study-assistantph.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: study-assistantph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 05 Nov 2022 16:43:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 05 Nov 2022 17:43:54 GMT
Location: https://study-assistantph.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m9NG6i1kCbHeP7FCJ3rXn4hxiEVC1kyQ7RAEjHo%2BStzlvJ5NwgJcYCMuTX%2FFBL39%2B0OvbZBa4ETQ876qG4uoJjr2lMdWWwPEPJm66fNozxXytY0Pf7AY2bhpaVUBnLP3Jl8EqOWKZMQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76570d10ca1eb4f3-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8286265a56e3e10efd41b41618a54071
5f10ac9a050e15f5598674dc7ee3865b325d01a8
2da2fa0b2b86ccc4029d0baa4e9c5b21a6433228b84b451b72b1d318561d4ef2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2DA2FA0B2B86CCC4029D0BAA4E9C5B21A6433228B84B451B72B1D318561D4EF2"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18617
Expires: Sat, 05 Nov 2022 21:54:11 GMT
Date: Sat, 05 Nov 2022 16:43:54 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 72c64df35304c35cd95e4ed6e101e795
a39287987854d644a8da295da536fb31de8b44c1
a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5950
Cache-Control: max-age=152780
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:54 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 11:10:14 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3527f898221f8ba6b5015f6decc100
ead93baa0e9d3a6297be3377dc3a624e5a3f509a
73a068f907cc50dd60af18d545b4264dd44bc4b9f40bf9adfceea157fdc33099
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73A068F907CC50DD60AF18D545B4264DD44BC4B9F40BF9ADFCEEA157FDC33099"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18329
Expires: Sat, 05 Nov 2022 21:49:23 GMT
Date: Sat, 05 Nov 2022 16:43:54 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IVHR9ac0+7FJMY20RNp9nL77Vrs2CpClvFCr/n2keWajGx3KOEMmT+fke5wdXgxQBTmkoQuRpdw=
x-amz-request-id: WGKVQM0H7HWSEN2E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 05 Nov 2022 15:47:15 GMT
age: 3399
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 65721c4bb41891ecf68203ffef705ca4
2a09349f58f64bf4f505d94e69f366c0ab4047bd
d3de5c7672b59fe38af6f25eab51dfd644d61e196ca70178c3954f9e2fac3995
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=135672
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:54 GMT
Etag: "636601c2-117"
Expires: Mon, 07 Nov 2022 06:25:06 GMT
Last-Modified: Sat, 05 Nov 2022 06:25:06 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 65721c4bb41891ecf68203ffef705ca4
2a09349f58f64bf4f505d94e69f366c0ab4047bd
d3de5c7672b59fe38af6f25eab51dfd644d61e196ca70178c3954f9e2fac3995
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=135672
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:55 GMT
Etag: "636601c2-117"
Expires: Mon, 07 Nov 2022 06:25:07 GMT
Last-Modified: Sat, 05 Nov 2022 06:25:06 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash db63d54b77502dd6c7bdc792d4fd093e
026ad8186833988279468829c004c6e2a2f2626f
eff89ef67baa622e8a196ffcadc44d29aafff009bb531da3e979a1f47c3b1c36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6108
Cache-Control: max-age=147880
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:55 GMT
Etag: "63661997-1d7"
Expires: Mon, 07 Nov 2022 09:48:35 GMT
Last-Modified: Sat, 05 Nov 2022 08:06:47 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4a906c95bc2fda2d018f3ca482d347a
c522743ea33787a312cbf0eb9e41e012ca3f076e
a76d697a6b7131d3d2b9c8d9d1bd7e874bc583bd7ab345f3d80c2e1c5c3ec43c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A76D697A6B7131D3D2B9C8D9D1BD7E874BC583BD7AB345F3D80C2E1C5C3EC43C"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9120
Expires: Sat, 05 Nov 2022 19:15:55 GMT
Date: Sat, 05 Nov 2022 16:43:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 46a10b33cdb313e3c4039b93d5662dd8
8862cdc2f4ae68523e42bf127e88d871078efe1c
25539c0b97ed6714a1bd0bebbd9fd42cd7b0235b5537ad56a30b290ccd4bbbe8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25539C0B97ED6714A1BD0BEBBD9FD42CD7B0235B5537AD56A30B290CCD4BBBE8"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18181
Expires: Sat, 05 Nov 2022 21:46:56 GMT
Date: Sat, 05 Nov 2022 16:43:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f64f3ad163c1ec60b2420f1a0c662a3f
60832e0fcfee13a579268947e50276e62d9ed3ee
a7e3e7decd630f7be4c40674042c39b9b0b9dab0723c71ab2a13c59048f656ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A7E3E7DECD630F7BE4C40674042C39B9B0B9DAB0723C71AB2A13C59048F656ED"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9491
Expires: Sat, 05 Nov 2022 19:22:06 GMT
Date: Sat, 05 Nov 2022 16:43:55 GMT
Connection: keep-alive
loulouly.net/zone?pub=0&zone_id=3914651&is_mobile=false&domain=study-assistantph.com&var=&ymid=&var_3=
200 OK 758 B URL HTTP/2 loulouly.net/zone?pub=0&zone_id=3914651&is_mobile=false&domain=study-assistantph.com&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (757)
Hash 35d92b5d2052d00687b0de0ce3437c71
ddade391e18342b326efdce9712c310a23a0a91a
78152fe7e8ba4c6727d4bfa45b0374a29abf508bcdafbbcf1430fa1fe5383057
GET /zone?pub=0&zone_id=3914651&is_mobile=false&domain=study-assistantph.com&var=&ymid=&var_3= HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: application/json; charset=utf-8
content-length: 758
x-trace-id: 8053429ea89f8e317b02bc479985f5ff
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CmoESZFnyQamRXyhyGtvAQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rMO0Qqiw43CiE+/NrwkLoP7xUBI=
ocsp.digicert.com/
200 OK 278 B IP
Hash 34352e233023821559959951162834a8
f825f0ffeb726f63b915d6ef73c59a175228a909
58fb8387566053cc885bf39dc7e0d8ecb996612e6558ad25ec8f9439a4c8545d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6030
Cache-Control: max-age=144928
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:55 GMT
Etag: "63660e5d-116"
Expires: Mon, 07 Nov 2022 08:59:23 GMT
Last-Modified: Sat, 05 Nov 2022 07:18:53 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 34352e233023821559959951162834a8
