study-assistantph.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: study-assistantph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 20 Sep 2022 00:05:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 20 Sep 2022 01:05:05 GMT
Location: https://study-assistantph.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cOFUmMHbGwl2TncX6HXKC5anWDYe4qgQVHRQz2Esrgd5vIeBTMM2FlvTFR9Xn5yh4Z8SUw0muUiYJJjpI6LzxRxRlHymT2SMOJXGYvHS8pc9x2s0SCc6JDH%2FeEZtmbAP%2FUPKI5AVpyQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d64eb28dfbb51b-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 19 Sep 2022 23:12:59 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Fyn48z93xJ_3kEXRA_wDKFp5G_yFBNL4YnAXT6IAy3YIpxEJB6UTNg==
Age: 3126
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14967
Expires: Tue, 20 Sep 2022 04:14:32 GMT
Date: Tue, 20 Sep 2022 00:05:05 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 19 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8RTDVHXlD9GmfaFJS4sZppUTDG6H1wEhqfnBUsZeSc1lnh6cQ9YP8Q==
age: 70192
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
study-assistantph.com/
200 OK 57 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (64951), with CRLF, LF line terminators
Hash 526293ba49daee9f48a7031fa0c81a17
9e9da98763287875cedc8f8f1f2ad34acdee6330
719d9071ef85c10ec7417645e3ce5bd801d9c9e172f99d6e6afdf69c5e6ee10c
GET / HTTP/1.1
Host: study-assistantph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 20 Sep 2022 00:05:05 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=86400
expires: Wed, 21 Sep 2022 00:05:05 GMT
cf-cache-status: EXPIRED
last-modified: Sun, 18 Sep 2022 02:38:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=axE6kmoXVlGSF4SA4eo0c%2BRo1Y7JVElNDyD83pBENEWwFfaP3O1yGcT%2FvcKpAB5x%2FwAaPhWAwBv8fU%2BmA9q8S2AypKtlBZQno7n1s%2B%2FIffDfm%2BlnyTtyGvfimvSMpp%2BysRR94cStiXk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d64eb498a31c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5794697f4c18241207a68c750605cfd4
59bc5002135dc0067256d1d284b2ca2c0759d3e6
882e9e2b2f24134c41e7338a865d80bfd89ab062960a8809d80170cbdd0a5484
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "882E9E2B2F24134C41E7338A865D80BFD89AB062960A8809D80170CBDD0A5484"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16489
Expires: Tue, 20 Sep 2022 04:39:54 GMT
Date: Tue, 20 Sep 2022 00:05:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f50ad51dfab88e969f3d47bf0f7fe1cb
5a5b53913bb4a1686b1a528e3777206eaa2e03b1
2b2df5508ee1ca0dd91702b167a504fbb734fcc373b7450d414b5a2ffea52ea0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2B2DF5508EE1CA0DD91702B167A504FBB734FCC373B7450D414B5A2FFEA52EA0"
Last-Modified: Sun, 18 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20791
Expires: Tue, 20 Sep 2022 05:51:36 GMT
Date: Tue, 20 Sep 2022 00:05:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8b471cd7504081f077d1f6392837d5b5
619ecddc751b2e0bbce5a359cfc078803ced426d
efc75260b76cbe43f8124fa83f7eb7bce6f9461d8d7146e6d3e6f85071ecece8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EFC75260B76CBE43F8124FA83F7EB7BCE6F9461D8D7146E6D3E6F85071ECECE8"
Last-Modified: Sun, 18 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2263
Expires: Tue, 20 Sep 2022 00:42:48 GMT
Date: Tue, 20 Sep 2022 00:05:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 20 Sep 2022 00:03:22 GMT
Expires: Tue, 20 Sep 2022 00:46:46 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wJMiyf-hZCzzT3arMMS8bl-2Xp3Av6iVEXpUSR-9PKHgLmKxIqhR7Q==
Age: 103
loulouly.net/zone?pub=0&zone_id=3914651&is_mobile=false&domain=study-assistantph.com&var=&ymid=&var_3=
200 OK 758 B URL HTTP/2 loulouly.net/zone?pub=0&zone_id=3914651&is_mobile=false&domain=study-assistantph.com&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (757)
Hash 35d92b5d2052d00687b0de0ce3437c71
ddade391e18342b326efdce9712c310a23a0a91a
78152fe7e8ba4c6727d4bfa45b0374a29abf508bcdafbbcf1430fa1fe5383057
GET /zone?pub=0&zone_id=3914651&is_mobile=false&domain=study-assistantph.com&var=&ymid=&var_3= HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:05 GMT
content-type: application/json; charset=utf-8
content-length: 758
x-trace-id: 0ea5b3f08e098d08b813e76c7274a0c7
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 12 kB IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (32771), with no line terminators
Hash a76321fdfb4679b2ad455c100854afe2
42e5d48fad8d51eed5284f045d32ddbb132c8f0e
2a432decda68cccdad60d034feca0ef17cb20e58c280e768cd37571dda40b909
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: application/javascript
last-modified: Thu, 04 Aug 2022 15:18:11 GMT
etag: W/"62ebe333-8007"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1341
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FkzBQagul8RS%2FczlI9CHK%2BFDppAqGLh%2FCFcWpxAFb4WI9kQeDf1yGAwHbeSY2HIDlolCXj8FQWxOAe3eTRCse4ovUqnxKfgM2YHVsPrrac%2BwrVI%2FAkRvYLUqXPD27Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74d64eb8ced1b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
loulouly.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
loulouly.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Content-Type: application/json
Origin: https://study-assistantph.com
Content-Length: 379
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 28f97ae5ce9151af2d8dbcd5a754f2ae
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 585dd5d7d893fe24584ec5017f884c1c
752ed842176edc698e709b2b7a7cf875b66d137e
a3baa3e3cf54c02baaa2822832f8f03b87cbe35e1d1109bb0d4343542b90f45f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3BAA3E3CF54C02BAAA2822832F8F03B87CBE35E1D1109BB0D4343542B90F45F"
Last-Modified: Mon, 19 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9727
Expires: Tue, 20 Sep 2022 02:47:13 GMT
Date: Tue, 20 Sep 2022 00:05:06 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 75925b52065e8c40d078aee85c947946
72219bfe4412de462135af38de924431a60cd5f5
e4931e694c717412c066464f1c206f1049ebe3fa70270dd550c84129e49b68bb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 00:05:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 06:25:21 GMT
Expires: Mon, 26 Sep 2022 06:25:20 GMT
Etag: "72219bfe4412de462135af38de924431a60cd5f5"
Cache-Control: max-age=540613,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74d64eba7f16b523-OSL
my.rtmark.net/gid.js
200 OK 1.2 kB IP
Hash 7db003cd2ab8bab5985eb7d9bc28e139
4999f94289e078fc95f1b60bc05e04876bab90ab
f7f5086125050586622f5cb47a603d77ad863c97b32d6968000d03e050c79f04
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://study-assistantph.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=9340a6169a564c08a8a353906e6f3e57; expires=Wed, 20 Sep 2023 00:05:06 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
cdn.betgorebysson.club/apu.php?zoneid=4493436
200 OK 968 B URL HTTP/2 cdn.betgorebysson.club/apu.php?zoneid=4493436
IP
File type ASCII text, with very long lines (801)
Hash 6488d2d9ffca075b8108321f2b7a4d6b
a156377867fd73dd6fd736641cefe24c1cc78ea5
ff998a4f03bbd94d352c41d6a10a3da73de2c1e907e6d12657d7514663bd271a
Analyzer Verdict Alert fortinet Malware
