1.1 
Host: widget.trustpilot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539adbd6dec7e10e686debee/index.html?templateId=539adbd6dec7e10e686debee&businessunitId=5786124c0000ff0005924663
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         143.204.55.78
HTTP/2 400 Bad Request
content-type: application/json; charset=utf-8
                                        
content-length: 112
cache-control: public,max-age=1800
content-encoding: gzip
date: Tue, 29 Nov 2022 03:47:04 GMT
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6f9aoMulpya0U9Erak3FGWOJ6i6UylkTpJXA_PBKyvBM7VxSe9G5rw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   112
Md5:    ae32493f46469329a4077ebfb3493d9b
Sha1:   4a469c1c8c530121acc182e663649326751461e6
Sha256: fab9351248eefdf3c2145b7dc4eb99980fdb667f21061ba97ef62640902cee77
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 03:47:05 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 01:11:28 GMT
Expires: Tue, 06 Dec 2022 01:11:27 GMT
Etag: "9839582d98b79f5b06bd958fa9ccc8fdc0db36ef"
Cache-Control: max-age=594861,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77185c24b9b61c02-OSL

                                        
                                            GET /compiled/windowapi/windowapi.min.js?t=202229103 HTTP/1.1 
Host: app.weply.chat
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         63.32.60.80
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
X-Powered-By: Weply
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=604800
Last-Modified: Mon, 24 Oct 2022 08:02:36 GMT
ETag: W/"3c86-1840903d218"
Content-Encoding: gzip
Date: Tue, 29 Nov 2022 03:45:47 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (15494), with no line terminators
Size:   4005
Md5:    3368c68c832fea15911f3b048283b84a
Sha1:   ff9d2390e83060bb889efe55fa4568cd108253c2
Sha256: 6fdd09af0ce7325a9da8c34dd11e257d39a368ce322f9b43721b706ee5d006f3
                                        
                                            GET /?wid=2391&minimized=null HTTP/1.1 
Host: cdn.weply.chat
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         99.80.139.86
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 20 Oct 2022 08:06:57 GMT
ETag: W/"1245-183f46e5e4d"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3627)
Size:   1626
Md5:    859af34c3ea423611d26d1177bf3ef45
Sha1:   420686705a7eb714d476f96a863c8de113b3137c
Sha256: 9379dc9edf718d438ad289a62b9d213d82fbb6371fa65f2d9587b53ac5369aec
                                        
                                            GET /runtime-es2015.96d2338138158dbdf1c8.js HTTP/1.1 
Host: cdn.weply.chat
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.weply.chat/?wid=2391&minimized=null
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         99.80.139.86
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 20 Oct 2022 08:06:57 GMT
ETag: W/"cb2-183f46e5e4d"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (3250), with no line terminators
Size:   1637
Md5:    5d93457bce5eb75cd6f866fa721d8463
Sha1:   26eb2baf4c1cbc64e85fa3dcc1f2b26ab577da12
Sha256: 06b56c65f4a22b76ca69b647e4f91844a1f0c9d09a87f6c7c29080bf198adb80
                                        
                                            GET /polyfills-es2015.7de3fd127cacefea33dc.js HTTP/1.1 
Host: cdn.weply.chat
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.weply.chat/?wid=2391&minimized=null
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         99.80.139.86
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 20 Oct 2022 08:06:57 GMT
ETag: W/"a2cd-183f46e5e4d"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (41677), with no line terminators
Size:   13875
Md5:    e4561c36b285ec6934e46fec95ebfc8e
Sha1:   5dcf8caacab0d30894e47717730457c0bca8e457
Sha256: a98536e4844cbaa50312f2f1a58f64d70b965ef0e4103951041eb7bdbc942886
                                        
                                            GET /main-es2015.fc08e890346b2001de5a.js HTTP/1.1 
Host: cdn.weply.chat
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.weply.chat/?wid=2391&minimized=null
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         99.80.139.86
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 20 Oct 2022 08:06:57 GMT
ETag: W/"16585-183f46e5e4d"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   21625
Md5:    b6eae58e3643260ee1fefb9b6bebe97f
Sha1:   fff4422c59746228341c427d66fe98341622b2ea
Sha256: 02ba4efd19095de596db872c69d6b9bd499ff34cd8819f8cf19b456b33443452
                                        