f825f0ffeb726f63b915d6ef73c59a175228a909
58fb8387566053cc885bf39dc7e0d8ecb996612e6558ad25ec8f9439a4c8545d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6030
Cache-Control: max-age=144928
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:55 GMT
Etag: "63660e5d-116"
Expires: Mon, 07 Nov 2022 08:59:23 GMT
Last-Modified: Sat, 05 Nov 2022 07:18:53 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ad8c9e3183f179782d58d9794888f72f
bc657893fd7474eb9612424c722f2c55c156b734
5ad04f12b0682e75b3f0f996ca4c66412ccadf2a0a5ca84efee408ce4d7c2494
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5AD04F12B0682E75B3F0F996CA4C66412CCADF2A0A5CA84EFEE408CE4D7C2494"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7732
Expires: Sat, 05 Nov 2022 18:52:47 GMT
Date: Sat, 05 Nov 2022 16:43:55 GMT
Connection: keep-alive
loulouly.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
cdn.betgorebysson.club/apu.php?zoneid=4493436
200 OK 968 B URL HTTP/2 cdn.betgorebysson.club/apu.php?zoneid=4493436
IP
File type ASCII text, with very long lines (801)
Hash 6488d2d9ffca075b8108321f2b7a4d6b
a156377867fd73dd6fd736641cefe24c1cc78ea5
ff998a4f03bbd94d352c41d6a10a3da73de2c1e907e6d12657d7514663bd271a
Analyzer Verdict Alert fortinet Malware
GET /apu.php?zoneid=4493436 HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: application/javascript
content-length: 968
x-trace-id: 31b404e45cd78eeabca0d02712223a11
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=fcbf353434174141a284bbb2bc109da0; expires=Sun, 05 Nov 2023 16:43:55 GMT; path=/; secure; SameSite=None
oaidts=1667666635; expires=Sun, 05 Nov 2023 16:43:55 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
loulouly.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Content-Type: application/json
Origin: https://study-assistantph.com
Content-Length: 379
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: bdc7f3101a466eff1e67f2dd548c6708
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.dmtgvn.com/kv-api/v1/get-value?&keyValues[][roxotHost]=study-assistantph.com&pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026
200 OK 568 B URL HTTP/2 cdn.dmtgvn.com/kv-api/v1/get-value?&keyValues[][roxotHost]=study-assistantph.com&pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026
IP
ASN #199524 G-Core Labs S.A.
Hash 332258178be237ca176c3318476b8b4e
3add853decc61ba1d01fd998a53a003a42a8cb92
dbe7c015cad6969dfaf14724ce20534231eafa5ca02111b511a69bc814aaba28
GET /kv-api/v1/get-value?&keyValues[][roxotHost]=study-assistantph.com&pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: application/json
cache-control: max-age=600, public, s-maxage=600
access-control-allow-origin: *
content-encoding: gzip
cache: STALE
x-cached-since: 2022-11-03T16:36:21+00:00
x-id: sto5-up-gc11
X-Firefox-Spdy: h2
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 900
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sat, 05 Nov 2022 16:43:58 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://study-assistantph.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3832eb0418d94ec98c40df1bcf3ce5b
74dd7fa6ff4f9da9324c0772d075da5f42ab5879
cc42acc8dffa6c7f0c4c3a16ffe8c88919daf4859b7524a7a0ffc6e4b169c50d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 12bb7901ab2d76b93be9c51d7bb4a326
66387a77466c5b3d72ccc982df7ebc1458100c89
d1e70a6b5116a165eb02d4cd743f45c5e12aaabe115bb440f95438f79e02443d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 16:43:56 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 09 Nov 2022 13:11:13 GMT
ETag: "66387a77466c5b3d72ccc982df7ebc1458100c89"
Last-Modified: Sat, 05 Nov 2022 13:11:14 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1899
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76570d1b9e36fac0-OSL
www.googletagservices.com/tag/js/gpt.js
200 OK 27 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (41598)
Hash 40d09499087c0072f43f1f42947b2c34
45235a0723de1029ae23100db6ce6c0ee0999306
680d4b910d77c460f9e36426fbc6ac88a2803eac6c4b97ed212fc7101ebab93c
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27352
date: Sat, 05 Nov 2022 16:43:56 GMT
expires: Sat, 05 Nov 2022 16:43:56 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1384 / 932 of 1000 / last-modified: 1667599556"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6913d09d2b8cbd80ef370c1997143ec
61873208c5852b9f13b1a60d408ec8b239c48c81
291bfcf11419acdfafebb4a1d789302bcbae25eff3a3a847a251e912ef5854b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4410e0283900e769c122cfbcbdbed143
c5588f7f402a41c39405d7459367eadb893fafaf
c9943eb8c4b659d1f5adf76a2d36b70f4ab306c5831b469e07b0fa822056f2b5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 16:43:56 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 03 Nov 2022 18:25:20 GMT
Expires: Thu, 10 Nov 2022 18:25:19 GMT
Etag: "c5588f7f402a41c39405d7459367eadb893fafaf"
Cache-Control: max-age=437482,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76570d1aadbeb4fa-OSL
cdn.dmtgvn.com/wrapper-builder/placement/4ff18346-1bc6-4f5c-915c-d367f8a53b59?v=d-1661183947
200 OK 730 B URL HTTP/2 cdn.dmtgvn.com/wrapper-builder/placement/4ff18346-1bc6-4f5c-915c-d367f8a53b59?v=d-1661183947
IP
ASN #199524 G-Core Labs S.A.
Hash 98619d8a996b0cb0dd831a067ad11664
9d180455d353fde88b368ee2f0bd8956379bbf88
6807ec953344aefec471f870c7621bf106f268ef3d83bbce7262925ee1bec490
GET /wrapper-builder/placement/4ff18346-1bc6-4f5c-915c-d367f8a53b59?v=d-1661183947 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: application/json
cache-control: max-age=31536000, public, s-maxage=31536000
access-control-allow-origin: *
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-03T13:26:06+00:00
x-id: sto5-up-gc13
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper/js/dynamic-engine.js?v=s-ff183091-151b-47af-9790-8a477e06f4e1
200 OK 76 kB URL HTTP/2 cdn.dmtgvn.com/wrapper/js/dynamic-engine.js?v=s-ff183091-151b-47af-9790-8a477e06f4e1
IP
ASN #199524 G-Core Labs S.A.