GET /apu.php?zoneid=4493436 HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: application/javascript
content-length: 968
x-trace-id: e2bbab5c9b0ffad927b6526eb3a56ca9
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=3c6da6cf826345cea4352a9e4967e583; expires=Wed, 20 Sep 2023 00:05:06 GMT; path=/; secure; SameSite=None
oaidts=1663632306; expires=Wed, 20 Sep 2023 00:05:06 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QmFCy15IqokztTEaqU5KzA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eDP4gHhnBHFpOyj7N+XC3juDueA=
cdn.dmtgvn.com/wrapper-builder/placement/d3569df2-db2e-46af-b0c2-a97b7f18e4d4?v=d-1661183947
200 OK 659 B URL HTTP/2 cdn.dmtgvn.com/wrapper-builder/placement/d3569df2-db2e-46af-b0c2-a97b7f18e4d4?v=d-1661183947
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (2917), with no line terminators
Hash 9d137165347debe41ce65b8f0c43cb03
2d0cef50d5804a63b39ac91eabc614e803f01155
89f552bea15f981ad57c72a259422bc001a8d4fc02e013519b33e501c902ae12
GET /wrapper-builder/placement/d3569df2-db2e-46af-b0c2-a97b7f18e4d4?v=d-1661183947 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: application/json
cache-control: max-age=31536000, public, s-maxage=31536000
access-control-allow-origin: *
content-encoding: gzip
cache: MISS
x-id: sto5-up-gc14
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash d6144873d1b3d01ecb0e648fb059a630
bfa916db8299f289317b6975b240ea3aa3594df6
a2bea9d0219022fec4ce3a1b79a4575cbfa4d060b33de5ae36e164e9983993fa
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 00:05:06 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 00:52:18 GMT
Expires: Mon, 26 Sep 2022 00:52:17 GMT
Etag: "bfa916db8299f289317b6975b240ea3aa3594df6"
Cache-Control: max-age=520630,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74d64eba8aa9b524-OSL
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://study-assistantph.com
Content-Length: 1518
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 20 Sep 2022 00:05:22 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://study-assistantph.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
eehuzaih.com/500/5041469?excludes=&oaid=9340a6169a564c08a8a353906e6f3e57&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 1.6 kB URL HTTP/2 eehuzaih.com/500/5041469?excludes=&oaid=9340a6169a564c08a8a353906e6f3e57&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash bf3806d1ce4ff69eed891f03a780df7b
8d8b7222ec0578e3e53600c75bc22b350e7e8966
af28ae3fdcc536cb561b867648d1e27c9b2647f8415f84a489dd1b6dd7cfd0fe
GET /500/5041469?excludes=&oaid=9340a6169a564c08a8a353906e6f3e57&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fstudy-assistantph.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Cookie: OAID=f1e894939fb34a378f749837fcd0f587
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: application/javascript
x-trace-id: 4517050d43c5dd55dc028841246a8f4d
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://study-assistantph.com
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=9340a6169a564c08a8a353906e6f3e57; expires=Wed, 20 Sep 2023 00:05:06 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagservices.com/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (45174)
Hash 5ad4ccd298e46c9ce3a3a12e930759c8
5b5d879637762b4944144d8823482b4bd3760e1a
0ea8b83fbbc9459ae43a812071bd250602b35cdcf6aed6c16d424be90ac9d5da
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27761
date: Tue, 20 Sep 2022 00:05:06 GMT
expires: Tue, 20 Sep 2022 00:05:06 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1339 / 517 of 1000 / last-modified: 1663625460"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper-builder/placement/4ff18346-1bc6-4f5c-915c-d367f8a53b59?v=d-1661183947
200 OK 196 kB URL HTTP/2 cdn.dmtgvn.com/wrapper-builder/placement/4ff18346-1bc6-4f5c-915c-d367f8a53b59?v=d-1661183947
IP
ASN #199524 G-Core Labs S.A.
Size 196 kB (196253 bytes)
Hash 1b05d0c603c554953a7eaff1f2187170
7ab0b50538537fff24c6217491d56d93adeb9446
0bd733a56d9790151369a35f77c9777668dcc041020e4c1022791a1a63fdfab8
GET /wrapper-builder/placement/4ff18346-1bc6-4f5c-915c-d367f8a53b59?v=d-1661183947 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: application/json
cache-control: max-age=31536000, public, s-maxage=31536000
access-control-allow-origin: *
content-encoding: gzip
cache: MISS
x-id: sto5-up-gc13
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dda77a44a7f9eeb9bd828f659ccb7e22
9af43f88835600fd3206e4f18b0c1c2571a3959c
c8effed6366a20b26e104fc4f64d24213eb357d61e7683e28f812d0c21edd044
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 7b15c4fa01f39c75df5e42b5ad9caf58
d737512ddefb61725862dcc7d9b3688a33380449
025255a9924ffa0693f1955b91bb69991b6e66f7b68068fcff67b7550a7dc6a4
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 00:05:06 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Fri, 23 Sep 2022 21:53:51 GMT
ETag: "d737512ddefb61725862dcc7d9b3688a33380449"
Last-Modified: Mon, 19 Sep 2022 21:53:52 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1318
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d64ebdc8a4b4f7-OSL
securepubads.g.doubleclick.net/pagead/ppub_config?ippd=study-assistantph.com
200 OK 80 B URL HTTP/2 securepubads.g.doubleclick.net/pagead/ppub_config?ippd=study-assistantph.com
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bad65bf0d2b16eb724d34890dbf4da18
8399ed72214bea959a09aaf46a655bc1b66d880a
1c24ee737a67c152ebe9932e7b251247f09f631ec4f54de80658075964e20287
GET /pagead/ppub_config?ippd=study-assistantph.com HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
date: Tue, 20 Sep 2022 00:05:06 GMT
expires: Tue, 20 Sep 2022 00:05:06 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 80
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Sep-2022 00:20:06 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/gpt/pubads_impl_2022091401.js?cb=31069627
200 OK 131 kB URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022091401.js?cb=31069627
IP
File type ASCII text, with very long lines (65439)
Size 131 kB (131297 bytes)
Hash 56cf78d031d137c5a359c64a0dd83eee
f14145d2e6198e061ef98c0007da57cb77687821
ca3e73f094cb4fd2b2090ac2f03be0c7c76ebc5ab4fe511d0253228443c150ac
GET /gpt/pubads_impl_2022091401.js?cb=31069627 HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 131297
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 10:48:17 GMT
expires: Thu, 14 Sep 2023 10:48:17 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Wed, 14 Sep 2022 08:37:15 GMT
content-type: text/javascript
age: 479809
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fa65e4428adb73fd14d3e23085784699
00f883ce942c6c1be5e8e39d8ebe126de77dbadf
8eb4b4b2d5dc9f17570f22fc0afdf63d1fc80cc0aa37ad77cc81d52dda2bc281
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81fa7001b4b94f54d2ab4f3237ecaabb
e21bb07f34d9bed91f5caac3f9a83e9600a5652c