                                            GET /styles.e72823ab1de2b9815d63.css HTTP/1.1 
Host: cdn.weply.chat
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.weply.chat/?wid=2391&minimized=null
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         99.80.139.86
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 20 Oct 2022 08:06:57 GMT
ETag: W/"387c1-183f46e5e4d"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65305)
Size:   38250
Md5:    5873b55003d2d9665ff568350be41f31
Sha1:   4ebaf4609f23d8fb6ad7be44066390c2f493d875
Sha256: 884b1e83742ba85d0f9e609121effa9cbea0758807336272ec706a640b65a03b
                                        
                                            GET /vendor-es2015.8663283243e7b7ab7459.js HTTP/1.1 
Host: cdn.weply.chat
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.weply.chat/?wid=2391&minimized=null
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         99.80.139.86
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 20 Oct 2022 08:06:57 GMT
ETag: W/"7e150-183f46e5e4d"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   152316
Md5:    9a7683ec48af27d89c1bc4047e88ce14
Sha1:   4749a6684242451a5a20bfd094368f05961bd448
Sha256: 8e6fce61197d4ec831c7484eea6f7d74a0bb1b2de855178aa03d1d00a7117aa1
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5766
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5766
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5766
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5766
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5766
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 04:16:47 GMT
age: 84618
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4916
Md5:    83c1fedec73299637cc7dc47c48af758
Sha1:   2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
Sha256: 1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6716
x-amzn-requestid: 51e9f59e-558e-4bb4-8db5-741e0272f1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cV3cHHwqIAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63856c4d-48ecac9a4da2995b41abec49;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 02:19:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1qxn5KqRfOJpUJWSblkCo1wwwAkdJrW1JJ8unESfiuDCs-EZlwRKeg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 02:25:43 GMT
age: 4882
etag: "f0410522b6dad8ebcbc2a64ff2193bafcfdc862e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6716
Md5:    73001f7390ae3a80bbbaa9d9bacbe488
Sha1:   f0410522b6dad8ebcbc2a64ff2193bafcfdc862e
Sha256: 49c02723bab596584abe2dd3dcb11c660538516587911ee033dd0e6e8ea5889f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7549
x-amzn-requestid: bb37235a-8c7d-47fe-abb6-6cc633560165
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP-7lHmsoAMF9lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638311e3-1f2a4abc40119f3e026dc393;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:29:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ds96jURZ0epaXMg2oTUETRQCpHwlVJrl5hTqvpUAWEGVa5rbDve1FA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:42 GMT
age: 21623
etag: "600859401c885cc2cdd1f199cccc198eb41d6a04"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7549
Md5:    415b1b1d5a29fc17b4114bb3df1d1c22
Sha1:   600859401c885cc2cdd1f199cccc198eb41d6a04
Sha256: abfbf4ecf2423736a29686859f6a8f2b77204b48f3f60d208f6d491e80611e7f
                                        
                                            POST /g/collect?v=2&tid=G-HN3F4DEWL1&gtm=2oeb90&_p=818773321&gcs=G100&cid=2119395158.1669693624&ul=en-us&sr=1280x1024&_s=1&sid=1669693623&sct=1&seg=0&dl=https%3A%2F%2Fcitytox.com%2Fwp-content%2Fplugins%2Fyuidghh%2Fsecure%2Flogin.php&dt=Page%20not%20found%20-%20Citytox%20ApS&en=page_view&_fv=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://citytox.com
Connection: keep-alive
Referer: https://citytox.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.32.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://citytox.com
date: Tue, 29 Nov 2022 03:47:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4871
x-amzn-requestid: e2dfa7b8-ded7-4104-a913-1b84746a3c6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLDUUEy_oAMFgSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638118e8-0b229e0f60ff019d26800dd9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 19:35:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qh3WqWdBmMG3fzchn3OvxbEpwm2wl_CXi105CL4uJda47N9ZX3CyLA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:56:43 GMT
age: 67822
etag: "d0dff35eb78f129b5da407043037bcf9c27e55c0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4871
Md5:    a4058fd62595d15c58b3d3266de9865a
Sha1:   d0dff35eb78f129b5da407043037bcf9c27e55c0
Sha256: ab996c23d58871a2ad53f0c34688c87f0d7c0eac5d0c1d8265b86951248449fe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4417
x-amzn-requestid: 01de83c2-51d2-4329-98f6-09a0edf46942
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnGEcRIAMFaXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852960-34583b6c588a0e937fcfaa46;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wqEe45jzMOryT-E-vThc39-cLiZudKF4gn6cS3LBmeaJ2amJF5GPIA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:54 GMT
age: 21611
etag: "e2b4d2e15bb7c086333c0da438873e4c139ba931"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4417
Md5:    a2a5c8d4113d282600462749315f2c4f
Sha1:   e2b4d2e15bb7c086333c0da438873e4c139ba931
Sha256: 9b5d0e5dd11d4cbf1c78a71730cd63544170c91ab635bf3cf917827ac84874e6
                                        