Hash b2ed27f89764e97d38e89cb20c16e347
50e3457ce8f4ca4261391b86701024fffe3be9b9
4e08cd2263c55fcc6af398d2b72038f04c88e88b730e857967accd7b34386227
GET /wrapper/js/dynamic-engine.js?v=s-ff183091-151b-47af-9790-8a477e06f4e1 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=31536000, public, s-maxage=31536000
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-03T10:03:24+00:00
x-id: sto5-up-gc10
X-Firefox-Spdy: h2
eehuzaih.com/500/5041469?excludes=&oaid=4bd8f10cec0f43469c683d478ec1a368&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 eehuzaih.com/500/5041469?excludes=&oaid=4bd8f10cec0f43469c683d478ec1a368&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /500/5041469?excludes=&oaid=4bd8f10cec0f43469c683d478ec1a368&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:56 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://study-assistantph.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9b08c38f0415438f5f92380ecb902bb
521f94256b2e677cebf32404641ea8b23c18b2a4
696a8fc71eb173d6434e990a93fca753df22378de0e3014f529db7654d27cf77
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4a9066e8faeec7f06d9a7e91bef8ff52
699ce1c29412a4c3f9018f4deceb3db399ddcd29
46461d19bf1ea06f23d89c4179135eaca9d7c8753a91e913b3adaf2615bee36f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=study-assistantph.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=study-assistantph.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=study-assistantph.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 05 Nov 2022 16:43:56 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
eehuzaih.com/500/5041469?excludes=&oaid=4bd8f10cec0f43469c683d478ec1a368&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 1.3 kB URL HTTP/2 eehuzaih.com/500/5041469?excludes=&oaid=4bd8f10cec0f43469c683d478ec1a368&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1587), with no line terminators
Hash f4c3670ff93970fa851850bcc5b47c69
bd132d6dbca06757a3cd11e8da44f2bb60eba73c
3ce9acb8be94a2cd52dcb78bd75a7e593a9c0416f6b3f7276359d7a329b27520
Analyzer Verdict Alert quad9 Sinkholed
GET /500/5041469?excludes=&oaid=4bd8f10cec0f43469c683d478ec1a368&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Cookie: OAID=fec03fe5324b4ea0b2b8d57d68a82bda
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:56 GMT
content-type: application/javascript
x-trace-id: c56d9f86426d58f3538c8326c6ad84db
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://study-assistantph.com
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=4bd8f10cec0f43469c683d478ec1a368; expires=Sun, 05 Nov 2023 16:43:56 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9b08c38f0415438f5f92380ecb902bb
521f94256b2e677cebf32404641ea8b23c18b2a4
696a8fc71eb173d6434e990a93fca753df22378de0e3014f529db7654d27cf77
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash b3f8417b7457d0ecc5fbfe29b7a94702
1456a274619bf3e8b11c7331c0a2f610bc8ab242
4a43b09bc9f2ea86707168c8d95283272298eba15b908c345c60e75094c68a0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2774
Cache-Control: max-age=115752
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:56 GMT
Etag: "6365a91e-117"
Expires: Mon, 07 Nov 2022 00:53:08 GMT
Last-Modified: Sat, 05 Nov 2022 00:06:54 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4a9066e8faeec7f06d9a7e91bef8ff52
699ce1c29412a4c3f9018f4deceb3db399ddcd29
46461d19bf1ea06f23d89c4179135eaca9d7c8753a91e913b3adaf2615bee36f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2522
Expires: Sat, 05 Nov 2022 17:25:58 GMT
Date: Sat, 05 Nov 2022 16:43:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2522
Expires: Sat, 05 Nov 2022 17:25:58 GMT
Date: Sat, 05 Nov 2022 16:43:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2522
Expires: Sat, 05 Nov 2022 17:25:58 GMT
Date: Sat, 05 Nov 2022 16:43:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F311de4fa-2622-4405-a8aa-ba6253adca1e.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F311de4fa-2622-4405-a8aa-ba6253adca1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f58211ba5351479df022215cd16ecd2
f54589d1eb5771befaef24a6299a6719c4353e97
8feccd5bce6e772e178ccdd2a1d084407d65bb82474d943b01efc0d5b660bdec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F311de4fa-2622-4405-a8aa-ba6253adca1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4812
x-amzn-requestid: e2bfc209-f109-4c05-a7ad-52b5bd138610
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a2ZK9HBWoAMFqPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635f3bdf-6ac70df57b5a16d66e16dcdd;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 03:07:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E83WCL42jFL5DvuhCbaKEo5pECIlNWsu3QtV95k59h-UpC-Xrf1J0A==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 11:19:02 GMT
age: 19494
etag: "f54589d1eb5771befaef24a6299a6719c4353e97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: z6Lnru_eeTvRGdsz-q37-HGFgFfIT6fLSFcJBvT3oPjAPilszTWkDw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 20:21:33 GMT
age: 73343
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
offerimage.com/www/images/e27e78d3b01907b714b7d939d7eed85d.png
200 OK 43 kB URL HTTP/2 offerimage.com/www/images/e27e78d3b01907b714b7d939d7eed85d.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash e27e78d3b01907b714b7d939d7eed85d
2d4aa0d84925e5031861258c341788450ba8b43c
37024bac32f0cc3299c2492471b40e6beb2fd7b3cb73b172d68207e87cdfd6e6
GET /www/images/e27e78d3b01907b714b7d939d7eed85d.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 16:43:56 GMT
content-type: image/png
content-length: 43157
last-modified: Sun, 27 Sep 2020 15:59:04 GMT
etag: "5f70b6c8-a895"
expires: Sun, 06 Nov 2022 11:31:24 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 18752
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76570d1f2b36f14a-ARN
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28a5f5ce-bd81-4e56-bd1b-460e13379581.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28a5f5ce-bd81-4e56-bd1b-460e13379581.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a3b1551512640bb8f5e7deb80c32272
75805b9f03aef14cfad025259936ae5f217d25ca
5baa90853202e78cf9b59e9ab597e16ccfbf143d7e124583e64dc1ad1ee2c2df
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28a5f5ce-bd81-4e56-bd1b-460e13379581.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7783
x-amzn-requestid: c8f73eac-612d-48e3-a655-41525e97331c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apxM8H7aoAMFT3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2f1f-5470c77a30a11b9423f56837;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:11:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FLFsF-1gAeN0HiZnS03oNMNajnwk12P-5Aro-QOcQNFtkjknh9g5FA==
via: 1.1 0c04e836dfe22246a870a0f54a2d4746.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 19:19:17 GMT
age: 77079
etag: "75805b9f03aef14cfad025259936ae5f217d25ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca6c7517d7015fbc35fa290c1c2d6afd
