| oxy.st/slake/asset/css/bootstrap.min.css |  185.178.208.137 | 200 OK | 20 kB |
URL GET HTTP/2oxy.st/slake/asset/css/bootstrap.min.css IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with very long lines (65325) Hash450fc463b8b1a349df717056fbb3e078 895125a4522a3b10ee7ada06ee6503587cbf95c5 2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d
GET /slake/asset/css/bootstrap.min.css HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 20 Nov 2023 09:11:17 GMT
content-type: text/css
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 20483
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-235ed"
age: 700859
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/cookie.css?ver=6 | 185.178.208.137 | 200 OK | 299 B |
URL GET HTTP/2oxy.st/slake/cookie.css?ver=6 IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
Hasha53eb58f04db28b561e3cf6f2327c28d 771a6fa87951b23f05513c5b6c6bc260052e114e 67dd147575b0963981f0a47878165f9048269fd8c90f632a28eecce73b5d9ae6
GET /slake/cookie.css?ver=6 HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 22 Nov 2023 18:23:29 GMT
content-type: text/css
last-modified: Mon, 15 Feb 2021 21:38:28 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 299
ddg-cache-status: HIT,HIT
etag: "602ae9d4-224"
age: 494927
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/responsive.css?ver=5 | 185.178.208.137 | 200 OK | 12 kB |
URL GET HTTP/2oxy.st/slake/responsive.css?ver=5 IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
Hash4d18d138845cb891049afa7b54fb9173 bef0e9092ea4510a69ba4f4d78979d21e45b2781 9e0a69222639714979319abd225aee347d25c781030300b0f7f77b91e8e37d27
GET /slake/responsive.css?ver=5 HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 20 Nov 2023 21:15:39 GMT
content-type: text/css
last-modified: Sun, 21 Jun 2020 22:27:36 GMT
vary: Accept-Encoding
etag: W/"5eefded8-135c7"
access-control-allow-origin: *
content-encoding: gzip
age: 657398
content-length: 11872
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
|
|
| oxy.st/js/jquery.cookie.min.js | 185.178.208.137 | 200 OK | 1.1 kB |
URL GET HTTP/2oxy.st/js/jquery.cookie.min.js IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with very long lines (2277) Hash89b1396632234ee336bf4cbcb7cec200 a15fa06c1276f6f5a83e4653cd0a6dbecc5dc18a e61ef2ab7c9da28aa74ef73b341c0502f7ae8ee2951d28a71004e30b7f90b836
GET /js/jquery.cookie.min.js HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 02:32:43 GMT
content-type: application/javascript
last-modified: Tue, 20 Jun 2023 20:47:54 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 1139
ddg-cache-status: HIT,HIT
etag: "6492107a-908"
age: 119973
X-Firefox-Spdy: h2
|
|
| oxy.st/css/cloud.css | 185.178.208.137 | 200 OK | 9.2 kB |
IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with very long lines (14454) Hash526b65035ff31bd7147be9e785a768ac 2fc6a091da52a528eb67d73c77f3fd4ee6351cb7 8996a1606a4793b1a05580ff47567f4467c2d16bbe7cbcb049dc849e0105da86
GET /css/cloud.css HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 21 Nov 2023 00:53:00 GMT
content-type: text/css
last-modified: Sun, 21 Jun 2020 20:10:25 GMT
vary: Accept-Encoding
etag: W/"5eefbeb1-d024"
access-control-allow-origin: *
content-encoding: gzip
age: 644356
content-length: 9206
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
|
|
| oxy.st/images/sprite3.png | 185.178.208.137 | 200 OK | 2.1 kB |
URL GET HTTP/2oxy.st/images/sprite3.png IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typePNG image data, 124 x 49, 8-bit/color RGBA, non-interlaced\012- data Hashb08166a270b58c28d429bf2f9ffece6c 91dab55cbe8c802a7c56cd9d2ffaee9ccea4a49f a21a9fa89fb6dd8c8e84907a99b0374abdf641c71c55e0283b7758e8f2a12507
GET /images/sprite3.png HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 25 Aug 2023 10:29:02 GMT
content-type: image/png
content-length: 2059
last-modified: Sun, 27 Mar 2022 20:43:28 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6240cc70-80b"
age: 8212994
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/js/bootstrap.min.js | 185.178.208.137 | 200 OK | 13 kB |
URL GET HTTP/2oxy.st/slake/asset/js/bootstrap.min.js IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /slake/asset/js/bootstrap.min.js HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 22 Nov 2023 09:03:13 GMT
content-type: application/javascript
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 13046
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-bf30"
age: 528543
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/style.css?ver=6 | 185.178.208.137 | 200 OK | 24 kB |
URL GET HTTP/2oxy.st/slake/style.css?ver=6 IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
Hash43bbb018dbfb3c985d19043d1c7006fb 18a1b01d19fea3901a9bb321427ae34c70d919a4 8b40af05f3b3d6374c0964e7561ea6a74f80230ffad28b281d8d0772696eb344
GET /slake/style.css?ver=6 HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 26 Nov 2023 14:23:53 GMT
content-type: text/css
last-modified: Fri, 18 Dec 2020 20:37:06 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 24360
ddg-cache-status: HIT,HIT
etag: "5fdd12f2-2a549"
age: 163703
