r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b3537658770790ad6cf0d727f0c0acd2
8365cadda05ef27b2ebd627d545e31886b512bde
df992311f130f15459739841de925c7eec2604d5a68ca6b2a67b6dc8d229212c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF992311F130F15459739841DE925C7EEC2604D5A68CA6B2A67B6DC8D229212C"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4342
Expires: Tue, 25 Oct 2022 18:07:32 GMT
Date: Tue, 25 Oct 2022 16:55:10 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c2bba4cad162918b17858b60e909e4d9
d9a1d4f7fb7635ab233ebbf776e6de1a2857032b
3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2595
Cache-Control: max-age=148756
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:10 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 10:14:26 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8db408c487f7d35bba323046736e8d3a
01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0
9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8988
Expires: Tue, 25 Oct 2022 19:24:58 GMT
Date: Tue, 25 Oct 2022 16:55:10 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IrXZMmzAw3gaX+ucxSn3j6QQY/bF4TNi0Bjxg+SwuMT64Ka6tPm8Hj8VvRtEYHTx4QYPhbnT7iA=
x-amz-request-id: G54Q0TN8KRCPFNXP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 16:09:00 GMT
age: 2770
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 16:55:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 518ff04fd536958e285cf07aaf4a2786
fa5dad2391c2a9957340bd629f0462db4f412a5c
608c78964412d5dc7025e9cbfaef345d448a29eae0f11257c49a41f274917b9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6010
Cache-Control: max-age=147107
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:11 GMT
Etag: "63579918-1d7"
Expires: Thu, 27 Oct 2022 09:46:58 GMT
Last-Modified: Tue, 25 Oct 2022 08:06:48 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
www.visiblecollege.education/unsubscribe-cx.html
199.34.228.71301 Moved Permanently 470 B URL HTTP/1.1 www.visiblecollege.education/unsubscribe-cx.html
IP 199.34.228.71:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 59b1fe1356d4ac1278e542267140ef1e
3bdd822ba14edb631f2e4388684badd5d7ecfcbc
1d260fb5339208f9291556f2ca1b016d9c4bc5bd083bb5c09842bd206183a46b
Analyzer Verdict Alert fortinet Phishing
GET /unsubscribe-cx.html HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 25 Oct 2022 16:55:11 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.visiblecollege.education
Vary: X-W-SSL,User-Agent
Location: https://www.visiblecollege.education/unsubscribe-cx.html
X-Host: grn150.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 470
Keep-Alive: timeout=10, max=7
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
54.148.77.40101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.148.77.40:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AIgB19p0uGPsl8/O1CP57w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9O2NaxSxh54VAozp1eZh9V0lcuQ=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c3803418e1a34069e1bb3ef05ad0ce4f
72facd4e43149e49b970f34190db8e7bd5e03f8d
3b12cbddc10262456b0fa8530de618d14ef585d638734fb1902fce51fe8b664f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3B12CBDDC10262456B0FA8530DE618D14EF585D638734FB1902FCE51FE8B664F"
Last-Modified: Sun, 23 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 25 Oct 2022 22:55:12 GMT
Date: Tue, 25 Oct 2022 16:55:12 GMT
Connection: keep-alive
www.visiblecollege.education/unsubscribe-cx.html
199.34.228.71200 OK 7.1 kB URL HTTP/1.1 www.visiblecollege.education/unsubscribe-cx.html
IP 199.34.228.71:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1663), with CRLF, LF line terminators
Hash ff6f7c7e96f3f70e8983acd1713ceb3a