594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c
a746b36be50209915a0e5657abd219aab382eee4b7556142aa1316daf3a9f5a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: f2e39db1-fb8a-4a9b-8a1d-ee08000ddeb6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC1VyFHuIAMF5Eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636435be-7a03ef677f8dbd680f72de90;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:42:22 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: SjV-J5oBG_0qHy-SE7_K9kj_MMjAee4JZva3thJf8On3ejAA1n1tfg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 21:53:04 GMT
age: 67852
etag: "594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c7c9c908e891e7277f21a914fea9aa25
596c3c084ae3d850a5dc28e549b4e22f2b8cc71f
709c217b3ac09712d2af4366316c8977b1a4e2a73f887b3e30f10df1ed50bacd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9150
x-amzn-requestid: 7c179507-20a7-4fa3-993b-f79b3e7949ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apwiGHD_IAMFQZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2e0d-337623ce79dc53c864632c72;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:06:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OM3hc6Jfl5pDWPikIlcQOexIScQavqJh9h-N-EvIGNpicWJwHMPKIA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 19:29:40 GMT
age: 76456
etag: "596c3c084ae3d850a5dc28e549b4e22f2b8cc71f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f29b126-c6e5-4528-8307-e3c7fe12e225.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f29b126-c6e5-4528-8307-e3c7fe12e225.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 308da46611df43543d31ca502986bea2
0bf4de356c3a64785fe116161cb931b3b2476f5d
63996962e2763dcf2e0ae5e43aa12dfd8f8677082bb1cdf63528dfd00404f3e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f29b126-c6e5-4528-8307-e3c7fe12e225.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7619
x-amzn-requestid: 67308248-e660-4294-aafe-5f178970f822
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bGHlcHHfIAMFyGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63658622-5b1ee875554a05eb1e8a6f16;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 21:37:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Qn6QTO-5bR2vT6wtmHT2zVZX556_FUz6ImAWK3O8hc8xSJ9XmNM96w==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 21:48:46 GMT
age: 68110
etag: "0bf4de356c3a64785fe116161cb931b3b2476f5d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 05 Nov 2022 16:43:56 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Sat, 05 Nov 2022 17:43:56 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/88477929/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A129140708788%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164354%3Aet%3A1667666635%3Ac%3A1%3Arn%3A758922941%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C%2C%2C%2C1106%3Ans%3A1667666632735%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666635%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/88477929/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A129140708788%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164354%3Aet%3A1667666635%3Ac%3A1%3Arn%3A758922941%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C%2C%2C%2C1106%3Ans%3A1667666632735%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666635%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 3701e0c6957500172c99e759ef1ab2f8
1e85ac0f1bbc1ef715e7b66f6c30485a3de707cf
0d8caed6da2672916f3951449cbfbbac70b56dca3e63db434957035b85cc41e6
GET /watch/88477929/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A129140708788%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164354%3Aet%3A1667666635%3Ac%3A1%3Arn%3A758922941%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C%2C%2C%2C1106%3Ans%3A1667666632735%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666635%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Referer: https://study-assistantph.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Sat, 05 Nov 2022 16:43:56 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 05-Nov-2022 16:43:56 GMT
last-modified: Sat, 05-Nov-2022 16:43:56 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
09fdf898fc7fc95790d801bd29ed6c27.safeframe.googlesyndication.com/safeframe/1-0-39/html/container.html
200 OK 3.0 kB URL HTTP/2 09fdf898fc7fc95790d801bd29ed6c27.safeframe.googlesyndication.com/safeframe/1-0-39/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash 0193525c83a04aba8fa3caf53d9aac05
ec27db82404e05017dd9b66206d03c2f623ca8d6
1f57111c09ecc489613040fb1f8ec3e9458f6d58bdacfd3669a10ba338a4c9d0
GET /safeframe/1-0-39/html/container.html HTTP/1.1
Host: 09fdf898fc7fc95790d801bd29ed6c27.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2988
date: Sat, 05 Nov 2022 16:43:56 GMT
expires: Sun, 05 Nov 2023 16:43:56 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 25 Oct 2022 18:59:17 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
loulouly.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Content-Type: application/json
Origin: https://study-assistantph.com
Content-Length: 723
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:56 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 0679a3f29550648e603f6f32bd21e470
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ddc6a0cfefdd9a13363f6399a532c121
6cefb6aa5c2e43f48e71e6d3622f2346a6a6e37b
bc243a1df25ca688919bea318afef2e8691969b9b97888cb32b8a4cc2429e27e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5020
Cache-Control: max-age=118001
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:56 GMT
Etag: "6365a921-1d7"
Expires: Mon, 07 Nov 2022 01:30:37 GMT
Last-Modified: Sat, 05 Nov 2022 00:06:57 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash ddc6a0cfefdd9a13363f6399a532c121
6cefb6aa5c2e43f48e71e6d3622f2346a6a6e37b
bc243a1df25ca688919bea318afef2e8691969b9b97888cb32b8a4cc2429e27e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4778
Cache-Control: max-age=117759
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:56 GMT
Etag: "6365a921-1d7"
Expires: Mon, 07 Nov 2022 01:26:35 GMT
Last-Modified: Sat, 05 Nov 2022 00:06:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=4f987fe6-f30f-4c34-8294-de386439d1b2&l_pb_bid_id=491b354bbdaaec&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9114363949083797
200 OK 304 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=4f987fe6-f30f-4c34-8294-de386439d1b2&l_pb_bid_id=491b354bbdaaec&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9114363949083797
IP
File type JSON data\012- , ASCII text, with very long lines (304), with no line terminators
Hash 36f3ad5e6cfaf5241784bcf68f4a934d
5854f7e09d51717b61c2135cfd57286897b739bf
c955bf2b3a4ecb6645cec14cb3e681a38a114e09b0efc3be50d4a48a06b72f50
GET /a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=4f987fe6-f30f-4c34-8294-de386439d1b2&l_pb_bid_id=491b354bbdaaec&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.9114363949083797 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Sat, 05 Nov 2022 16:43:56 GMT