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/js/jquery.min.js | 185.178.208.137 | 200 OK | 30 kB |
URL GET HTTP/2oxy.st/slake/asset/js/jquery.min.js IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with very long lines (65451) Hash4b57cf46dc8cb95c4cca54afc85e9540 05e1ad0cc600a057886deaf237ab6e3d4fcdb5ac a28ccf8a7b50522bdeea0cd83cdeca221c18fc1f9df3ee6b3d3c48d599206855
GET /slake/asset/js/jquery.min.js HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 19 Nov 2023 09:05:59 GMT
content-type: application/javascript
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 30285
ddg-cache-status: HIT,HIT
etag: W/"5eefbeb2-1538e"
age: 787577
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/css/jquery.mCustomScrollbar.min.css | 185.178.208.137 | 200 OK | 4.0 kB |
URL GET HTTP/2oxy.st/slake/asset/css/jquery.mCustomScrollbar.min.css IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with very long lines (42894), with no line terminators Hashc3cf3362ac1b65704603fa5fc3b9cfff 73c2ce95ca7559b61d73ced1e892b59cb523670f ad58ed0cb9aa4fed41a85aa07bc92963b6a48a0a90c9ce466563b1b9d69981b9
GET /slake/asset/css/jquery.mCustomScrollbar.min.css HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 26 Nov 2023 10:20:34 GMT
content-type: text/css
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 3950
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-a78e"
age: 178302
X-Firefox-Spdy: h2
|
|
| oxy.st/images/ltd.svg | 185.178.208.137 | 200 OK | 20 kB |
IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (50102) Hash8a300a9fb258c5e82a2cc9b751cc1b19 07f8db6cc798916aeb9de0c6fcc5ef08a96dc9d5 f89d0a653ae729f51c9d245a90507d3e45543d9cc74e08908c4fb4efa3524327
GET /images/ltd.svg HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 15:12:42 GMT
content-type: image/svg+xml
last-modified: Fri, 20 Nov 2020 00:55:29 GMT
vary: Accept-Encoding
etag: W/"5fb71401-c420"
access-control-allow-origin: *
content-encoding: gzip
age: 74374
ddg-cache-status: HIT,MISS
content-length: 19700
X-Firefox-Spdy: h2
|
|
| oxy.st/img/oxy-logo.svg | 185.178.208.137 | 200 OK | 3.2 kB |
IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1126) Hashcc54f0829767b49845f9efe8ec4c7347 82a844cf7b6d217983aad02e036f4e983020e1e6 6a62e58dd62c1f48f9e28869a685dad62e2fac04b750ffe8c38b870aa2bcc4b6
GET /img/oxy-logo.svg HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 15:12:41 GMT
content-type: image/svg+xml
last-modified: Wed, 17 Feb 2021 01:25:02 GMT
vary: Accept-Encoding
etag: W/"602c706e-2019"
access-control-allow-origin: *
content-encoding: gzip
age: 74375
ddg-cache-status: HIT,MISS
content-length: 3204
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/slice_white.png | 185.178.208.137 | 200 OK | 6.1 kB |
URL GET HTTP/2oxy.st/slake/asset/slice_white.png IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typePNG image data, 201 x 45, 8-bit/color RGBA, non-interlaced\012- data Hash946ed1d2bd247854fa58e938de28ee95 883cda7ee0087e29a32f07b6c8ead3e8df5db738 bfe6c8b9cf34578f573091bb118f86a10b918b7d530b25107648f12158759e85
GET /slake/asset/slice_white.png HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 19 Nov 2023 03:46:35 GMT
content-type: image/png
content-length: 6078
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
access-control-allow-origin: *
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-17be"
age: 806741
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/js/jquery.mCustomScrollbar.concat.min.js | 185.178.208.137 | 200 OK | 13 kB |
URL GET HTTP/2oxy.st/slake/asset/js/jquery.mCustomScrollbar.concat.min.js IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with very long lines (32001), with CRLF line terminators Hash9df3cfdcc9b72f1aa24e2e114455ae7a e6ac207cdb6c4591f2d39f2a645f6dbf42534f89 5ab5f19f9bd4a4ddcf14235fc1684eefe7cfbfbc33f0a1fce661b13de43092be
GET /slake/asset/js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 22 Nov 2023 09:03:13 GMT
content-type: application/javascript
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 12929
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-b1ab"
age: 528543
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/css/elements.css?1 | 185.178.208.137 | 200 OK | 24 kB |
URL GET HTTP/2oxy.st/slake/asset/css/elements.css?1 IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with very long lines (460), with CRLF line terminators Hashe6a75bce19e1af2b4b6e3a01b6f04cf2 328fcde6fa575fb9a0ea627060c33ee5b3b4018c 34470bbe1df98fed3ca5c1e83781ef6e427b410bec75aeff1dd3c00a43781cad
GET /slake/asset/css/elements.css?1 HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 21 Nov 2023 00:53:00 GMT
content-type: text/css
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
etag: W/"5eefbeb2-2fbea"
access-control-allow-origin: *
content-encoding: gzip
age: 644356
content-length: 24208
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/js/main.js | 185.178.208.137 | 200 OK | 1.8 kB |
URL GET HTTP/2oxy.st/slake/asset/js/main.js IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with very long lines (368) Hash86fe5c70d7107cc8ab30e192072ac15d 15cd81d73ddec861349d2f1b2d4cf10eaefa9373 b1de65cb0d3a28aeed81012371764b92d0ac30077edb2d768dfdfd8640cfc7c1