0ecbe6e0c5198d792a0eeb4197c88ec1d3a9f8b215efae7a6bb87776f7673b6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=study-assistantph.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=study-assistantph.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=study-assistantph.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 00:05:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=study-assistantph.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=study-assistantph.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=study-assistantph.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 00:05:07 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 72 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (681)
Hash 034d4604beaddff5783b9878fadfaee6
64d5e1e0dbbbd62d6a64349dd964763b7ab4cbea
f8a957ee3468693f465da61d899438a2b674369b80c9d5c9ffff1111a7091290
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 71985
date: Tue, 20 Sep 2022 00:05:06 GMT
access-control-allow-origin: *
etag: "6323e622-11931"
expires: Tue, 20 Sep 2022 01:05:06 GMT
last-modified: Fri, 16 Sep 2022 05:57:38 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81fa7001b4b94f54d2ab4f3237ecaabb
e21bb07f34d9bed91f5caac3f9a83e9600a5652c
0ecbe6e0c5198d792a0eeb4197c88ec1d3a9f8b215efae7a6bb87776f7673b6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 347 B IP
Hash d006cba327881889d13c3b56f915a574
da4432e0d4c2a9749756b34a8a6c17606aaaeec5
a8a2b396b04a5fbe4d495f48e9ee3f3b46340194bfe03d0e997aed5a3babffe3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9c3bd2e46bc3d925714633f329a1afca.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
200 OK 3.1 kB URL HTTP/2 9c3bd2e46bc3d925714633f329a1afca.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5835)
Hash 3fa5e95a358d660ddb3c45769ae1357f
5f6164fbaf8cfbccfd061b00ae48dedfc16bbcd9
d32f4b680031c0e11222eb17385aa9d3b11d2903b05bff34c3d4eb6292631137
GET /safeframe/1-0-38/html/container.html HTTP/1.1
Host: 9c3bd2e46bc3d925714633f329a1afca.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 3108
date: Tue, 20 Sep 2022 00:05:07 GMT
expires: Wed, 20 Sep 2023 00:05:07 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 02 Mar 2021 20:17:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
loulouly.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Content-Type: application/json
Origin: https://study-assistantph.com
Content-Length: 740
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:07 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 4e7368647fb8b8bcba56c3187a6ca9cc
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1d13fc88355dd2c1d95b41c427ee8cd3
92737e60d55c4ddfd14a0f0bcc493ab272811c9f
234cb8cfbd31c3ef1ba5fdabe7751534c2b5134926636218b0d57be3b3bbe26d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6526
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:07 GMT
Last-Modified: Mon, 19 Sep 2022 22:16:22 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 1d13fc88355dd2c1d95b41c427ee8cd3
92737e60d55c4ddfd14a0f0bcc493ab272811c9f
234cb8cfbd31c3ef1ba5fdabe7751534c2b5134926636218b0d57be3b3bbe26d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6526
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:07 GMT
Last-Modified: Mon, 19 Sep 2022 22:16:22 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=ccd18fbd-588f-4d1e-a829-ea9c9b66b449&l_pb_bid_id=28b17218a798ff8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7519044416256739
200 OK 312 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=ccd18fbd-588f-4d1e-a829-ea9c9b66b449&l_pb_bid_id=28b17218a798ff8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7519044416256739
IP
File type JSON data\012- , ASCII text, with very long lines (312), with no line terminators
Hash 308b876a7096f850c1d8d4bd9d2434b0
97e95c08950f709d8c1437a2e9147ba1bd48de21
5c83c8970af14492e42c790ea097d95dba85d7429c0c0cffac53a8db0b58aab4
GET /a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=ccd18fbd-588f-4d1e-a829-ea9c9b66b449&l_pb_bid_id=28b17218a798ff8&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.7519044416256739 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 20 Sep 2022 00:05:07 GMT
Content-Type: application/json
Content-Length: 312
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L89FPZUT-26-EDCN; Domain=.rubiconproject.com; Path=/; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qoU5iV6+n8iKe9DtVM30fCgHmDpBZ9d97k3KNkImsYnqT9zvlSxEea9VeuKsLvX3bPAUJ+gL7gixUujLKVOyBtu/R7Fz5/Qhm0=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=2b5a341c-d3cc-43e5-a720-66c3026396b1&l_pb_bid_id=859f40d46e09178&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.0640106275712341
200 OK 304 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=2b5a341c-d3cc-43e5-a720-66c3026396b1&l_pb_bid_id=859f40d46e09178&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.0640106275712341
IP
File type JSON data\012- , ASCII text, with very long lines (304), with no line terminators
Hash 4c09b0d5db82cd2e67c076b8ba83e214
1bc7e2088d94ad0722ea5fe15b1b96e9fea409c4
fd0bb6257c9732cb06ca8430e9bc2d05a1487a39f79298c8ae0585c7af2f5aaf
GET /a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=2b5a341c-d3cc-43e5-a720-66c3026396b1&l_pb_bid_id=859f40d46e09178&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.0640106275712341 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 20 Sep 2022 00:05:07 GMT
Content-Type: application/json
Content-Length: 304
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L89FPZV3-A-CMDJ; Domain=.rubiconproject.com; Path=/; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrWYvFEwq8BHu9DtVM30fCgHmDpBZ9d97k3KNkImsYnqT9zvlSxEea9VeuKsLvX3bPAUJ+gL7gixUujLKVOyBtu/R7Fz5/Qhm0=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5e4087fca3a035991e26797a4112b450
2c021ddf5082a80666dc805b758010a994fcea4f
223f2d55820c8a6d7bf6b42cb8172e417c923f40ee5eb995cc27bb6f09142145
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 476
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 20 Sep 2022 00:05:07 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
AN-X-Request-Uuid: 3a8cd7e1-3170-4c07-a888-d961876133bb
Set-Cookie: icu=ChgIx9p7EAoYASABKAEws4ekmQY4AUABSAEQs4ekmQYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Dec-2022 00:05:07 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=376336931643380802; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Dec-2022 00:05:07 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 704cd59418264b542c423510c351fe89
7308cc30dfe49acc05daf6c2c808813f9a4d8f9a
3ae1a9dda9a2e85d2a3ecb05a084f8da3ca9f12f76183bf6c3e4187047a90bee
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 611
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 20 Sep 2022 00:05:07 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
AN-X-Request-Uuid: 2da3f825-1dc4-4486-81db-62c76046e4e8
Set-Cookie: icu=ChgIx9p7EAoYASABKAEws4ekmQY4AUABSAEQs4ekmQYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Dec-2022 00:05:07 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=4288486297794801945; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Dec-2022 00:05:07 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022091401&st=env
200 OK 11 kB URL HTTP/2 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2022091401&st=env
IP