5acb64bace23421607d2b93412888f41ce8036ca
216c19176559cfebab382b68b82d6cf015d417fc762287eb4c1e8fdc32f90884
Analyzer Verdict Alert fortinet Phishing
GET /unsubscribe-cx.html HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:12 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.visiblecollege.education
language=en; expires=Tue, 08-Nov-2022 16:55:12 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"b063975b3c2e008dc928407296b67b77-gzip"
Content-Encoding: gzip
X-Host: blu134.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 7097
Keep-Alive: timeout=10, max=65
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
cdn2.editmysite.com/css/old/fancybox.css?1666643085
151.101.85.46200 OK 1.2 kB URL HTTP/2 cdn2.editmysite.com/css/old/fancybox.css?1666643085
IP 151.101.85.46:0
File type ASCII text, with very long lines (3910)
Hash b644e92258f4c7c0b4270047652d1e60
93734d52ee9e86a768159e514076051813c39cd9
29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
GET /css/old/fancybox.css?1666643085 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 24 Oct 2022 20:06:48 GMT
etag: "6356f058-f47"
expires: Mon, 07 Nov 2022 20:27:53 GMT
cache-control: max-age=1209600
x-host: blu124.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 16:55:12 GMT
age: 73639
x-served-by: cache-sjc10028-SJC, cache-bma1659-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 81
x-timer: S1666716913.509700,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1218
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1666643085&
151.101.85.46200 OK 33 kB URL HTTP/2 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1666643085&
IP 151.101.85.46:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (64997)
Hash 518f7c770d045584a42b5f64f27b4a90
4f2e47c88056548d2cab9fac033dffc566a9242b
299bc7143259cd720c1f99deed5745f44fbe31d702ab4734e865324eee6925e4
GET /js/lang/en/stl.js?buildTime=1666643085& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 24 Oct 2022 20:04:39 GMT
etag: "6356efd7-2c78d"
expires: Mon, 07 Nov 2022 20:25:23 GMT
cache-control: max-age=1209600
x-host: blu115.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 16:55:12 GMT
age: 73790
x-served-by: cache-sjc10036-SJC, cache-bma1659-BMA
x-cache: HIT, HIT
x-cache-hits: 30, 4
x-timer: S1666716913.509910,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33020
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/social-icons.css?buildtime=1666643085
151.101.85.46200 OK 1.6 kB URL HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1666643085
IP 151.101.85.46:0
File type ASCII text, with very long lines (13080)
Hash 9aaf5d5f36f8ae30cc5d4dfb45e828f3
401314e96935ec93ee0d282e756a2783bd974570
ed52d379ed5d2b568376214591db2d346ebd3273e02cd352d0c0cd979070d9f9
GET /css/social-icons.css?buildtime=1666643085 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 24 Oct 2022 20:06:42 GMT
etag: W/"6356f052-3319"
expires: Mon, 07 Nov 2022 20:27:53 GMT
cache-control: max-age=1209600
x-host: blu148.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 16:55:12 GMT
age: 73640
x-served-by: cache-sjc10051-SJC, cache-bma1659-BMA
x-cache: HIT, HIT
x-cache-hits: 194, 83
x-timer: S1666716913.516015,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1639
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Cabin/font.css?2
151.101.85.46200 OK 323 B URL HTTP/2 cdn2.editmysite.com/fonts/Cabin/font.css?2
IP 151.101.85.46:0
Hash a24301bce1bbe677f4aadc991d839902
db06f2d3e14f643dbaa77c6097b7650d6125cbb0
84a71f637ab2408d99cf611ed40a22f921d778987133f813232778da71eadbbc
GET /fonts/Cabin/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 17 Oct 2022 18:37:23 GMT
etag: "634da0e3-6ae"
expires: Wed, 02 Nov 2022 10:06:41 GMT