GET /slake/asset/js/main.js HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 21 Nov 2023 13:13:52 GMT
content-type: application/javascript
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 1840
ddg-cache-status: HIT,HIT
etag: W/"5eefbeb2-2210"
age: 599904
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/js/ajax-subscribe.js | 185.178.208.137 | 200 OK | 635 B |
URL GET HTTP/2oxy.st/slake/asset/js/ajax-subscribe.js IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with CRLF line terminators Hashb53436c6ec7e681a3edcec13f42ec715 0aa1b02b89e734193d43d6385ebc5939bb666fd0 3b28dd2b4eda9085ee35fb2aae1d706c6d003c2521e4ad62bb2ef2e6969bca83
GET /slake/asset/js/ajax-subscribe.js HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 23 Nov 2023 07:53:43 GMT
content-type: application/javascript
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 635
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-595"
age: 446313
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/js/ajax-mail.js | 185.178.208.137 | 200 OK | 544 B |
URL GET HTTP/2oxy.st/slake/asset/js/ajax-mail.js IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeASCII text, with CRLF line terminators Hash06acf64af6cd1d69540460ddb018c78c 9db22d7b6b6a223abca82e69fc4fba0c987587c2 259ce4dee332f67cc9d86367330efa87617f8c78428774d26dd0528f4942f39c
GET /slake/asset/js/ajax-mail.js HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 24 Nov 2023 12:22:06 GMT
content-type: application/javascript
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 544
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-683"
age: 343810
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/js/plugins.js | 185.178.208.137 | 200 OK | 91 kB |
URL GET HTTP/2oxy.st/slake/asset/js/plugins.js IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeUnicode text, UTF-8 text, with very long lines (8320), with CRLF line terminators Hash132e96f62255f4daf2aff234f50912c2 62bbe81f1a3c0babfc39e2c3abf6d5687f3493f6 07174a0088fe0b461713a172e371e448f3d8eef64886d3e2f04a2e178073f6ad
GET /slake/asset/js/plugins.js HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 22 Nov 2023 09:03:13 GMT
content-type: application/javascript
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
content-length: 90933
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-52d51"
age: 528543
X-Firefox-Spdy: h2
|
|
| smatr.net/sm/getcode?apiKey=b68c106c3df6f586f8cb1f48c5036112 |  88.208.46.222 | | 13 kB |
URL GET smatr.net/sm/getcode?apiKey=b68c106c3df6f586f8cb1f48c5036112 IP88.208.46.222:0 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectsmatr.net FingerprintF1:CE:97:27:B3:7A:39:31:16:04:8C:2F:DE:E7:9A:90:12:7E:6C:7D ValidityFri, 03 Nov 2023 14:10:14 GMT - Thu, 01 Feb 2024 14:10:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (17418) Hasha3e938c08a3771b6957dbaba9aad5f16 98ab69f3be4d29b80009e9c26c5419246b2c83be d8ada8545df988ee92657230188f08373d437d4030f6bf5cd53176321a42924d
GET /sm/getcode?apiKey=b68c106c3df6f586f8cb1f48c5036112 HTTP/1.1
Host: smatr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 11:52:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Content-Encoding: gzip
|
|
| cdn.adlook.me/js/rlf.js | 193.17.93.93 | 200 OK | 75 kB |
IP193.17.93.93:443 ASN#210756 G-Core Rus LLC
CertificateIssuerGlobalSign nv-sa Subject*.adlook.me FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32 ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File typeUnicode text, UTF-8 text, with very long lines (65502), with no line terminators Hash5a000434ac0ea9c2acc74dd0d612b539 88977105e0c0adba32699c87fb452f25e4a787cb 778945f569ce2a9433a12396546a6597aad338ac2b4b01033c792f228a07da6b
GET /js/rlf.js HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 11:52:16 GMT
content-type: application/javascript,application/javascript;charset=utf-8
content-length: 75022
last-modified: Thu, 17 Aug 2023 10:15:20 GMT
etag: "5f3e53baf3d0d91:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-11-28T11:42:22+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/img/bg/flake-slider-header.jpg | 185.178.208.137 | 200 OK | 32 kB |
URL GET HTTP/2oxy.st/slake/asset/img/bg/flake-slider-header.jpg IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x824, components 3\012- data Hash8e2a0e56ae25b282b437f9d5bd300d96 5d4ba26731ee84ba9bbc5487312162b826ede550 b48a7837a73459a7d6f545cb45a810533d9bf006a54077b2ca3bd62dd6f6315d
GET /slake/asset/img/bg/flake-slider-header.jpg HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3; __b22_=-637114638
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 25 Aug 2023 10:28:51 GMT
content-type: image/jpeg
content-length: 31870
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
accept-ranges: bytes
etag: "5eefbeb2-7c7e"
age: 8213005
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/fonts/themify--fvbane.woff | 185.178.208.137 | 200 OK | 56 kB |
URL GET HTTP/2oxy.st/slake/asset/fonts/themify--fvbane.woff IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typeWeb Open Font Format, CFF, length 56108, version 1.0\012- data Hasha1ecc3b826d01251edddf29c3e4e1e97 9394f35bd2addd24666b79bfc36d4f9d247cb01d 0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7