File type JSON data\012- , ASCII text, with very long lines (14749), with no line terminators
Hash 56eabb31f829072893418c7e7ff585d5
a1639078981017a0d88c039a90fcccbf8cbcc7d3
c9beaeb64d6ab76fb73039f369d44b5638e00bff94f6870c28e1b988cd31bb45
GET /getconfig/sodar?sv=200&tid=gpt&tv=2022091401&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 20 Sep 2022 00:05:07 GMT
server: cafe
cache-control: private
content-length: 11197
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 20 Sep 2022 00:05:07 GMT
access-control-allow-origin: *
etag: "6323e622-2b"
expires: Tue, 20 Sep 2022 01:05:07 GMT
accept-ranges: bytes
last-modified: Fri, 16 Sep 2022 05:57:38 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/88477929/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A92991173029%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000447%3Aet%3A1663632287%3Ac%3A1%3Arn%3A850816841%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C%2C%2C%2C876%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632287%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/88477929/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A92991173029%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000447%3Aet%3A1663632287%3Ac%3A1%3Arn%3A850816841%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C%2C%2C%2C876%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632287%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash cabf150daeba3d3b9e42fb364fce3ca7
e1ccc93325c63430ab0134132bac50a4cd4ff361
63bfeb88ac89949f8dc401c0a9e7500e5cbdabaedafe5e4204f9ce471bda1a19
GET /watch/88477929/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A92991173029%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000447%3Aet%3A1663632287%3Ac%3A1%3Arn%3A850816841%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C%2C%2C%2C876%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632287%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Referer: https://study-assistantph.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 20 Sep 2022 00:05:07 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 20-Sep-2022 00:05:07 GMT
last-modified: Tue, 20-Sep-2022 00:05:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19111
Expires: Tue, 20 Sep 2022 05:23:38 GMT
Date: Tue, 20 Sep 2022 00:05:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19111
Expires: Tue, 20 Sep 2022 05:23:38 GMT
Date: Tue, 20 Sep 2022 00:05:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19111
Expires: Tue, 20 Sep 2022 05:23:38 GMT
Date: Tue, 20 Sep 2022 00:05:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19111
Expires: Tue, 20 Sep 2022 05:23:38 GMT
Date: Tue, 20 Sep 2022 00:05:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19111
Expires: Tue, 20 Sep 2022 05:23:38 GMT
Date: Tue, 20 Sep 2022 00:05:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01e64380-4337-479f-95be-13bf7c9e4ba1.webp
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01e64380-4337-479f-95be-13bf7c9e4ba1.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1bda5f699b90aa7303c8804027fd7ebf
5df2a7908f1892a49da9b4c3b866826f2dc19196
8fb596a87289aa77344bed71691f6de0ecbaece8868634593c15c27ccef85013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01e64380-4337-479f-95be-13bf7c9e4ba1.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10982
x-amzn-requestid: bf24c1e2-2a07-4dd6-b842-9d44b87c9fb7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yug2JGyeoAMFqBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e1c0-4fc8fdf2243829fa034478dc;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:40:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0PhtlkDftlGaCHWn03vWvOBAoIuzvpOzMI8j-AtOWozauUl8pkN0Uw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:08:19 GMT
age: 7008
etag: "5df2a7908f1892a49da9b4c3b866826f2dc19196"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/88477929?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A92991173029%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000447%3Aet%3A1663632287%3Ac%3A1%3Arn%3A850816841%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C%2C%2C%2C876%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632287%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 165 B URL HTTP/2 mc.yandex.ru/watch/88477929?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A92991173029%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000447%3Aet%3A1663632287%3Ac%3A1%3Arn%3A850816841%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C%2C%2C%2C876%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632287%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
Hash 0d66fe6cfc1d049e7f7caab8bfb333a2
9f5a2db48cb2f882c8b77418102f64c2f3d1090b
c895efbdc63a9e35bc74066f81d2f7a922389766e9b5fb5a9715ba7e3c6c0a74
GET /watch/88477929?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A92991173029%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000447%3Aet%3A1663632287%3Ac%3A1%3Arn%3A850816841%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C%2C%2C%2C876%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632287%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/88477929/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A92991173029%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000447%3Aet%3A1663632287%3Ac%3A1%3Arn%3A850816841%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C%2C%2C%2C876%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632287%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 20 Sep 2022 00:05:07 GMT
access-control-allow-origin: https://study-assistantph.com
set-cookie: yandexuid=1032535771663632307; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1032535771663632307; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=716802071663632307; Path=/; SameSite=None; Secure
i=JlKsG86q9G83KDjU8KQS6vQskpBKBj43Wz0koo4Vr8kuKllI+WRqpJ+UEqyxYo6c9dEX5aBAsGWIQ+FMOw3qz874HsE=; Expires=Fri, 17-Sep-2032 00:05:01 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1695168307.yrts.1663632307#1695168307.yrtsi.1663632307; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 20-Sep-2022 00:05:07 GMT
last-modified: Tue, 20-Sep-2022 00:05:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32d94aa1-e164-4f98-8fe2-beb3868db074.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32d94aa1-e164-4f98-8fe2-beb3868db074.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f4438521bfdc6871ae384abcb7da547
a17fc7a7c30999b8789011c2064f5a8704b00eee
2e40ac154724af625c4858b09b90fa3f6a600b70c9e5e959598f0cdb05a78847
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32d94aa1-e164-4f98-8fe2-beb3868db074.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5402
x-amzn-requestid: 0442580c-9024-46b1-8ad5-5c7e8d35371d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfMALHT2oAMFmgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322c067-254ecd9003455f090f7d5ef9;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 06:04:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Y4IeHZWMs_JdT2dG8d3BNqpxvU3lcYDsXub1CuCoVBxzTPsjuU_5Ww==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 18:11:38 GMT