cache-control: max-age=1209600
x-host: blu94.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 16:55:12 GMT
age: 542911
x-served-by: cache-sjc10064-SJC, cache-bma1659-BMA
x-cache: HIT, HIT
x-cache-hits: 41, 1
x-timer: S1666716913.517629,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 323
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Oswald/font.css?2
151.101.85.46200 OK 300 B URL HTTP/2 cdn2.editmysite.com/fonts/Oswald/font.css?2
IP 151.101.85.46:0
Hash b4e1fa8edbbb593aefc47d16b3254da7
f9b4e2c9b0df700a2a892be0c0853f92211a5656
ddb677f162840a44ef4cdf085c35379f76e5b88162205a32cdf584acd826b1c3
GET /fonts/Oswald/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 24 Oct 2022 20:02:15 GMT
etag: "6356ef47-4f0"
expires: Tue, 08 Nov 2022 07:46:31 GMT
cache-control: max-age=1209600
x-host: grn91.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 16:55:12 GMT
age: 32921
x-served-by: cache-sjc10054-SJC, cache-bma1659-BMA
x-cache: HIT, HIT
x-cache-hits: 90, 2
x-timer: S1666716913.518819,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 300
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main.js?buildTime=1666643085
151.101.85.46200 OK 146 kB URL HTTP/2 cdn2.editmysite.com/js/site/main.js?buildTime=1666643085
IP 151.101.85.46:0
File type ASCII text, with very long lines (32147)
Size 146 kB (146400 bytes)
Hash 81b8673c5d3aa3ab8c0574f2a8f0e3b4
2e0661bc7907d9e2703b3347c3fec579f0aef5d6
0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
GET /js/site/main.js?buildTime=1666643085 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 24 Oct 2022 20:07:06 GMT
etag: "6356f06a-74804"
expires: Mon, 07 Nov 2022 20:25:22 GMT
cache-control: max-age=1209600
x-host: grn51.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 16:55:12 GMT
age: 73789
x-served-by: cache-sjc10056-SJC, cache-bma1659-BMA
x-cache: HIT, HIT
x-cache-hits: 28, 3
x-timer: S1666716913.510469,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146400
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/sites.css?buildTime=1666643085
151.101.85.46200 OK 30 kB URL HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1666643085
IP 151.101.85.46:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d10158b22b553f723d99dc78eaee6390
80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
GET /css/sites.css?buildTime=1666643085 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 24 Oct 2022 20:06:42 GMT
etag: W/"6356f052-347ac"
expires: Mon, 07 Nov 2022 20:25:22 GMT
cache-control: max-age=1209600
x-host: blu20.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 16:55:12 GMT
age: 73789
x-served-by: cache-sjc10078-SJC, cache-bma1659-BMA
x-cache: HIT, HIT
x-cache-hits: 31, 132
x-timer: S1666716913.515567,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29746
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn2.editmysite.com/js/jquery-1.8.3.min.js
151.101.85.46200 OK 34 kB URL HTTP/2 cdn2.editmysite.com/js/jquery-1.8.3.min.js
IP 151.101.85.46:0
File type ASCII text, with very long lines (65483)
Hash 67a5a77f65f13559b3d723829f2e0108
5e861ec7c2993abffc3591d6132c47bc7cdc3e98
ac4ffabaed7382810a3829d812e1a45c77984a1dbfaf7d172c8bc19b3cf68ca6
GET /js/jquery-1.8.3.min.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 17 Oct 2022 18:41:15 GMT
etag: "634da1cb-16dc4"
expires: Tue, 01 Nov 2022 23:08:14 GMT
cache-control: max-age=1209600
x-host: grn111.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 25 Oct 2022 16:55:12 GMT
age: 582418
x-served-by: cache-sjc10038-SJC, cache-bma1659-BMA
x-cache: HIT, HIT
x-cache-hits: 60, 943
x-timer: S1666716913.518371,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-P3L37W