Content-Type: application/json
Content-Length: 304
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=LA45NOES-Y-BWDD; Domain=.rubiconproject.com; Path=/; Expires=Sun, 05-Nov-2023 16:43:56 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qojP7H9gbSG5O9DtVM30fCgQUwRKC0W4tCEOyHi2xFRyD9zvlSxEea9VeuKsLvX3bPAUJ+gL7gixUujLKVOyBtu/R7Fz5/Qhm0=; Domain=.rubiconproject.com; Path=/; Expires=Sun, 05-Nov-2023 16:43:56 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 138 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 41229ea8f587175811baaf2ca154798e
f70bd3825d03828b10301a3a3e3fa9ed930f9042
dab2452824ca949b5228582f625c87c147a99d3fcff4c231188c438c2f6e18f9
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 610
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 05 Nov 2022 16:43:56 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 138
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
AN-X-Request-Uuid: 4049730e-bb18-43c5-bba4-ce90823e54df
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 535.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=fd21d82e-5cd4-4280-b0e4-dd4a078f7d1c&l_pb_bid_id=69d68e6f6a318a8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.829902223711263
200 OK 312 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=fd21d82e-5cd4-4280-b0e4-dd4a078f7d1c&l_pb_bid_id=69d68e6f6a318a8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.829902223711263
IP
File type JSON data\012- , ASCII text, with very long lines (312), with no line terminators
Hash 60b828bbd9909c51ecd5f38fa9e7b50a
da7a12ec20e86afcfdf67a3e61a99e15428a6ac7
21ad99637b3a0229fd9570fd39fab0c34b0f9262e19cdaddc0ba6550b050e855
GET /a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=fd21d82e-5cd4-4280-b0e4-dd4a078f7d1c&l_pb_bid_id=69d68e6f6a318a8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.829902223711263 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Sat, 05 Nov 2022 16:43:56 GMT
Content-Type: application/json
Content-Length: 312
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=LA45NOEU-C-MG9H; Domain=.rubiconproject.com; Path=/; Expires=Sun, 05-Nov-2023 16:43:56 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qr/Rakl0yp9nO9DtVM30fCgQUwRKC0W4tCEOyHi2xFRyD9zvlSxEea9VeuKsLvX3bPAUJ+gL7gixUujLKVOyBtu/R7Fz5/Qhm0=; Domain=.rubiconproject.com; Path=/; Expires=Sun, 05-Nov-2023 16:43:56 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 144 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 750f216c0ff6ca5e5fea3a9e0ed4dd3c
b587506647fe40eaaae2d6bfde3dca5a82c98596
1108e4dbe74b1ff5c64b6ff93d903143a694339b9174554e4bd4552fe207518c
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 475
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 05 Nov 2022 16:43:57 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 144
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
AN-X-Request-Uuid: 48b6300b-e344-41f1-85f9-bda4e550cfcc
Set-Cookie: icu=ChgIx9p7EAoYASABKAEwzaWamwY4AUABSAEQzaWamwYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 03-Feb-2023 16:43:57 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=1617598241234293334; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 03-Feb-2023 16:43:57 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 535.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022110101&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022110101&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14847), with no line terminators
Hash 795ff08322fa5eb370ab9c4086fd2457
6afcb54e08f06fccdc65ebfd5d0cf2146460922c
a8ae3fa9dd06487988be14d3d6a929d05a45be807ed21b25ff61eff6f41c0a89
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022110101&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Sat, 05 Nov 2022 16:43:57 GMT
server: cafe
content-length: 11210
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 38fc4862052e168e0c1ae67eeb1ac280
725354e1375318e4528703224b81bfa51b0d4167
6bb8388db39898395cffa818df622bfb198f4b0fc2020b34b69816fab850275a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Sat, 05 Nov 2022 16:43:57 GMT
expires: Sat, 05 Nov 2022 16:43:57 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 04 Nov 2022 07:26:35 GMT
expires: Sat, 04 Nov 2023 07:26:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 119842
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5de5a7ee16d3f3164758282fbecef0a3
82fb2ac7d306e1f9724adc0ba2ef9e549baa9100
ad55f91c5fb1f872310a5f5777a65b79a338138d241a674449da2e0edde1f2ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:43:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 514 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash c6476034e645f16d6d205c810292dec8
7f3cc89628825d682f91fe5a0e00fd05af7accaf
a7aebe558e8b2adc8ddade27b8fdb28e78dcf486c0789c231fbb266bf19016ec
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sat, 05 Nov 2022 16:43:57 GMT
date: Sat, 05 Nov 2022 16:43:57 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-5BjN4e-A23KEuJhzbgLATA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 514
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e3713530a7634eba2c08d88565eb6ca0
a22a01d077e04e91721ded22324113bc4832b662
66025140d50130acea481c32c4303c7e9f3e4e4f298b0bedf4c7bd7a2b0384ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "66025140D50130ACEA481C32C4303C7E9F3E4E4F298B0BEDF4C7BD7A2B0384ED"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12301
Expires: Sat, 05 Nov 2022 20:08:58 GMT
Date: Sat, 05 Nov 2022 16:43:57 GMT
Connection: keep-alive
worker.sttsmntz.ru/stats/format
200 OK 230 B URL HTTP/2 worker.sttsmntz.ru/stats/format
IP
File type JSON data\012- , ASCII text
Hash b37e3958b3cca297f23678dad651dae8
2ed6f1aea2acc8aba58884399aa9e4f9c9587718
fbc62d6a3f10025d07aa6f22f7afb6a309fd1e62ed383978e56236723403db3e
POST /stats/format HTTP/1.1
Host: worker.sttsmntz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 223
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ycalb
date: Sat, 05 Nov 2022 16:43:56 GMT
content-type: application/json
content-encoding: gzip
content-length: 230
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
X-Firefox-Spdy: h2
worker.sttsmntz.ru/stats/format
200 OK 231 B URL HTTP/2 worker.sttsmntz.ru/stats/format
IP
File type JSON data\012- , ASCII text
Hash 4132850dc770bc977af94180727701ff
5bf32c0393bb454f456013fac022f22362f77ae4
3c7328ca6891c427b1aa8d8c40d9f8cf53af7f2aba29db4d11df651d642dd32d
POST /stats/format HTTP/1.1
Host: worker.sttsmntz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 223
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ycalb
date: Sat, 05 Nov 2022 16:43:56 GMT
content-type: application/json
content-encoding: gzip
content-length: 231
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71915284?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A1339201984656%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164355%3Aet%3A1667666636%3Ac%3A1%3Arn%3A523378454%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C2493%2C2493%2C2%2C1106%3Aeu%3A1%3Ans%3A1667666632735%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666636%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(1)fip(1)rqnl(1)ti(2)