age: 21209
etag: "a17fc7a7c30999b8789011c2064f5a8704b00eee"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d4d388-444f-41e8-a237-12a4557dec2d.webp
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d4d388-444f-41e8-a237-12a4557dec2d.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0af641b07f0f07dcc59bd86a318b581c
02f67cf9f3465a09af8ee2501199976cfad69b64
0187ad25bfa48228ece4686f4fa2e9c65095806fa5a6358b0e16c85907eb287f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d4d388-444f-41e8-a237-12a4557dec2d.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8318
x-amzn-requestid: ed1e73fe-eb19-452a-9f8b-e1bf5eb5fa72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugHuEzeIAMFz6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e097-529db9d95a91ad965445caf2;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yQ_DyFTMD1g9ORVMBH4yg9AeulqOUm5KHLFQ5Y8m9HS9NwW73acEkw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 21:48:55 GMT
age: 8172
etag: "02f67cf9f3465a09af8ee2501199976cfad69b64"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbdf1293-7221-4e73-bb22-17a56bdc7f27.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbdf1293-7221-4e73-bb22-17a56bdc7f27.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd3eea4b2c2b9f4f8dcfe0c0b8e97fb3
3083eba7b12b01b52a06b8083aede4db64c80e2a
d6f34a71a7783922bc41018e99b42ae624a793dd5e3320aaa32836af8da5bb91
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbdf1293-7221-4e73-bb22-17a56bdc7f27.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11613
x-amzn-requestid: 79200307-be8b-4ad6-b365-bdb284f9d69c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfWItHMDIAMFwDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322d09d-6e80fc0600130e043fde5bcc;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:13:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: JhguJugImKeTXL3Ffhu0LJka6NYEV0FVtbSEcMrW6iBZNOKX26RAow==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:40:25 GMT
age: 5082
etag: "3083eba7b12b01b52a06b8083aede4db64c80e2a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ec72756-f2e1-44f8-aa98-1c6a799bb7ed.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ec72756-f2e1-44f8-aa98-1c6a799bb7ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8d91327dd43c24db55b55b0f08ab0cfc
4505d78974d054f85098db4595c645ffd2a6eb18
0c110f43d68da8ed1188d5d4f40189cf9932cb3d30a08ec81a2cff0c65a0a7d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ec72756-f2e1-44f8-aa98-1c6a799bb7ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4953
x-amzn-requestid: 3876ff6e-17b7-47d8-a47e-77b4c39168dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugqeFPuIAMF_Mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e176-7a3a28941c288116612622b5;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:39:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Unh4L7-38x8UlLnDTtlulwftIqvLPGwhEpG-O7iKd5fQV3_2A1ZhFA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:08:46 GMT
age: 6981
etag: "4505d78974d054f85098db4595c645ffd2a6eb18"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 15f2e4d43b738892fbb148aa4080c353
82339187aa5d216091d6ef61be63ed476aed8773
fd0178eb6ee7fed2113f20dc523431c0126de3e47d10065044f1fc58246df7aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ed7323b395e757f7766ea0045efdaca
8b91bc3069a3217bc719c27959d578b353b5d9dc
8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gLh2EBTPdXvFtZuYKH1NVZebvnz4Rhs-f_rZPtfJpIWNemEk0upeOQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:43 GMT
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
content-type: image/jpeg
age: 6924
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Tue, 20 Sep 2022 00:05:07 GMT
expires: Tue, 20 Sep 2022 00:05:07 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Sep 2022 16:23:47 GMT
expires: Mon, 18 Sep 2023 16:23:47 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 114080
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/bg/TqLSXP2QDMWDWbVwNGV4qZSIp1FuubJasGgalfjGHZY.js
200 OK 16 kB URL HTTP/2 pagead2.googlesyndication.com/bg/TqLSXP2QDMWDWbVwNGV4qZSIp1FuubJasGgalfjGHZY.js
IP
File type ASCII text, with very long lines (36115)
Hash c22d8c04a3337fc2c94cc14959c63827
4b08ea9515e1e851ea7943d81bd54acc53df01a2
9b78ffe2b084d9bfc3041787ae7761221ac6cb0766f050c65f8d9266eddcebd8
GET /bg/TqLSXP2QDMWDWbVwNGV4qZSIp1FuubJasGgalfjGHZY.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 16105
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:25:12 GMT
expires: Thu, 14 Sep 2023 19:25:12 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Sep 2022 10:48:00 GMT
content-type: text/javascript
age: 448795
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c53364cae0510b97de38fb4b3396ff56
d6088b7fe775ebc077d116271fbe7fce898c06f0
2df909d86d97fbb9a27dd94ca9335ea29eae8f9325fccc8d0ef00a4f7cd7cdc6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 514 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 582fe985e6f6f9991a15b526861990d9
c978d236f5ca63ee8a720ce101fcfcc841e0fc67
3d71579a0db3eebf8c025380061c1cf009e8cfb9061c75c28f2c66b4cb722e4e
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Tue, 20 Sep 2022 00:05:07 GMT
date: Tue, 20 Sep 2022 00:05:07 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-zmUOu9YgOJQUVm85OGNrZw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 514
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb22fc6cb5234b4d69d7e92c7a8aa47b
0ce6c83821dec02774b86dee40d9cbae10d15de8
9d12be2b3b49058c531232d8d4412aecf1e66d565179a9a2291bb496ecadd7ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9D12BE2B3B49058C531232D8D4412AECF1E66D565179A9A2291BB496ECADD7ED"
Last-Modified: Sun, 18 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4088
Expires: Tue, 20 Sep 2022 01:13:15 GMT
Date: Tue, 20 Sep 2022 00:05:07 GMT
Connection: keep-alive
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gpt_2022091401&jk=1650936074062713&rc=
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gpt_2022091401&jk=1650936074062713&rc=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&li=gpt_2022091401&jk=1650936074062713&rc= HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 00:05:07 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
worker.sttsmntz.ru/stats/format
200 OK 230 B URL HTTP/2 worker.sttsmntz.ru/stats/format
IP
File type JSON data\012- , ASCII text
Hash fcd68ef3d87af29c35c94ecbc51c2a49
e662ba5518d99745761ff46627c67cfd2492b1f2
690aa7d664bdb39265afe966dd0a8d9ccb33c59adca9db3035378877f4559885
POST /stats/format HTTP/1.1
Host: worker.sttsmntz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 223
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ycalb
date: Tue, 20 Sep 2022 00:05:07 GMT
content-type: application/json
content-encoding: gzip
content-length: 230
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
X-Firefox-Spdy: h2
worker.sttsmntz.ru/stats/format
200 OK 230 B URL HTTP/2 worker.sttsmntz.ru/stats/format
IP
File type JSON data\012- , ASCII text
Hash a0acaa05579a68a7b12c69cab6e51973