142.250.74.168200 OK 81 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-P3L37W
IP 142.250.74.168:0
File type ASCII text, with very long lines (61277)
Hash 437c755df0160128ea2f72811a600ff2
0fbf9030b54fa5df5dd09fb809e379c8f5e876f4
f2ff3d8d3f51c2d5bdc987d5f8889c91d651e0ad61a5e928b5a34032ccfd8e55
GET /gtm.js?id=GTM-P3L37W HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Oct 2022 16:55:12 GMT
expires: Tue, 25 Oct 2022 16:55:12 GMT
cache-control: private, max-age=900
last-modified: Tue, 25 Oct 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81189
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.visiblecollege.education/files/templateArtifacts.js?1666711555
199.34.228.71200 OK 1.6 kB URL HTTP/1.1 www.visiblecollege.education/files/templateArtifacts.js?1666711555
IP 199.34.228.71:0
File type exported SGML document, ASCII text, with very long lines (1630)
Hash e0836e8203c22b8e4086f27e91e86f5a
28235e77f5a895c8cd411aff4a6ef4e6f7d419c2
32dbc4a2eeca39a57d35670f00e2cf59e03c279521e47506c56c5c36d8b664b6
Analyzer Verdict Alert fortinet Phishing
GET /files/templateArtifacts.js?1666711555 HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:12 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn79.sf2p.intern.weebly.net
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash f1ae675435a8f16bc0b04ec012c41979
182f87a81464c80b0b25fb524c59592cd40b0ef4
9191ced121d8740b4ed3af75db3033e72c0c44c0b45004abd714583deaa749a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4829
Expires: Tue, 25 Oct 2022 18:15:41 GMT
Date: Tue, 25 Oct 2022 16:55:12 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4829
Expires: Tue, 25 Oct 2022 18:15:41 GMT
Date: Tue, 25 Oct 2022 16:55:12 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4829
Expires: Tue, 25 Oct 2022 18:15:41 GMT
Date: Tue, 25 Oct 2022 16:55:12 GMT
Connection: keep-alive
www.visiblecollege.education/files/theme/custom-1.js?1654106271
199.34.228.71200 OK 4.1 kB URL HTTP/1.1 www.visiblecollege.education/files/theme/custom-1.js?1654106271
IP 199.34.228.71:0
Hash 7960b13ef773e1c8965d668d5b212834
35f276ab77c975720b8cfa8eeb0ca8cc297725ed
1f897564d4aacb23ab3203c848e47b42417156d404d065c1e81d6c3bca0cccc4
Analyzer Verdict Alert fortinet Phishing
GET /files/theme/custom-1.js?1654106271 HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:12 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 03 Dec 2021 02:31:47 GMT
x-rgw-object-type: Normal
ETag: W/"beb222c03c3fdd6af710530b7df1c408"
x-amz-request-id: tx000000000000001c43519-0062848690-b9fbc29-sfo1
X-Storage-Bucket: z6fce
X-Storage-Object: 6fceda9df3549c1857609bca8bb9bd132aaef3ec76adeb82b0a62c698cae0011
X-Host: grn90.sf2p.intern.weebly.net
Content-Encoding: gzip
fonts.googleapis.com/css?family=Karla:400,700|Oswald:700|Roboto+Mono:400,400i,700,700i
142.250.74.10200 OK 6.6 kB URL HTTP/2 fonts.googleapis.com/css?family=Karla:400,700|Oswald:700|Roboto+Mono:400,400i,700,700i
IP 142.250.74.10:0
Hash e7816dc538d69fad905d80ce67baf6cb
caf70845241f33d1037c257c23f3f4a588df0a8c
3e9c450f0e17b443e0372e9588be1eb94579eadf28e10223c4b09c02afcb2e1d
GET /css?family=Karla:400,700|Oswald:700|Roboto+Mono:400,400i,700,700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Oct 2022 16:55:12 GMT
date: Tue, 25 Oct 2022 16:55:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 531f350512ac7712d932234803aa4602
2fb4599ad3d513a160c1f29fefda27b45852c381
7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TkdgdFp1dXipnGokyVpkamtD5qLRUC7aNYJrX_OKkEujnQsplMsgXA==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 04:35:17 GMT
age: 44395
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cf322f19151bcfa374c2e32b9ac986f
e8e69ac951def18bc1e03ecd4fe8a21d3b825b27