GET /slake/asset/fonts/themify--fvbane.woff HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/slake/asset/css/elements.css?1
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3; __b22_=-637114638
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 12:19:18 GMT
content-type: font/woff
content-length: 56108
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
access-control-allow-origin: *
accept-ranges: bytes
etag: "5eefbeb2-db2c"
age: 84778
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
|
|
| oxy.st/slake/asset/img/bg/footer-bg.png | 185.178.208.137 | 200 OK | 75 kB |
URL GET HTTP/2oxy.st/slake/asset/img/bg/footer-bg.png IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typePNG image data, 1920 x 890, 8-bit/color RGB, non-interlaced\012- data Hashce2f90b81ee3a43f46c29223ad1d981b b82b68c892bd7c8b0bf06a883f1bdcd8ca0121e5 7b5c7bc066eb345c6c48189f960ad13fac80add5b5769e2d7a1f59d82a382505
GET /slake/asset/img/bg/footer-bg.png HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/slake/style.css?ver=6
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3; __b22_=-637114638
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 24 Nov 2023 19:22:48 GMT
content-type: image/png
content-length: 74560
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
access-control-allow-origin: *
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-12340"
age: 318568
X-Firefox-Spdy: h2
|
|
| cdn.adlook.me/u/cds.html | 193.17.93.93 | 200 OK | 1.4 kB |
IP193.17.93.93:443 ASN#210756 G-Core Rus LLC
CertificateIssuerGlobalSign nv-sa Subject*.adlook.me FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32 ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File typeHTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators Hash092b935eec2ba1199c03c1c856472e77 90d533fb895dda57fd0645cf484a4ecb7a64c344 8719a7a7e474f30d7a1d5dbf2ab97bbd73437c28ef567b410361540ad38c985e
GET /u/cds.html HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 11:52:16 GMT
content-type: text/html
content-length: 1439
last-modified: Thu, 06 Aug 2020 17:06:57 GMT
etag: "207a2dfe136cd61:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-11-28T11:50:38+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 |  216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0\012- data Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:56 GMT
expires: Fri, 22 Nov 2024 23:21:56 GMT
cache-control: public, max-age=31536000
age: 390620
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.adlook.me/css/rlf.css?1.4 | 193.17.93.93 | 200 OK | 2.3 kB |
URL GET HTTP/2cdn.adlook.me/css/rlf.css?1.4 IP193.17.93.93:443 ASN#210756 G-Core Rus LLC
CertificateIssuerGlobalSign nv-sa Subject*.adlook.me FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32 ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File typeASCII text, with very long lines (2276), with no line terminators Hash947d6daafcd2de6de190e75d46d50ba7 0311b703091d2c9271bcf2e1f786dbe4b0876587 99956dd0176eb7a7bd68cf621287c4b200ec827b0254c38f276f58070012821d
GET /css/rlf.css?1.4 HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 11:52:16 GMT
content-type: text/css
content-length: 2276
last-modified: Thu, 30 Mar 2023 10:46:31 GMT
etag: "a2d6aee3f462d91:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-11-28T11:50:57+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| yastatic.net/islands/_/KRBKbh7904nwfw8-FzDelXRpZ9o.woff2 | 178.154.131.215 | 200 OK | 43 kB |
URL GET HTTP/2yastatic.net/islands/_/KRBKbh7904nwfw8-FzDelXRpZ9o.woff2 IP178.154.131.215:443
CertificateIssuerGlobalSign nv-sa Subject*.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 43112, version 1.0\012- data Hashf8883ab9c4a452a0bfe3c5cf9619db86 29104a6e1efdd389f07f0f3e1730de95746967da 427f528f5d190e0e3275d8a1fc40bad36fede3da064b33f29dc8fe6e614ff2f7
GET /islands/_/KRBKbh7904nwfw8-FzDelXRpZ9o.woff2 HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 28 Nov 2023 11:52:16 GMT
content-type: application/font-woff2
content-length: 43112
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "f8883ab9c4a452a0bfe3c5cf9619db86"
expires: Wed, 27 Nov 2024 17:40:49 GMT
last-modified: Tue, 22 Jan 2019 17:04:38 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: 3016702348ac652c
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0\012- data Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:56 GMT
expires: Fri, 22 Nov 2024 23:21:56 GMT
cache-control: public, max-age=31536000
age: 390620
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ads.themoneytizer.com/s/gen.js?type=2 |  185.76.9.23 | | 47 kB |
URL GET ads.themoneytizer.com/s/gen.js?type=2 IP185.76.9.23:0 ASN#60068 Datacamp Limited
CertificateIssuerLet's Encrypt Subject1266287590.rsc.cdn77.org Fingerprint97:E2:57:7C:68:4C:8B:2B:BA:BD:FF:07:AE:7C:47:6C:90:18:9D:40 ValidityWed, 27 Sep 2023 16:58:38 GMT - Tue, 26 Dec 2023 16:58:37 GMT
File typegzip compressed data, from Unix\012- data Hash45efcb7f04cc43e15e7230b0f2125cb7 55ecea1cb3f66b59f3c64e0dc0eb98dcc05fd384 d8f97dcd42e8bd1acd71f30b756c3d0bc7fdd32f3e4abf8549b48442d7bcbc6b