dcb046da7d65b9cb85e9a4d39aa3b92804b7d123
98cedceab2f0fdf4c3466f0bf241c5669fc7a97072fb0ab72b6f81cd40116266
POST /stats/format HTTP/1.1
Host: worker.sttsmntz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 223
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ycalb
date: Tue, 20 Sep 2022 00:05:07 GMT
content-type: application/json
content-encoding: gzip
content-length: 230
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71915284/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A2%3Adp%3A0%3Als%3A1477506400685%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000448%3Aet%3A1663632288%3Ac%3A1%3Arn%3A369575465%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C2343%2C2343%2C2%2C876%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632288%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/71915284/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A2%3Adp%3A0%3Als%3A1477506400685%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000448%3Aet%3A1663632288%3Ac%3A1%3Arn%3A369575465%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C2343%2C2343%2C2%2C876%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632288%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash d48c83907e2b0537ae0a2f980430fe51
1402efb0937222d0e6486e06aaa32ea04d143d3c
0c6de8c402f9bcf51a10ab5ad8733e34ad61bfcf917efbd301c10a634683559a
GET /watch/71915284/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A2%3Adp%3A0%3Als%3A1477506400685%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000448%3Aet%3A1663632288%3Ac%3A1%3Arn%3A369575465%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C2343%2C2343%2C2%2C876%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632288%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Referer: https://study-assistantph.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 20 Sep 2022 00:05:08 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 20-Sep-2022 00:05:08 GMT
last-modified: Tue, 20-Sep-2022 00:05:08 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gpt_2022091401&jk=1650936074062713&bg=!-Pul-7_NAAZqQh0mSkI7ACkAdvg8WqaYZgxIR6SyrKCvYNJ0kWfIQZJWWJG6sDpskW3R9A8NNIimswIAAAC_UgAAAAJoAQcKAFugG-_cT2EwFFqZBxMNNvhmavOiNTEKG1xXBeoz6PXHFmoNEZ_-mdvOK7Igpd1X6oXqyelzECEEnB6S3lzjrANpvq0MHgasGBmZp7P8l3fHSwu65qUvO5xMkyOImQKA54Dn0Y7lY-ECyWxBhW3F8eAvZju_sM_tT1ndA3A76u-TutmSboqnkxvtE-IY-QO9ikq-8WfKCoxozkblr94AAOH-0jyo6K1MNz0kfoeyekXGFtRKC34VHiGVQyt8LJ1dhpKaa8_99afv3Kz9XHxB3pU3knzjUkJqLVHhFmUregv3a8dayCQun2kGmqj1u6X6GmvykMYRiN7PLfEZOC6MU9a5sHIPTf2-QzwQwgirxXKAcJ1ux4LT_ZjOeEFPaYo1iyjlSlPDhstM3uM-SVPeRy9XuefXOZvQCaVzZSLdXnngidMRDA-msOqQ1Svu1v-J0fLlkjs08rBUuzHQo1UFPvWKmd7EHOkvV7phxpkeTX8JXi_xvdELlSd8QLDbW0q7CoxD33A_ISkfu5PZ_yVrJra-vpm8zUjiWIzGvwwA1HywBDGXeJ3pRM9VamJy_rQc3BhNBPYqr_JVCVNFwysSu9ckvcmXBbDTur8PNb5JiT7eAV2jsSiC4JAG5eCDyjFPqJnCiAMFBxco53nb4Z5180cPzj-zFjs-fb4_PUVYBUVSJcQqHovnwE_6MRSJ2OME_XqaOvd8Zs1AhI6x6kSSnbAVqwER9STz47axUyO70-AD9AKCnTbDjRA0nia3zz6Pne8RNaQj70zs_2D634uoGHynyDikJ_3uSNNfTzZbRKwTZsc-5SScvu3581bIE_YFOEJ41PE3F3oxTvhGl-_0dQjoVic0RHpHEUTwMsgd8KDylROuxWS7WFWTlAVkxly0VvSXF-0wEjAB4rdG8Yn7w55fV-gFvXAyVbuDEMDk0s_0lvd9mfCEOcOmYOCSKbqbq3IHeaSQ9cFH-20arTPU-w
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gpt_2022091401&jk=1650936074062713&bg=!-Pul-7_NAAZqQh0mSkI7ACkAdvg8WqaYZgxIR6SyrKCvYNJ0kWfIQZJWWJG6sDpskW3R9A8NNIimswIAAAC_UgAAAAJoAQcKAFugG-_cT2EwFFqZBxMNNvhmavOiNTEKG1xXBeoz6PXHFmoNEZ_-mdvOK7Igpd1X6oXqyelzECEEnB6S3lzjrANpvq0MHgasGBmZp7P8l3fHSwu65qUvO5xMkyOImQKA54Dn0Y7lY-ECyWxBhW3F8eAvZju_sM_tT1ndA3A76u-TutmSboqnkxvtE-IY-QO9ikq-8WfKCoxozkblr94AAOH-0jyo6K1MNz0kfoeyekXGFtRKC34VHiGVQyt8LJ1dhpKaa8_99afv3Kz9XHxB3pU3knzjUkJqLVHhFmUregv3a8dayCQun2kGmqj1u6X6GmvykMYRiN7PLfEZOC6MU9a5sHIPTf2-QzwQwgirxXKAcJ1ux4LT_ZjOeEFPaYo1iyjlSlPDhstM3uM-SVPeRy9XuefXOZvQCaVzZSLdXnngidMRDA-msOqQ1Svu1v-J0fLlkjs08rBUuzHQo1UFPvWKmd7EHOkvV7phxpkeTX8JXi_xvdELlSd8QLDbW0q7CoxD33A_ISkfu5PZ_yVrJra-vpm8zUjiWIzGvwwA1HywBDGXeJ3pRM9VamJy_rQc3BhNBPYqr_JVCVNFwysSu9ckvcmXBbDTur8PNb5JiT7eAV2jsSiC4JAG5eCDyjFPqJnCiAMFBxco53nb4Z5180cPzj-zFjs-fb4_PUVYBUVSJcQqHovnwE_6MRSJ2OME_XqaOvd8Zs1AhI6x6kSSnbAVqwER9STz47axUyO70-AD9AKCnTbDjRA0nia3zz6Pne8RNaQj70zs_2D634uoGHynyDikJ_3uSNNfTzZbRKwTZsc-5SScvu3581bIE_YFOEJ41PE3F3oxTvhGl-_0dQjoVic0RHpHEUTwMsgd8KDylROuxWS7WFWTlAVkxly0VvSXF-0wEjAB4rdG8Yn7w55fV-gFvXAyVbuDEMDk0s_0lvd9mfCEOcOmYOCSKbqbq3IHeaSQ9cFH-20arTPU-w
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&t=2&li=gpt_2022091401&jk=1650936074062713&bg=!-Pul-7_NAAZqQh0mSkI7ACkAdvg8WqaYZgxIR6SyrKCvYNJ0kWfIQZJWWJG6sDpskW3R9A8NNIimswIAAAC_UgAAAAJoAQcKAFugG-_cT2EwFFqZBxMNNvhmavOiNTEKG1xXBeoz6PXHFmoNEZ_-mdvOK7Igpd1X6oXqyelzECEEnB6S3lzjrANpvq0MHgasGBmZp7P8l3fHSwu65qUvO5xMkyOImQKA54Dn0Y7lY-ECyWxBhW3F8eAvZju_sM_tT1ndA3A76u-TutmSboqnkxvtE-IY-QO9ikq-8WfKCoxozkblr94AAOH-0jyo6K1MNz0kfoeyekXGFtRKC34VHiGVQyt8LJ1dhpKaa8_99afv3Kz9XHxB3pU3knzjUkJqLVHhFmUregv3a8dayCQun2kGmqj1u6X6GmvykMYRiN7PLfEZOC6MU9a5sHIPTf2-QzwQwgirxXKAcJ1ux4LT_ZjOeEFPaYo1iyjlSlPDhstM3uM-SVPeRy9XuefXOZvQCaVzZSLdXnngidMRDA-msOqQ1Svu1v-J0fLlkjs08rBUuzHQo1UFPvWKmd7EHOkvV7phxpkeTX8JXi_xvdELlSd8QLDbW0q7CoxD33A_ISkfu5PZ_yVrJra-vpm8zUjiWIzGvwwA1HywBDGXeJ3pRM9VamJy_rQc3BhNBPYqr_JVCVNFwysSu9ckvcmXBbDTur8PNb5JiT7eAV2jsSiC4JAG5eCDyjFPqJnCiAMFBxco53nb4Z5180cPzj-zFjs-fb4_PUVYBUVSJcQqHovnwE_6MRSJ2OME_XqaOvd8Zs1AhI6x6kSSnbAVqwER9STz47axUyO70-AD9AKCnTbDjRA0nia3zz6Pne8RNaQj70zs_2D634uoGHynyDikJ_3uSNNfTzZbRKwTZsc-5SScvu3581bIE_YFOEJ41PE3F3oxTvhGl-_0dQjoVic0RHpHEUTwMsgd8KDylROuxWS7WFWTlAVkxly0VvSXF-0wEjAB4rdG8Yn7w55fV-gFvXAyVbuDEMDk0s_0lvd9mfCEOcOmYOCSKbqbq3IHeaSQ9cFH-20arTPU-w HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 20 Sep 2022 00:05:08 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71915284?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A2%3Adp%3A0%3Als%3A1477506400685%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000448%3Aet%3A1663632288%3Ac%3A1%3Arn%3A369575465%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C2343%2C2343%2C2%2C876%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632288%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)ecs(1)fip(1)rqnl(1)ti(2)
302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/71915284?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A2%3Adp%3A0%3Als%3A1477506400685%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000448%3Aet%3A1663632288%3Ac%3A1%3Arn%3A369575465%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C2343%2C2343%2C2%2C876%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632288%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)ecs(1)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /watch/71915284?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A2%3Adp%3A0%3Als%3A1477506400685%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000448%3Aet%3A1663632288%3Ac%3A1%3Arn%3A369575465%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C2343%2C2343%2C2%2C876%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632288%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)ecs(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71915284/1?wmode=7&page-url=https%3A%2F%2Fstudy-assistantph.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A772%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A2%3Adp%3A0%3Als%3A1477506400685%3Ahid%3A458257275%3Az%3A0%3Ai%3A20220920000448%3Aet%3A1663632288%3Ac%3A1%3Arn%3A369575465%3Arqn%3A1%3Au%3A1663632287344544342%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1663632285122%3Ads%3A0%2C62%2C179%2C42%2C314%2C0%2C%2C240%2C4%2C2343%2C2343%2C2%2C876%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1663632288%3At%3Ae-Education%20for%20the%20Filipino&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 20 Sep 2022 00:05:07 GMT