302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/71915284?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A1339201984656%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164355%3Aet%3A1667666636%3Ac%3A1%3Arn%3A523378454%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C2493%2C2493%2C2%2C1106%3Aeu%3A1%3Ans%3A1667666632735%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666636%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(1)fip(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 32147e65258a16d68683b00dd1330863
ceb52ebe1a9573c964d784568206e161b5e731f0
2bd16585beae73af393a235532548c648ef73b550d6906548814077224aa2d50
GET /watch/71915284?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A1339201984656%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164355%3Aet%3A1667666636%3Ac%3A1%3Arn%3A523378454%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C2493%2C2493%2C2%2C1106%3Aeu%3A1%3Ans%3A1667666632735%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666636%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)ecs(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71915284/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A1339201984656%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164355%3Aet%3A1667666636%3Ac%3A1%3Arn%3A523378454%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C2493%2C2493%2C2%2C1106%3Aeu%3A1%3Ans%3A1667666632735%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666636%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
date: Sat, 05 Nov 2022 16:43:57 GMT
access-control-allow-origin: https://study-assistantph.com
set-cookie: yandexuid=6109317541667666637; Expires=Sun, 05-Nov-2023 16:43:57 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6109317541667666637; Expires=Sun, 05-Nov-2023 16:43:57 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1812499421667666637; Path=/; SameSite=None; Secure
i=MbmBC0VMUSb2qJGcGv+P00wIGV2nJU8XyBTNLFtWK0CiyjTOm6jH35rV9SBxBSKtuQ+FKxXPUFza/E7zxNrZdz9MhMA=; Expires=Tue, 02-Nov-2032 16:43:57 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1699202637.yrts.1667666637#1699202637.yrtsi.1667666637; Expires=Sun, 05-Nov-2023 16:43:57 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 05-Nov-2022 16:43:57 GMT
last-modified: Sat, 05-Nov-2022 16:43:57 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
eehuzaih.com/impression/iLKtyrTRYMiZ4xx38lurlaATAEb-POQwlmIizG_Ofl0mtv-E3nD5enI8MHYAhMvUeUyMLTodbMnWVABSN9R-2Kp_Saso8bMYbMJZLSvUWnP0N7Rj1C2LLPyfkdBXazPpFMqn2aUDNTOXyZbXnGP3KABbNbm8C1DTcWOKlmaIT-tYQ2M1k9Obz2ON8eGCREHoAmN5dM4arsmyBQFiOFt-aeD87qqtxKvlS6LISYLmpIZmrbpeIqJ_aAjBwyrxg6PLhxOM46YAkSQ0DFvZjEVIXGzcQELy668tqOw8OiJPmkZBYlgvvLkxTtjhQjjhpTXEbfnWhYjo3bnSCC-7lGWnlPTvU6xXXSI2dWHVxHaefmQo6tgfHDkqgjuhtlz11s77kYzo5JdXeqgcDF_NHB_IA7xL3fzUVKLFOqqncMcwdTaLqwE38SBqgYJs4hN_3KN_ZTwPWuaksr79D77u1rRXQDRP4XEDxEFmGgEl9ElTNpyHP-G6eu8JB3UXnWYw1xOjrKKJO6JUeXmw20CXjYLPSzspE-rDejSbHZIA_paufkkAlTFEDuwL0fVkf30m82gA2Jb2rEAhbR9eEwyBI2ewaSeMx9MnylgUBsnKglGZaEs=?_z=5041469&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 43 B URL HTTP/2 eehuzaih.com/impression/iLKtyrTRYMiZ4xx38lurlaATAEb-POQwlmIizG_Ofl0mtv-E3nD5enI8MHYAhMvUeUyMLTodbMnWVABSN9R-2Kp_Saso8bMYbMJZLSvUWnP0N7Rj1C2LLPyfkdBXazPpFMqn2aUDNTOXyZbXnGP3KABbNbm8C1DTcWOKlmaIT-tYQ2M1k9Obz2ON8eGCREHoAmN5dM4arsmyBQFiOFt-aeD87qqtxKvlS6LISYLmpIZmrbpeIqJ_aAjBwyrxg6PLhxOM46YAkSQ0DFvZjEVIXGzcQELy668tqOw8OiJPmkZBYlgvvLkxTtjhQjjhpTXEbfnWhYjo3bnSCC-7lGWnlPTvU6xXXSI2dWHVxHaefmQo6tgfHDkqgjuhtlz11s77kYzo5JdXeqgcDF_NHB_IA7xL3fzUVKLFOqqncMcwdTaLqwE38SBqgYJs4hN_3KN_ZTwPWuaksr79D77u1rRXQDRP4XEDxEFmGgEl9ElTNpyHP-G6eu8JB3UXnWYw1xOjrKKJO6JUeXmw20CXjYLPSzspE-rDejSbHZIA_paufkkAlTFEDuwL0fVkf30m82gA2Jb2rEAhbR9eEwyBI2ewaSeMx9MnylgUBsnKglGZaEs=?_z=5041469&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Analyzer Verdict Alert quad9 Sinkholed
GET /impression/iLKtyrTRYMiZ4xx38lurlaATAEb-POQwlmIizG_Ofl0mtv-E3nD5enI8MHYAhMvUeUyMLTodbMnWVABSN9R-2Kp_Saso8bMYbMJZLSvUWnP0N7Rj1C2LLPyfkdBXazPpFMqn2aUDNTOXyZbXnGP3KABbNbm8C1DTcWOKlmaIT-tYQ2M1k9Obz2ON8eGCREHoAmN5dM4arsmyBQFiOFt-aeD87qqtxKvlS6LISYLmpIZmrbpeIqJ_aAjBwyrxg6PLhxOM46YAkSQ0DFvZjEVIXGzcQELy668tqOw8OiJPmkZBYlgvvLkxTtjhQjjhpTXEbfnWhYjo3bnSCC-7lGWnlPTvU6xXXSI2dWHVxHaefmQo6tgfHDkqgjuhtlz11s77kYzo5JdXeqgcDF_NHB_IA7xL3fzUVKLFOqqncMcwdTaLqwE38SBqgYJs4hN_3KN_ZTwPWuaksr79D77u1rRXQDRP4XEDxEFmGgEl9ElTNpyHP-G6eu8JB3UXnWYw1xOjrKKJO6JUeXmw20CXjYLPSzspE-rDejSbHZIA_paufkkAlTFEDuwL0fVkf30m82gA2Jb2rEAhbR9eEwyBI2ewaSeMx9MnylgUBsnKglGZaEs=?_z=5041469&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Cookie: OAID=4bd8f10cec0f43469c683d478ec1a368
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:44:00 GMT
content-type: image/gif
content-length: 43
x-trace-id: b91f1f190b8a0ec1e4f7d78cfd5d4781
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a2f6c296003d839bdee766ef4082e376
013ae64b10cb1355ae9b6ba38dcfa79f71a9b505
703d6582ab3344d6e4a0d5b7e0c9983b8f7e8179d73dd6584c37bbccc8c84308
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:44:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
IP
Hash 1efca59301ba73e5c1031c87ef3af105
904b50c0aa563bc84ef8e9029ebf678bd47439a4
940bee1d10acdf6ec3962fbef2ede2565fae3ab427d20a3a6806c8f3e18760b1
GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 05 Nov 2022 16:44:00 GMT
date: Sat, 05 Nov 2022 16:44:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 656a355c6cb333c5554fa65748d3d165
15e6dc206e412e258ca49e2eec46e67b831ea4a6
3bdcb16737f73a6985f7cfe3b221882d91b27ab3ec6f940f14477f94a0e40720
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:44:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 656a355c6cb333c5554fa65748d3d165
15e6dc206e412e258ca49e2eec46e67b831ea4a6
3bdcb16737f73a6985f7cfe3b221882d91b27ab3ec6f940f14477f94a0e40720
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:44:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 19:34:08 GMT
expires: Thu, 02 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 248992
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 19:34:08 GMT
expires: Thu, 02 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 248992
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 62a8ce6a2338913103618edb2f4a9dbe
0e0850b1aef6ed524d119a41145112b84c257687
51d11b07f58551b5864fb55d4560d8a2237c2351036de0af7e25c81816763b31
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 16:44:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ib.adnxs.com/ut/v3/prebid
200 OK 139 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 10bf222df710320e245cf734dba9f6e3
2c576e9f0860dc17183b6d114c98066a7fb22438
e1e0464d852a0920db22c1b27190a2e32cd3536d1db382c075f27825de68ef0a
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 476
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 05 Nov 2022 16:44:02 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 139