GET /s/gen.js?type=2 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 11:52:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=604800
x-77-nzt: EwwBuUwJFAH3O18AAAwBuUwKAQH3FwAAAAwBJRPCKAH3AwAAAA
x-77-nzt-ray: af58563068be212270d4656552613d1a
x-accel-expires: @1701752731
x-accel-date: 1701147957
x-77-cache: HIT
x-77-age: 24405
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 23, 24379
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1701172340589 |  51.89.9.253 | 204 No Content | 0 B |
URL GET HTTP/2onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1701172340589 IP51.89.9.253:443
CertificateIssuerDigiCert Inc Subject*.onetag-sys.com Fingerprint1B:3E:A7:6D:D6:26:C6:9E:AB:38:DE:9E:22:71:64:8C:9F:91:0B:7B ValidityWed, 28 Dec 2022 00:00:00 GMT - Sun, 28 Jan 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=2a897e3f18e6769&cb=1701172340589 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0\012- data Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:56 GMT
expires: Fri, 22 Nov 2024 23:21:56 GMT
cache-control: public, max-age=31536000
age: 390621
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0\012- data Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:56 GMT
expires: Fri, 22 Nov 2024 23:21:56 GMT
cache-control: public, max-age=31536000
age: 390621
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i | 142.250.74.106 | 200 OK | 22 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typegzip compressed data, max compression\012- data Hashc2fb2f23d97c995b9a4b3f81020daefd 5831d9636e30269a08d8572fc0420f9d1982a978 d58061ba5d793bf131dcf9413bc307aed76e386acde16cfe6d994da48c130793
GET /css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 28 Nov 2023 11:52:16 GMT
date: Tue, 28 Nov 2023 11:52:16 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tag.leadplace.fr/libJsLP.js |  145.239.192.166 | 200 OK | 5.5 kB |
URL GET HTTP/1.1tag.leadplace.fr/libJsLP.js IP145.239.192.166:443
CertificateIssuerGandi Subject*.leadplace.fr Fingerprint5C:78:58:74:BB:61:C7:82:08:64:6F:D1:59:33:27:DA:B1:93:E4:92 ValidityWed, 30 Aug 2023 00:00:00 GMT - Wed, 11 Sep 2024 23:59:59 GMT
Hasha0c24f993bc0901cfe62d1e801cb2b45 7eb2bdce06161ae486bc8e7ecd0b5c9c4f7b2984 80fccb00db57a177d26368cda09f8a540cf1aa641b8b6837047e86d3bd8d6333
GET /libJsLP.js HTTP/1.1
Host: tag.leadplace.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx/1.20.1
date: Tue, 28 Nov 2023 11:52:17 GMT
content-type: application/javascript
content-length: 5547
last-modified: Thu, 14 Oct 2021 07:27:53 GMT
etag: "6167dbf9-15ab"
accept-ranges: bytes
x-iplb-request-id: 5B5A2A9A:DFBD_91EFC0A6:01BB_6565D470_17EA8EB3:1CE14
x-iplb-instance: 30196
|
|
| smelel.icu/sm/stat?uuid=0eadb439-f027-42c2-af1e-709a47b4d32b&apiKey=b68c106c3df6f586f8cb1f48c5036112&action=80&rfr=https%3A%2F%2Foxy.st%2Fd%2FVrth | 88.208.46.222 | 200 OK | 25 B |
URL GET HTTP/1.1smelel.icu/sm/stat?uuid=0eadb439-f027-42c2-af1e-709a47b4d32b&apiKey=b68c106c3df6f586f8cb1f48c5036112&action=80&rfr=https%3A%2F%2Foxy.st%2Fd%2FVrth IP88.208.46.222:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectsmelel.icu Fingerprint5D:DE:41:E5:73:04:61:40:13:9F:26:8A:22:D0:F4:3D:97:09:04:FA ValidityWed, 04 Oct 2023 09:02:54 GMT - Tue, 02 Jan 2024 09:02:53 GMT
File typegzip compressed data, from Unix\012- data Hash363f411ba212d4d1ccf7856f856145e9 08331057577f273187dd15e7c6f57937835e0aff c50b40612adfdbf2e228758746fc7927cf440cb9bb5a8280c00d7946632a1943
GET /sm/stat?uuid=0eadb439-f027-42c2-af1e-709a47b4d32b&apiKey=b68c106c3df6f586f8cb1f48c5036112&action=80&rfr=https%3A%2F%2Foxy.st%2Fd%2FVrth HTTP/1.1
Host: smelel.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 28 Nov 2023 11:52:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Content-Encoding: gzip
|
|
| ads.themoneytizer.com/s/requestform.js?siteId=85433&formatId=2 | 185.76.9.23 | | 19 kB |
URL GET ads.themoneytizer.com/s/requestform.js?siteId=85433&formatId=2 IP185.76.9.23:0 ASN#60068 Datacamp Limited
CertificateIssuerLet's Encrypt Subject1266287590.rsc.cdn77.org Fingerprint97:E2:57:7C:68:4C:8B:2B:BA:BD:FF:07:AE:7C:47:6C:90:18:9D:40 ValidityWed, 27 Sep 2023 16:58:38 GMT - Tue, 26 Dec 2023 16:58:37 GMT
File typeASCII text, with very long lines (39174) Hash88dafa891f85e3985741a6dc5c202c21 d9236b21d710c128d5a71e165305884c2502c2fd 267875715c8be40fe061e992aa7bb86a3a21429ce56927e0f16d09f0a93b0244
GET /s/requestform.js?siteId=85433&formatId=2 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 11:52:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=604800
x-77-nzt: EwwBuUwJFAH3NF4AAAwBuUwKAQH3AAEAAAwBJRPCKAH3EwAAAA
x-77-nzt-ray: af58563068be212270d465650f63311a
x-accel-expires: @1701752744
x-accel-date: 1701148220
x-77-cache: HIT
x-77-age: 24391
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 256, 24116
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| ads.adlook.me/vast?id=5344&w=1280&h=720&mult=1&rw=0&ref=&loc=https%3A%2F%2Foxy.st%2Fd%2FVrth&top=&_ts=1701172341020 | 5.200.44.122 | 200 OK | 2 B |
URL GET HTTP/2ads.adlook.me/vast?id=5344&w=1280&h=720&mult=1&rw=0&ref=&loc=https%3A%2F%2Foxy.st%2Fd%2FVrth&top=&_ts=1701172341020 IP5.200.44.122:443 ASN#48096 Enterprise Cloud Ltd.