54ddfd1876f65e264b9b3209a0e805a3796013b4aacc8e9fd20b49754b4917a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4206
x-amzn-requestid: 6b02f96a-ea03-4eff-acde-c73925260102
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3E3GPQoAMFpIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570552-77cf762d0e54f1f60efe52c3;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:18 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jcuTYNKiYp8BkDnzo34tidRVmcFlE_xDfPGGgrUKfR67IfwGjFxceA==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:42:36 GMT
age: 69156
etag: "e8e69ac951def18bc1e03ecd4fe8a21d3b825b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89448f1a52030b28e9ecfcdc190787d4
5080ba75c230fd2b303f29a9b64868c6e8771df8
10a736997d441e274a54e9689c349d407087fef7aa7c0f4d0a7a603e446fdabd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9209
x-amzn-requestid: 94dad7b4-9c12-4bda-9202-3b7427185182
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aLiElGzEIAMFnOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e16e9-3c79cd392d5bc4312a730cda;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 03:00:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: c5_B2RXKJx7FHrQvHdCG50zcDFWUqaaZu0GYuCxEI8fpK019dSlD3Q==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 22:32:19 GMT
age: 66173
etag: "5080ba75c230fd2b303f29a9b64868c6e8771df8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d122f5c-ef0b-49a6-a68c-137a02ef7894.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d122f5c-ef0b-49a6-a68c-137a02ef7894.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b3e41dda631c7f2ee5e664d43e48af31
5a8579a70d8791a19e0192995c46594e242e864d
c26bec6c4527220272777fe7b3209d8726c94105955ef15f05a584bae50ae719
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d122f5c-ef0b-49a6-a68c-137a02ef7894.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8239
x-amzn-requestid: c37a1abe-9823-4181-a64f-5cc074cfdf2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3OeGxOoAMFtJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357058f-10c7cfed331c043e00a600e0;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:37:19 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: W3FmIxKlIU9N0kCfbiIqszSpbnmBk5gVmAOZ_w5e7a116zrKEeUpMw==
via: 1.1 2e20768704c71ff3ce2e677251d27f3c.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:45:49 GMT
etag: "5a8579a70d8791a19e0192995c46594e242e864d"
content-type: image/jpeg
age: 68963
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6977b5f01197ed4e914157b59ce56c2a
0c4bc06cb32bae6cdcbd61fde8b6289fa901a0c2
98ed9be1f79f4d1ff9acd3dc22aa64f7e0218d7c4854fc7cb71e70dd341dd7ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8031
x-amzn-requestid: 39e6cba4-dc3b-4fe8-9f00-f9042b3dfb3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3D7E2SoAMF_TA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357054c-541d3ed176c9176913844804;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: j3sV_Wswao5mW-vx2uno8kuZE0qTvTaJYVB8MeVi1dolnHblN_uYwQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:45:49 GMT
etag: "0c4bc06cb32bae6cdcbd61fde8b6289fa901a0c2"
content-type: image/jpeg
age: 68963
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.visiblecollege.education/files/main_style.css?1666711555
199.34.228.71200 OK 7.6 kB URL HTTP/1.1 www.visiblecollege.education/files/main_style.css?1666711555
IP 199.34.228.71:0
File type assembler source, ASCII text, with very long lines (815)
Hash 66aa84f24879292e6c7b46d6ee21095b
3f39dd334b632764db64d4f532484da11084616a
d67c7b6fcbf7d3036708605d0a8e61296f6b944be430119676f21ff84a9dfd50
Analyzer Verdict Alert fortinet Phishing