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
AN-X-Request-Uuid: f70cdc99-ea46-466d-be72-cf1645d106e2
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 535.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=754c1b4d-6196-44c5-81c7-9dd0f913dfad&l_pb_bid_id=1614bfbab0e5e2b8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.36389116952609735
200 OK 304 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=754c1b4d-6196-44c5-81c7-9dd0f913dfad&l_pb_bid_id=1614bfbab0e5e2b8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.36389116952609735
IP
File type JSON data\012- , ASCII text, with very long lines (304), with no line terminators
Hash 31d6a5254a75dfba9db30d7569ef0c82
cad333709a4553b5efad2d20e57f1769b2f8ce8a
4fe3164fd8cfc0c6d0533feeb5daedd0d5f16058fb03d91f2d35d7022b9c3f50
GET /a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=754c1b4d-6196-44c5-81c7-9dd0f913dfad&l_pb_bid_id=1614bfbab0e5e2b8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.36389116952609735 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Sat, 05 Nov 2022 16:44:02 GMT
Content-Type: application/json
Content-Length: 304
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=LA45NSPX-21-AVVP; Domain=.rubiconproject.com; Path=/; Expires=Sun, 05-Nov-2023 16:44:02 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qpWQDc1YgaQXe9DtVM30fCgQUwRKC0W4tDAe1qtWdrRQz9zvlSxEea9VeuKsLvX3bPAUJ+gL7gixUujLKVOyBtu/R7Fz5/Qhm0=; Domain=.rubiconproject.com; Path=/; Expires=Sun, 05-Nov-2023 16:44:02 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=b0e2d81a-a353-4f9d-ad3e-28425968e0ba&l_pb_bid_id=1026481ee83029c8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.20277237369544698
200 OK 312 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=b0e2d81a-a353-4f9d-ad3e-28425968e0ba&l_pb_bid_id=1026481ee83029c8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.20277237369544698
IP
File type JSON data\012- , ASCII text, with very long lines (312), with no line terminators
Hash e186b10b0e611821f3764bdfb0516c52
1db65d0f0f2526fb0a008ea4117c67f570233e96
b083cc429a73364f5ef534eeb052ba4611cb333476aea07defb56e82f7cc4522
GET /a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=b0e2d81a-a353-4f9d-ad3e-28425968e0ba&l_pb_bid_id=1026481ee83029c8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.20277237369544698 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Sat, 05 Nov 2022 16:44:02 GMT
Content-Type: application/json
Content-Length: 312
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=LA45NSPF-1X-1QNF; Domain=.rubiconproject.com; Path=/; Expires=Sun, 05-Nov-2023 16:44:02 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qorvLnZEXUOUu9DtVM30fCgQUwRKC0W4tDAe1qtWdrRQz9zvlSxEea9VeuKsLvX3bPAUJ+gL7gixUujLKVOyBtu/R7Fz5/Qhm0=; Domain=.rubiconproject.com; Path=/; Expires=Sun, 05-Nov-2023 16:44:02 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 51502707e42744c92b9fe85a29782699
80ebbc69d0aa9eabded9e12917b0fcde368d893b
0d72e735259026deee55d120a789566d008e77ceff148f5b68be7a2a209368e7
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 611
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 05 Nov 2022 16:44:02 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
AN-X-Request-Uuid: 5c206b31-d125-4877-900c-ab9d0eb7dad6
Set-Cookie: icu=ChgIx9p7EAoYASABKAEw0qWamwY4AUABSAEQ0qWamwYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 03-Feb-2023 16:44:02 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=4162547031337060020; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 03-Feb-2023 16:44:02 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 535.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
worker.sttsmntz.ru/stats/format
200 OK 228 B URL HTTP/2 worker.sttsmntz.ru/stats/format
IP
File type JSON data\012- , ASCII text
Hash a9fbe6cb08a28678dd41eddd53101d7a
fb054ad9232b1dbeebadd0ea298b42d50ff3b994
e590c8461702cac43db3f59d3239179b7692d13a9c3acf6bcfdb0d69d2af9ebf
POST /stats/format HTTP/1.1
Host: worker.sttsmntz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 223
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ycalb
date: Sat, 05 Nov 2022 16:44:02 GMT
content-type: application/json
content-encoding: gzip
content-length: 228
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
X-Firefox-Spdy: h2
worker.sttsmntz.ru/stats/format
200 OK 230 B URL HTTP/2 worker.sttsmntz.ru/stats/format
IP
File type JSON data\012- , ASCII text
Hash 80d6f0710c13879a1ab2c986fae52b1b
293de89302e05309cc65b0dcd2162198743760b7
df7a8487e08bc32a49fc7c8167f74a12f3297e5e9337b1f971d4878eb01511b0
POST /stats/format HTTP/1.1
Host: worker.sttsmntz.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 223
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ycalb
date: Sat, 05 Nov 2022 16:44:02 GMT
content-type: application/json
content-encoding: gzip
content-length: 230
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
X-Firefox-Spdy: h2
loulouly.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Content-Type: application/json
Origin: https://study-assistantph.com
Content-Length: 387
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:44:03 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: aee2b0377be460aecc3d915aeeec56be
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=10b9d14241c14dc190850bd15efee80d&zoneId=3914651&checkDuplicate=true&ymid=&var=
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=10b9d14241c14dc190850bd15efee80d&zoneId=3914651&checkDuplicate=true&ymid=&var=
IP
File type JSON data\012- , ASCII text
Hash 23f1bc6063ad860843e7e417a4584e72
b88d70e9bca5fb7e990ec0e83403a58bb64d7f8f
6e70f07e30dd1d2fd7b6834e99cf455a9570a4a694a6183d0d05ad6923d922b6
GET /gid.js?pub=0&userId=10b9d14241c14dc190850bd15efee80d&zoneId=3914651&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Cookie: ID=4bd8f10cec0f43469c683d478ec1a368
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:44:03 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://study-assistantph.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=4bd8f10cec0f43469c683d478ec1a368; expires=Sun, 05 Nov 2023 16:44:03 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
study-assistantph.com/
200 OK 0 B IP
GET / HTTP/1.1
Host: study-assistantph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=86400
expires: Sun, 06 Nov 2022 16:43:55 GMT
cf-cache-status: MISS
last-modified: Sat, 05 Nov 2022 16:43:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zreTXOrQR4fJDeVQ55c23aVJn7JRh2PIBXw7GIXYWVZ5%2BKonOjSbFMeYN6swJUwMZ2EtOMIKyzKgnG2alzYK4hfGafB06xWUDn3065rWiniNupaxYnbsCBU%2BqnhIMB4bOSzs8gltERQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76570d14ed86b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper/js/manager.js?pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026
200 OK 0 B URL HTTP/2 cdn.dmtgvn.com/wrapper/js/manager.js?pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026
IP
ASN #199524 G-Core Labs S.A.