CertificateIssuerGlobalSign nv-sa Subject*.adlook.me FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32 ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File typeJSON data\012- , ASCII text, with no line terminators Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=5344&w=1280&h=720&mult=1&rw=0&ref=&loc=https%3A%2F%2Foxy.st%2Fd%2FVrth&top=&_ts=1701172341020 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=3ab84d7d430349c68d5d204b423b57fc; expires=Tue, 26 Nov 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://oxy.st
access-control-allow-credentials: true
date: Tue, 28 Nov 2023 11:52:17 GMT
content-length: 2
X-Firefox-Spdy: h2
|
|
| p.cpx.to/p/12771/px.js |  34.248.215.174 | 200 OK | 4.4 kB |
IP34.248.215.174:443
CertificateIssuerSectigo Limited Subjectp.cpx.to FingerprintB7:D4:04:01:07:C8:6E:F6:F4:A7:B7:F7:0A:5D:BE:2E:A4:E2:2D:D7 ValidityThu, 12 Jan 2023 00:00:00 GMT - Sat, 13 Jan 2024 23:59:59 GMT
File typeASCII text, with very long lines (4396), with no line terminators Hash823a73eb04b44cfc6874ace640dd7940 3ae178171a2a6f6acb83a682f3612fd74b2f635e 773be361a7f4533d4b377e7e9626223a2555a5ec1865871a7aa3536ab5b1f494
GET /p/12771/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 11:52:17 GMT
content-type: application/javascript; charset=UTF-8
content-length: 4396
cache-control: public, max-age=2419200
X-Firefox-Spdy: h2
|
|
| spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258 | 172.67.13.182 | 200 OK | 181 B |
URL GET HTTP/2spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258 IP172.67.13.182:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint3B:56:4D:4F:0A:90:47:5B:07:F8:ED:CD:91:23:F7:D5:B3:86:F0:26 ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash79d18043883cfb7bd676cb7402eda142 8f5233070dc8a406ec471fd9eac9ea4d2476f3d1 bd62b4ff050bd75100bccd7bdc11d7fa05fbcf83d7e8ac5bd8c7e63709bdb96b
GET /?env=mWeb&eventType=pageview&zdid=1258 HTTP/1.1
Host: spl.zeotap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 11:52:17 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-origin: https://oxy.st
set-cookie: zc=25ec34fc-5924-46d8-6dfe-bc6433c025fd; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure
zsc=%C7%A8%94bL7%09%81%DF%E3%EE%D9%C0%C4%DC%B1%26%E7%F9U%05%F9%82%8B0%D5%A6%B8%3D%AB%85%E1%7F%E9%92%29%5C%10%EF%0C%A4%B3%2A%C5%BF%C7%94%DC%BCh%18%94%93%C9%C8%FD%E1%25A%0C%91M3Z%B2%99%03%F43P%BE%97%84%E2%F7%82%E5%0F%C5%95%AFrb; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure
vary: Origin
via: 1.1 google
cf-cache-status: DYNAMIC
strict-transport-security: max-age=2592000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d26764285e7127-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| d2zur9cc2gf1tx.cloudfront.net/a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js | 143.204.42.129 | 200 OK | 26 kB |
URL GET HTTP/1.1d2zur9cc2gf1tx.cloudfront.net/a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js IP143.204.42.129:443
CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeASCII text, with very long lines (16085) Hash8703fc9eead243fe2f47380e962d7fa2 3d9f707259112fa9ccdd1e676f00eadcff71906c b47b4ca26c57e3dceebd7abd067df9622599bed6bfb11b480f92d09a945cd213
GET /a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js HTTP/1.1
Host: d2zur9cc2gf1tx.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 25704
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Mon, 18 Feb 2019 16:54:28 GMT
Server: Apache
Date: Tue, 28 Nov 2023 02:16:09 GMT
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fcwScaeyAAzcdR8979FGPkOxAjYOJZX2njtsQ3zZ-Y-KYyTTq7BLlA==
Age: 34575
|
|
| oxy.st/slake/asset/img/favicon/apple-touch-icon.png | 185.178.208.137 | 200 OK | 2.0 kB |
URL GET HTTP/2oxy.st/slake/asset/img/favicon/apple-touch-icon.png IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hash05807c4aceabfb49ab9d66e54618ff53 fddb5a3eb50d1a255989f72f91911dc21e2d5d9b 725d652f8c9ad3d148a0528878b51e2e250d228ab6eaf39111d0664abad359b3
GET /slake/asset/img/favicon/apple-touch-icon.png HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3; __b22_=-637114638
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 25 Aug 2023 10:31:31 GMT
content-type: image/png
content-length: 1994
last-modified: Sun, 21 Jun 2020 20:10:26 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5eefbeb2-7ca"
age: 8212846
X-Firefox-Spdy: h2
|
|
| oxy.st/images/icon.png | 185.178.208.137 | 200 OK | 7.5 kB |
IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hashb63d70eb8c5d379fa68fe0f63e8c4255 232de1f52e52611ae67aab8ebaa143946154a233 100c7773d318b841267dc4ac654366ac19ba903e6cd6551777268f6eb4ed86cd
GET /images/icon.png HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/d/Vrth
Cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3; __b22_=-637114638
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 19 Nov 2023 13:22:23 GMT
content-type: image/png
content-length: 7531
last-modified: Sun, 21 Jun 2020 20:10:25 GMT
access-control-allow-origin: *
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5eefbeb1-1d6b"
age: 772194
X-Firefox-Spdy: h2
|
|
| s.cpx.to/fire.js?pid=12771&url=https%3A%2F%2Foxy.st%2Fd%2FVrth&hn_ver=72&fid=64ec513c-4801-45ad-830c-92d95f7ee1f2 | 52.51.166.251 | 200 OK | 0 B |
URL POST HTTP/2s.cpx.to/fire.js?pid=12771&url=https%3A%2F%2Foxy.st%2Fd%2FVrth&hn_ver=72&fid=64ec513c-4801-45ad-830c-92d95f7ee1f2 IP52.51.166.251:443
CertificateIssuerSectigo Limited Subjects.cpx.to Fingerprint79:72:B9:F5:96:66:CE:FC:39:B7:2E:2E:73:AF:7C:F7:3C:07:3D:80 ValidityThu, 12 Jan 2023 00:00:00 GMT - Wed, 17 Jan 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fire.js?pid=12771&url=https%3A%2F%2Foxy.st%2Fd%2FVrth&hn_ver=72&fid=64ec513c-4801-45ad-830c-92d95f7ee1f2 HTTP/1.1
Host: s.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://oxy.st/
Content-Type: text/plain;charset=UTF-8
Content-Length: 217
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 11:52:17 GMT
content-length: 0
expires: Tue, 28 Nov 2023 11:52:17 GMT
vary: Origin
access-control-allow-origin: https://oxy.st
access-control-allow-credentials: true
p3p: CP="NOI DEV ADM"
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.0.0/jquery.min.js | 142.250.74.74 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.0.0/jquery.min.js IP142.250.74.74:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeASCII text, with very long lines (32034) Hashd0212568ce69457081dacf84e327fa5c d6702a1af0378b2342f6a0692e77c169f580aed7 266bcea0bb58b26aa5b16c5aee60d22ccc1ae9d67daeb21db6bad56119c3447d
GET /ajax/libs/jquery/3.0.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:48:23 GMT
expires: Fri, 22 Nov 2024 04:48:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 457434
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| adtrack.adleadevent.com/notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7 | 34.251.61.210 | 200 OK | 20 B |
URL GET HTTP/1.1adtrack.adleadevent.com/notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7 IP34.251.61.210:443
CertificateIssuerAmazon Subject*.adleadevent.com Fingerprint13:4D:C9:57:31:B9:B4:82:98:03:BC:83:15:34:26:58:49:07:07:1E ValidityTue, 27 Jun 2023 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typegzip compressed data, from Unix\012- data Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7 HTTP/1.1
Host: adtrack.adleadevent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://oxy.st
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, no-cache="set-cookie"
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Tue, 28 Nov 2023 11:52:18 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Last-Modified: Tue, 28 Nov 2023 11:52:18 GMT
Pragma: no-cache
Server: Apache
Set-Cookie: AWSELB=9FC54D150466C174912E5199B1F8E822A79961F459747D218DA8067809F8238A086EE8BF67D63A2A90D1DB19587375008B81DF393E46C0AEB40A8EC769662133B964A72527;PATH=/
AWSELBCORS=9FC54D150466C174912E5199B1F8E822A79961F459747D218DA8067809F8238A086EE8BF67D63A2A90D1DB19587375008B81DF393E46C0AEB40A8EC769662133B964A72527;PATH=/;SECURE;SAMESITE=None
Vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive
|
|
| spl.zeotap.com/mapper.js?env=mWeb&eventType=pageview&zdid=1258 | 172.67.13.182 | 200 OK | 62 kB |
URL GET HTTP/2spl.zeotap.com/mapper.js?env=mWeb&eventType=pageview&zdid=1258 IP172.67.13.182:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint3B:56:4D:4F:0A:90:47:5B:07:F8:ED:CD:91:23:F7:D5:B3:86:F0:26 ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mapper.js?env=mWeb&eventType=pageview&zdid=1258 HTTP/1.1
Host: spl.zeotap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 11:52:16 GMT
content-type: application/javascript
cache-control: public, max-age=21600
cf-bgj: minify
cf-polished: origSize=62059
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-origin: https://www.mitomorrow.it
expires: Tue, 28 Nov 2023 14:31:58 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 12018
strict-transport-security: max-age=2592000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d26761fe367127-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| yastatic.net/islands/_/TR2STky64Ra69XlYzqKN7cnjYfQ.woff2 | 178.154.131.215 | 200 OK | 45 kB |
URL GET HTTP/2yastatic.net/islands/_/TR2STky64Ra69XlYzqKN7cnjYfQ.woff2 IP178.154.131.215:443