access-control-allow-origin: https://study-assistantph.com
set-cookie: yandexuid=4174568041663632307; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4174568041663632307; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=957284721663632307; Path=/; SameSite=None; Secure
i=mkOc28AYa6o6RFvLS+QDB32R1pyZ7splk6lnxSpF5WQ3Sr4sJo33QzW4hDOSSNrFMmtOCxJqw81ut1O1R9j/1sIEF2g=; Expires=Fri, 17-Sep-2032 00:04:49 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1695168307.yrts.1663632307#1695168307.yrtsi.1663632307; Expires=Wed, 20-Sep-2023 00:05:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 20-Sep-2022 00:05:07 GMT
last-modified: Tue, 20-Sep-2022 00:05:07 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e34f594c2e3b9b6a81e4ae9fef80f363
b7f65f5fb0df328d3c863af6c9351923205645f2
bcedda132b602d90a62a5fbe07e7c37f69cce319fb4b84e1bed40b1200e9898b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e34f594c2e3b9b6a81e4ae9fef80f363
b7f65f5fb0df328d3c863af6c9351923205645f2
bcedda132b602d90a62a5fbe07e7c37f69cce319fb4b84e1bed40b1200e9898b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f5180e6651455bc8443945fb5b6860c
01457b8648200c9d274b2790b95274b1dc855aaf
39301cccc2805993f794301cb01a70a954e7c8a8e5d6779acc4888f77d7282c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f5180e6651455bc8443945fb5b6860c
01457b8648200c9d274b2790b95274b1dc855aaf
39301cccc2805993f794301cb01a70a954e7c8a8e5d6779acc4888f77d7282c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
200 OK 17 kB URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
IP
Hash 49dcb3f23a58f998f11d8c2ca1b90a68
0aee92fad52d2f03484a134901a90260af43e913
92223ea8fd1122967d4b3adaec6c401be4ab899e973ed13fb3fb90520cdefcfa
GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Sep 2022 00:05:11 GMT
date: Tue, 20 Sep 2022 00:05:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 448263
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f5180e6651455bc8443945fb5b6860c
01457b8648200c9d274b2790b95274b1dc855aaf
39301cccc2805993f794301cb01a70a954e7c8a8e5d6779acc4888f77d7282c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 00:05:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=bcc9b16f-eba8-40cc-b346-fa8fdafb3cc4&l_pb_bid_id=1290e7c2e92cae9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.16816343553499957
200 OK 312 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=bcc9b16f-eba8-40cc-b346-fa8fdafb3cc4&l_pb_bid_id=1290e7c2e92cae9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.16816343553499957
IP
File type JSON data\012- , ASCII text, with very long lines (312), with no line terminators
Hash a554bf1d284dc0bf20cc15db05400700
f872396fc27f9e976ddffdc8e10a9f8afb7b8778
f55b89833caeb5526cf8024457f50045c0afaf5c7cd8d5b558f94e98cc33688d
GET /a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197872&size_id=15&alt_size_ids=9%2C10%2C17%2C48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=bcc9b16f-eba8-40cc-b346-fa8fdafb3cc4&l_pb_bid_id=1290e7c2e92cae9&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.16816343553499957 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 20 Sep 2022 00:05:12 GMT
Content-Type: application/json
Content-Length: 312
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L89FQ43V-X-6UY9; Domain=.rubiconproject.com; Path=/; Expires=Wed, 20-Sep-2023 00:05:12 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qosz2PU0CYROu9DtVM30fCgHmDpBZ9d97mwWYfdMDwRlj9zvlSxEea9VeuKsLvX3bPAUJ+gL7gixUujLKVOyBtu/R7Fz5/Qhm0=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 20-Sep-2023 00:05:12 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=e6f7c729-de67-4e5c-93c7-bb2522079ae4&l_pb_bid_id=1699dbb4bbf0e568&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.236373873914278
200 OK 304 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=e6f7c729-de67-4e5c-93c7-bb2522079ae4&l_pb_bid_id=1699dbb4bbf0e568&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.236373873914278
IP
File type JSON data\012- , ASCII text, with very long lines (304), with no line terminators
Hash adadd9dd060263fd4710c458c3dc2257
8e97b9e29942d8eb2bb6a63344ca8f673ad0be90
d474d709c3b0cf552080e4a9652e2b111bed59586b1f218ad6ed530fff0477b4
GET /a/api/fastlane.json?account_id=15636&site_id=393244&zone_id=2197868&size_id=15&alt_size_ids=48&rf=https%3A%2F%2Fstudy-assistantph.com%2F&tk_flint=pbjs_lite_v6.21.1&x_source.tid=e6f7c729-de67-4e5c-93c7-bb2522079ae4&l_pb_bid_id=1699dbb4bbf0e568&p_screen_res=1280x1024&rp_secure=1&rp_maxbids=1&slots=1&rand=0.236373873914278 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Tue, 20 Sep 2022 00:05:12 GMT
Content-Type: application/json
Content-Length: 304
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=L89FQ44B-H-G5G7; Domain=.rubiconproject.com; Path=/; Expires=Wed, 20-Sep-2023 00:05:12 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|naVuGyos1qrHYqQ2Ww9qsu9DtVM30fCgHmDpBZ9d97mwWYfdMDwRlj9zvlSxEea9VeuKsLvX3bPAUJ+gL7gixUujLKVOyBtu/R7Fz5/Qhm0=; Domain=.rubiconproject.com; Path=/; Expires=Wed, 20-Sep-2023 00:05:12 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
ib.adnxs.com/ut/v3/prebid
200 OK 146 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2e6b43af737c7d6ae65c0b0d5efabd64
8f38074c5f94f62a4625e82cf0e42c3e41443a54
eef2068a8b91ff032dd63c5199c7d7f87ec0a59b1d08aa030dab94e52cf00cd0
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 612
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 20 Sep 2022 00:05:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 146
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
AN-X-Request-Uuid: 4f47acb6-bde5-4719-9e74-d45a756089af
Set-Cookie: icu=ChgIx9p7EAoYASABKAEwuIekmQY4AUABSAEQuIekmQYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Dec-2022 00:05:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=4810255074654352628; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Dec-2022 00:05:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ib.adnxs.com/ut/v3/prebid
200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b90971e10f1ab317c00309093eff532f
963b646f4cd93892bc4e5d8cfe0602c8426e949f
a1021ad9f339c844cc80ff82d3f28c535e07689b0d30a5cbffd11fa61f1371ec
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 476
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 20 Sep 2022 00:05:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://study-assistantph.com
AN-X-Request-Uuid: c79026bc-98d1-4de2-ada7-e2aa0e5795ed