GET /wrapper/js/manager.js?pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=600, public, s-maxage=600
access-control-allow-origin: *
content-encoding: gzip
cache: STALE
x-cached-since: 2022-11-05T15:45:39+00:00
x-id: sto5-up-gc14
X-Firefox-Spdy: h2
loulouly.net/pfe/current/tag.min.js?z=3914651
200 OK 0 B URL HTTP/2 loulouly.net/pfe/current/tag.min.js?z=3914651
IP
GET /pfe/current/tag.min.js?z=3914651 HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 13:02:53 GMT
etag: W/"63626a7d-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
loulouly.net/pfe/current/universal.min.js?v=3.1.402
200 OK 0 B URL HTTP/2 loulouly.net/pfe/current/universal.min.js?v=3.1.402
IP
GET /pfe/current/universal.min.js?v=3.1.402 HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 13:02:53 GMT
etag: W/"63626a7d-180b9"
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
eehuzaih.com/400/5041469
200 OK 0 B IP
Analyzer Verdict Alert quad9 Sinkholed
GET /400/5041469 HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: application/javascript
x-trace-id: d3b58d03a047cf0ba65dff21cb108f3f
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=fec03fe5324b4ea0b2b8d57d68a82bda; expires=Sun, 05 Nov 2023 16:43:55 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/88477929?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A129140708788%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164354%3Aet%3A1667666635%3Ac%3A1%3Arn%3A758922941%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C%2C%2C%2C1106%3Ans%3A1667666632735%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666635%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/88477929?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A129140708788%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164354%3Aet%3A1667666635%3Ac%3A1%3Arn%3A758922941%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C%2C%2C%2C1106%3Ans%3A1667666632735%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666635%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/88477929?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A129140708788%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164354%3Aet%3A1667666635%3Ac%3A1%3Arn%3A758922941%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C%2C%2C%2C1106%3Ans%3A1667666632735%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666635%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/88477929/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A1073%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A129140708788%3Ahid%3A878074036%3Az%3A0%3Ai%3A20221105164354%3Aet%3A1667666635%3Ac%3A1%3Arn%3A758922941%3Arqn%3A1%3Au%3A1667666635314060609%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C421%2C145%2C0%2C275%2C0%2C%2C232%2C2%2C%2C%2C%2C1106%3Ans%3A1667666632735%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667666635%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Sat, 05 Nov 2022 16:43:56 GMT
access-control-allow-origin: https://study-assistantph.com
set-cookie: yandexuid=8710081731667666636; Expires=Sun, 05-Nov-2023 16:43:56 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8710081731667666636; Expires=Sun, 05-Nov-2023 16:43:56 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1215004781667666636; Path=/; SameSite=None; Secure
i=zb7V3f7miLfLgp/IoOsRXIcXzIMgszX7pzHq2LGY13djCPZYyXkeua3EKfqeEufKTBx30eSOVlBxg5p9jijhYT0YOjA=; Expires=Tue, 02-Nov-2032 16:43:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1699202636.yrts.1667666636#1699202636.yrtsi.1667666636; Expires=Sun, 05-Nov-2023 16:43:56 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 05-Nov-2022 16:43:56 GMT
last-modified: Sat, 05-Nov-2022 16:43:56 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper/js/prebid.js?v=s-ff183091-151b-47af-9790-8a477e06f4e1
200 OK 0 B URL HTTP/2 cdn.dmtgvn.com/wrapper/js/prebid.js?v=s-ff183091-151b-47af-9790-8a477e06f4e1
IP
ASN #199524 G-Core Labs S.A.
GET /wrapper/js/prebid.js?v=s-ff183091-151b-47af-9790-8a477e06f4e1 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=31536000, public, s-maxage=31536000
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-03T10:28:01+00:00
x-id: sto5-up-gc10
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper/js/common-engine.js?v=s-ff183091-151b-47af-9790-8a477e06f4e1
200 OK 0 B URL HTTP/2 cdn.dmtgvn.com/wrapper/js/common-engine.js?v=s-ff183091-151b-47af-9790-8a477e06f4e1
IP
ASN #199524 G-Core Labs S.A.
GET /wrapper/js/common-engine.js?v=s-ff183091-151b-47af-9790-8a477e06f4e1 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=31536000, public, s-maxage=31536000
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-03T10:02:08+00:00
x-id: sto5-up-gc13
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper-builder/eb107cdf-35a2-42a1-9d1c-f92094e2e026/dynamic.js?host=study-assistantph.com&v=d-1661183947__s-ff183091-151b-47af-9790-8a477e06f4e1
200 OK 0 B URL HTTP/2 cdn.dmtgvn.com/wrapper-builder/eb107cdf-35a2-42a1-9d1c-f92094e2e026/dynamic.js?host=study-assistantph.com&v=d-1661183947__s-ff183091-151b-47af-9790-8a477e06f4e1
IP
ASN #199524 G-Core Labs S.A.
GET /wrapper-builder/eb107cdf-35a2-42a1-9d1c-f92094e2e026/dynamic.js?host=study-assistantph.com&v=d-1661183947__s-ff183091-151b-47af-9790-8a477e06f4e1 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=31536000, public, s-maxage=31536000
content-encoding: gzip
cache: HIT
x-cached-since: 2022-11-03T13:26:05+00:00
x-id: sto5-up-gc14
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 16:43:55 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:58 GMT
etag: W/"634eb2c6-32d9"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4871
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z6LMtX15aJ7NNyOeGCjpijhzI3GuTZwD%2BCcdfmB4m%2FAdIX0COnqK4GR15hWOidZtSPjETAq%2FwMok0Zddb15O%2BkOt%2B1oruYSMkJvJhoQxCVAkc4qVVoC51K%2B6Wa6KXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76570d18f9feb529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.157.190
23.36.76.226
104.18.32.68
213.19.162.51
158.160.4.42
92.223.84.84
77.88.21.119
37.252.173.62