                                            GET /wp-content/uploads/2021/03/cover.jpg HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: image/jpeg
                                        
cache-control: public, max-age=10368000,public
expires: Wed, 29 Mar 2023 03:47:03 GMT
last-modified: Thu, 03 Feb 2022 13:16:06 GMT
accept-ranges: bytes
content-length: 176967
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8921
Md5:    823e92f62ff7b3c2093828817d7f2866
Sha1:   c501de9eaa581a10b0b5fce40b54bb10f57f7c29
Sha256: 7d89669e23682f167b2fe1eff9edc5939112ec66b6b4e6389ef8aec78ccbdfe5
                                        
                                            GET /assets/i18n/en.json?cacheBuster=msfksk3m222l268ssx68ggez HTTP/1.1 
Host: cdn.weply.chat
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.weply.chat/?wid=2391&minimized=null
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         99.80.139.86
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                        
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 20 Oct 2022 08:06:57 GMT
ETag: W/"70c-183f46e5e49"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 29 Nov 2022 03:47:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  JSON data\012- HTML document, ASCII text
Size:   742
Md5:    e11aa0a56d683291320d4db821af7eca
Sha1:   42b4a7cdd2612070dc858406d65b4d5795ab4739
Sha256: 6ca6f458ce5238c5c3d7397451e5d9b8527df1620f728fb477e6c5afcfc8bd3e
                                        
                                            GET /visitor/widget/2391?templateId=null HTTP/1.1 
Host: app.weply.chat
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.weply.chat
Connection: keep-alive
Referer: https://cdn.weply.chat/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

search
                                         63.32.60.80
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
X-Powered-By: Weply
Access-Control-Allow-Origin: *
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
ETag: W/"10ce-3gxlBiLbY0xJAYN1AqlEQU8qoTY"
Content-Encoding: gzip
Date: Tue, 29 Nov 2022 03:45:48 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (4290), with no line terminators
Size:   1528
Md5:    1a3d8e414e28d0f89219c796b74b7e9f
Sha1:   a00d6e6ab00869bcd1b452003625c3c7677718d1
Sha256: 22583f57ce832dcfc7fc08ad0255a69f847d4af695bc75dd463d14f665a26215
                                        
                                            GET /js/cm.js HTTP/1.1 
Host: cookiemanager.dk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.47.43
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Tue, 29 Nov 2022 03:47:03 GMT
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 07:37:39 GMT
last-modified: Mon, 28 Nov 2022 07:37:26 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 72564
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YexME9LlkJDzCsWNSTsaqJ%2BdTmM0tU7JR5aSoVt5SzdUdOh2llIov1C7fvDCWL2pqjp2i91mzbJZul9UXk%2Bybvl7yvvJdExzB9B8S1onWynQjao5qOsqLxLwILzs3kQJiDTI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77185c1ceff31c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://citytox.com
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                        
vary: Accept-Encoding,Accept-Encoding
cache-control: public, max-age=0
expires: Tue, 29 Nov 2022 03:47:03 GMT
content-encoding: gzip
date: Tue, 29 Nov 2022 03:47:04 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/number-two/css/style.css?ver=ee5189a70f47b058fb0bff0bfe9096d8 HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/wp-content/plugins/yuidghh/secure/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         87.116.13.124
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
cache-control: public, max-age=31536000,public
expires: Wed, 29 Nov 2023 03:47:03 GMT
last-modified: Tue, 23 Aug 2022 11:21:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 19561
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/plugins/yuidghh/secure/login.php HTTP/1.1 
Host: citytox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         87.116.13.124
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-transform, no-cache, no-store, must-revalidate
link: <https://citytox.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding,Accept-Encoding
content-encoding: gzip
date: Tue, 29 Nov 2022 03:47:03 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /css?family=Cabin%3A200%2C300%2C400%2C500%2C600%2C700%2C800%7CMontserrat%3A200%2C300%2C400%2C500%2C600%2C700%2C800%7CMerriweather%3A200%2C300%2C400%2C500%2C600%7CRoboto%3A200%2C300%2C400%2C500%2C600&ver=5.4.1 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytox.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 03:47:03 GMT
date: Tue, 29 Nov 2022 03:47:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---