Set-Cookie: icu=ChgIx9p7EAoYASABKAEwuYekmQY4AUABSAEQuYekmQYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Dec-2022 00:05:13 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=8633468080919994255; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 19-Dec-2022 00:05:13 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
worker.sttsmntz.ru/stats/format
200 OK 230 B URL HTTP/2 worker.sttsmntz.ru/stats/format
IP
File type JSON data\012- , ASCII text
Hash b5b1431e8330894a92045dfe0427253f
557c63ecfcc74788de5156b5d08d775f74d2c954
674b21112dbaa9b3900877c02ad7e9215b9d07cfa4e91f129d6444b32a76be3d
POST /stats/format HTTP/1.1
Host: worker.sttsmntz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 223
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ycalb
date: Tue, 20 Sep 2022 00:05:13 GMT
content-type: application/json
content-encoding: gzip
content-length: 230
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
X-Firefox-Spdy: h2
worker.sttsmntz.ru/stats/format
200 OK 231 B URL HTTP/2 worker.sttsmntz.ru/stats/format
IP
File type JSON data\012- , ASCII text
Hash d697b6e192e7997e1c504cc3b51ff172
f5988e723a878c262cbd6901ea2bbcd8d0c3a81e
9f0beed3b933c3ec23f0e0f88ac02bb3b08eff34c6602c4e31c7eb4a07606fd7
POST /stats/format HTTP/1.1
Host: worker.sttsmntz.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 223
Origin: https://study-assistantph.com
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ycalb
date: Tue, 20 Sep 2022 00:05:13 GMT
content-type: application/json
content-encoding: gzip
content-length: 231
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=073a2c8e648e4346a97d56197e92fdf2&zoneId=3914651&checkDuplicate=true&ymid=&var=
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=073a2c8e648e4346a97d56197e92fdf2&zoneId=3914651&checkDuplicate=true&ymid=&var=
IP
File type JSON data\012- , ASCII text
Hash 9f6a226c7e45e6d3dc4dff08ed4b44d4
fddce52eb2440d5dd13bb91d1ae9b1bdd6e99e11
ca81fe0aead13288920ec34b23c4d89f7f4ecdc46201914be18f6c993570aa84
GET /gid.js?pub=0&userId=073a2c8e648e4346a97d56197e92fdf2&zoneId=3914651&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Cookie: ID=9340a6169a564c08a8a353906e6f3e57
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:14 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://study-assistantph.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=9340a6169a564c08a8a353906e6f3e57; expires=Wed, 20 Sep 2023 00:05:14 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
loulouly.net/pfe/current/tag.min.js?z=3914651
200 OK 0 B URL HTTP/2 loulouly.net/pfe/current/tag.min.js?z=3914651
IP
GET /pfe/current/tag.min.js?z=3914651 HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:05 GMT
content-type: application/javascript
last-modified: Fri, 16 Sep 2022 10:36:49 GMT
etag: W/"632451c1-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper-builder/eb107cdf-35a2-42a1-9d1c-f92094e2e026/dynamic.js?host=study-assistantph.com&v=d-1661183947__s-7af62b20-e748-477b-9504-579103847fc5
200 OK 0 B URL HTTP/2 cdn.dmtgvn.com/wrapper-builder/eb107cdf-35a2-42a1-9d1c-f92094e2e026/dynamic.js?host=study-assistantph.com&v=d-1661183947__s-7af62b20-e748-477b-9504-579103847fc5
IP
ASN #199524 G-Core Labs S.A.
GET /wrapper-builder/eb107cdf-35a2-42a1-9d1c-f92094e2e026/dynamic.js?host=study-assistantph.com&v=d-1661183947__s-7af62b20-e748-477b-9504-579103847fc5 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=31536000, public, s-maxage=31536000
content-encoding: gzip
cache: MISS
x-id: sto5-up-gc14
X-Firefox-Spdy: h2
cdn.dmtgvn.com/kv-api/v1/get-value?&keyValues[][roxotHost]=study-assistantph.com&pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026
200 OK 0 B URL HTTP/2 cdn.dmtgvn.com/kv-api/v1/get-value?&keyValues[][roxotHost]=study-assistantph.com&pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026
IP
ASN #199524 G-Core Labs S.A.
GET /kv-api/v1/get-value?&keyValues[][roxotHost]=study-assistantph.com&pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: application/json
cache-control: max-age=600, public, s-maxage=600
access-control-allow-origin: *
content-encoding: gzip
cache: MISS
x-id: sto5-up-gc11
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper/js/dynamic-engine.js?v=s-7af62b20-e748-477b-9504-579103847fc5
200 OK 0 B URL HTTP/2 cdn.dmtgvn.com/wrapper/js/dynamic-engine.js?v=s-7af62b20-e748-477b-9504-579103847fc5
IP
ASN #199524 G-Core Labs S.A.
GET /wrapper/js/dynamic-engine.js?v=s-7af62b20-e748-477b-9504-579103847fc5 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:06 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=31536000, public, s-maxage=31536000
content-encoding: gzip
cache: HIT
x-cached-since: 2022-09-19T11:12:13+00:00
x-id: sto5-up-gc10
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper/js/manager.js?pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026
200 OK 0 B URL HTTP/2 cdn.dmtgvn.com/wrapper/js/manager.js?pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026
IP
ASN #199524 G-Core Labs S.A.
GET /wrapper/js/manager.js?pid=eb107cdf-35a2-42a1-9d1c-f92094e2e026 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:05 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=600, public, s-maxage=600
access-control-allow-origin: *
content-encoding: gzip
cache: STALE
x-cached-since: 2022-09-19T20:40:13+00:00
x-id: sto5-up-gc14
X-Firefox-Spdy: h2
eehuzaih.com/400/5041469
200 OK 0 B IP
GET /400/5041469 HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:05 GMT
content-type: application/javascript
x-trace-id: aa02cc39440df0a2d9a16fcf24a1b637
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=f1e894939fb34a378f749837fcd0f587; expires=Wed, 20 Sep 2023 00:05:05 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
loulouly.net/pfe/current/universal.min.js?v=3.1.394
200 OK 0 B URL HTTP/2 loulouly.net/pfe/current/universal.min.js?v=3.1.394
IP
GET /pfe/current/universal.min.js?v=3.1.394 HTTP/1.1
Host: loulouly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://study-assistantph.com/
Origin: https://study-assistantph.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:05 GMT
content-type: application/javascript
last-modified: Fri, 16 Sep 2022 10:36:49 GMT
etag: W/"632451c1-1fafa"
access-control-allow-origin: https://study-assistantph.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.dmtgvn.com/wrapper/js/common-engine.js?v=s-7af62b20-e748-477b-9504-579103847fc5
200 OK 0 B URL HTTP/2 cdn.dmtgvn.com/wrapper/js/common-engine.js?v=s-7af62b20-e748-477b-9504-579103847fc5
IP
ASN #199524 G-Core Labs S.A.
GET /wrapper/js/common-engine.js?v=s-7af62b20-e748-477b-9504-579103847fc5 HTTP/1.1
Host: cdn.dmtgvn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://study-assistantph.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 00:05:05 GMT
content-type: text/javascript; charset=UTF-8
cache-control: max-age=31536000, public, s-maxage=31536000
content-encoding: gzip
cache: HIT
x-cached-since: 2022-09-19T11:12:11+00:00
x-id: sto5-up-gc13
X-Firefox-Spdy: h2
104.21.14.47
93.184.220.29
142.250.74.33
158.160.4.42
104.21.14.47
23.36.77.32
92.223.97.97
77.88.21.119
185.89.211.84