CertificateIssuerGlobalSign nv-sa Subject*.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 45100, version 1.0\012- data Hashe783c489351712fa80a7cb4206cffd02 4d1d924e4cbae116baf57958cea28dedc9e361f4 281e998fb084bbc3243914bfd01a00ef5cdbc847179c43106808821a6e0ae1a5
GET /islands/_/TR2STky64Ra69XlYzqKN7cnjYfQ.woff2 HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.9
date: Tue, 28 Nov 2023 11:52:16 GMT
content-type: application/font-woff2
content-length: 45100
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "e783c489351712fa80a7cb4206cffd02"
expires: Wed, 27 Nov 2024 17:41:28 GMT
last-modified: Tue, 22 Jan 2019 17:07:25 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: c00681b134391d60
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2 | 216.58.207.227 | 200 OK | 21 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 21288, version 1.0\012- data Hashe648b4f809fa852297cf344248779163 ea6b174e3bca31d6d29b84ffbcbcc3749e47892e 637f545351fbed7e7207fdf36e1381b0860f12fffde46a6fa43bdafcc7a05758
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:59 GMT
expires: Fri, 22 Nov 2024 23:21:59 GMT
cache-control: public, max-age=31536000
age: 390618
last-modified: Wed, 13 Sep 2023 22:43:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tag.leadplace.fr/wckr.php?ref=https%3A%2F%2Foxy.st%2Fd%2FVrth&id=MTIZ | 145.239.192.166 | 200 OK | 0 B |
URL GET HTTP/1.1tag.leadplace.fr/wckr.php?ref=https%3A%2F%2Foxy.st%2Fd%2FVrth&id=MTIZ IP145.239.192.166:443
CertificateIssuerGandi Subject*.leadplace.fr Fingerprint5C:78:58:74:BB:61:C7:82:08:64:6F:D1:59:33:27:DA:B1:93:E4:92 ValidityWed, 30 Aug 2023 00:00:00 GMT - Wed, 11 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wckr.php?ref=https%3A%2F%2Foxy.st%2Fd%2FVrth&id=MTIZ HTTP/1.1
Host: tag.leadplace.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx/1.20.1
date: Tue, 28 Nov 2023 11:52:17 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
x-iplb-request-id: 5B5A2A9A:DFBD_91EFC0A6:01BB_6565D471_17EA8EC4:1CE14
x-iplb-instance: 30196
|
|
| c.tmyzer.com/c/?s=85433&f=2&fi=99 | 54.38.64.100 | 200 OK | 0 B |
URL GET HTTP/1.1c.tmyzer.com/c/?s=85433&f=2&fi=99 IP54.38.64.100:443
CertificateIssuerLet's Encrypt Subjectc.tmyzer.com FingerprintFA:DD:52:48:68:A3:17:BD:6A:C1:86:8C:17:14:B7:D7:F9:96:13:EF ValidityMon, 20 Nov 2023 23:00:57 GMT - Sun, 18 Feb 2024 23:00:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?s=85433&f=2&fi=99 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://oxy.st
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: nginx
date: Tue, 28 Nov 2023 11:52:17 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
access-control-allow-origin: *
geo: rbx
x-iplb-request-id: 5B5A2A9A:2F0A_36264064:01BB_6565D470_680704:20A1D
x-iplb-instance: 24858
|
|
| ads.themoneytizer.com/moneybid8_24/build/dist/prebid.js | 185.76.9.23 | 200 OK | 612 kB |
URL GET HTTP/2ads.themoneytizer.com/moneybid8_24/build/dist/prebid.js IP185.76.9.23:443 ASN#60068 Datacamp Limited
CertificateIssuerLet's Encrypt Subject1266287590.rsc.cdn77.org Fingerprint97:E2:57:7C:68:4C:8B:2B:BA:BD:FF:07:AE:7C:47:6C:90:18:9D:40 ValidityWed, 27 Sep 2023 16:58:38 GMT - Tue, 26 Dec 2023 16:58:37 GMT
File typeASCII text, with very long lines (64234) Size612 kB (612395 bytes) Hash171e2c3a7658bca65dfde47ce1342a1b ba46784e7eea79137ba95c1abd31f341be6883f3 05a6ad78cd19749e6a8624e994157e872cef56dc1b8c5911f655070ecd5f966b
GET /moneybid8_24/build/dist/prebid.js HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oxy.st/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 11:52:27 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 16 Nov 2023 22:09:45 GMT
expires: Wed, 29 Nov 2023 05:05:32 GMT
cache-control: max-age=86400, public, no-transform
pragma: public
x-77-nzt: EwwBuUwJFAH3V18AAAwBuUwKAQH3CAAAAAwB1GY4EQH3AAAAAA
x-77-nzt-ray: af58563068be21227bd465655be86913
x-accel-expires: @1701234332
x-accel-date: 1701147940
x-77-cache: HIT
x-77-age: 24415
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 8, 24407
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| | 185.178.208.137 | 200 OK | 21 kB |
URL User Request GET HTTP/2IP185.178.208.137:443
CertificateIssuerLet's Encrypt Subjectoxy.st FingerprintA6:9B:85:E6:72:E4:EE:AB:66:C5:54:C3:41:55:E1:66:69:DB:AD:C2 ValidityMon, 20 Nov 2023 06:25:19 GMT - Sun, 18 Feb 2024 06:25:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d/Vrth HTTP/1.1
Host: oxy.st
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 11:52:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: __ddg1_=PaL8gdMWXwn6zgG5kc1P; Domain=.oxy.st; HttpOnly; Path=/; Expires=Wed, 27-Nov-2024 11:52:15 GMT
PHPSESSID=mcuu2r8dmgtjhcs3l6t0ujuaf3; path=/; domain=.oxy.st
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|