GET /files/main_style.css?1666711555 HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn137.sf2p.intern.weebly.net
Content-Encoding: gzip
www.visiblecollege.education/files/theme/jquery.pxuMenu.js?1654106271
199.34.228.71200 OK 3.7 kB URL HTTP/1.1 www.visiblecollege.education/files/theme/jquery.pxuMenu.js?1654106271
IP 199.34.228.71:0
File type HTML document, ASCII text
Hash ac373d716afe4270df40f60417b0f418
aba148148c771bb66b0b4aeab6eac8eb40352745
f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a
Analyzer Verdict Alert fortinet Phishing
GET /files/theme/jquery.pxuMenu.js?1654106271 HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: application/javascript
Content-Length: 3697
Connection: keep-alive
Last-Modified: Mon, 25 Apr 2022 13:50:18 GMT
x-rgw-object-type: Normal
ETag: "ac373d716afe4270df40f60417b0f418"
x-amz-request-id: tx000000000000001d78029-0062849c00-b9fbc63-sfo1
X-Storage-Bucket: zf755
X-Storage-Object: f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a
X-Host: grn90.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.visiblecollege.education/files/theme/plugins.js?1654106271
199.34.228.71200 OK 16 kB URL HTTP/1.1 www.visiblecollege.education/files/theme/plugins.js?1654106271
IP 199.34.228.71:0
Hash 0f7b71024ebd304696e6b1f295e8793d
d4a273b8009009285b394cdc9f5b8baf6d1c8e1b
e4c4bad96ca6be1f0ac691edab1fa9b51dc2f84fdc32cf1a665b4c71784c2cba
Analyzer Verdict Alert fortinet Phishing
GET /files/theme/plugins.js?1654106271 HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 24 Mar 2022 16:13:47 GMT
x-rgw-object-type: Normal
ETag: W/"d86674e2fb0fe652cbe72550ff705154"
x-amz-request-id: tx00000000000000218c261-006284ddd3-b9fbc63-sfo1
X-Storage-Bucket: z191b
X-Storage-Object: 191b89e359f86e713b98445e983013d20d8130d001444e0c99098d219a0853f5
X-Host: blu74.sf2p.intern.weebly.net
Content-Encoding: gzip
www.visiblecollege.education/files/theme/jquery.trend.js?1654106271
199.34.228.71200 OK 3.8 kB URL HTTP/1.1 www.visiblecollege.education/files/theme/jquery.trend.js?1654106271
IP 199.34.228.71:0
Hash 4beccebe0a060b2b2c43de5c2d4512ef
250a779dd017877b9f360b264cf072d9e87974ff
446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
GET /files/theme/jquery.trend.js?1654106271 HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: application/javascript
Content-Length: 3775
Connection: keep-alive
Last-Modified: Thu, 10 Feb 2022 08:22:06 GMT
x-rgw-object-type: Normal
ETag: "4beccebe0a060b2b2c43de5c2d4512ef"
x-amz-request-id: tx000000000000001ab0c70-0062847889-b9fbc77-sfo1
X-Storage-Bucket: z446f
X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
X-Host: blu134.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.visiblecollege.education/files/theme/jquery.revealer.js?1654106271
199.34.228.71200 OK 2.8 kB URL HTTP/1.1 www.visiblecollege.education/files/theme/jquery.revealer.js?1654106271
IP 199.34.228.71:0
Hash c22ab67199a33d876512504cda4ff55b
36e96eae4644b6028532974fe5186a072792cb37
c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
GET /files/theme/jquery.revealer.js?1654106271 HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: application/javascript
Content-Length: 2828
Connection: keep-alive
Last-Modified: Tue, 26 Oct 2021 13:57:33 GMT
x-rgw-object-type: Normal
ETag: "c22ab67199a33d876512504cda4ff55b"
x-amz-request-id: tx000000000000001c59914-006284894e-b9fbc63-sfo1
X-Storage-Bucket: zc4cd
X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
X-Host: blu141.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.visiblecollege.education/uploads/1/4/1/4/141422211/published/vm-semi-stacked-logo-2.png?1649639734
199.34.228.71200 OK 4.1 kB URL HTTP/1.1 www.visiblecollege.education/uploads/1/4/1/4/141422211/published/vm-semi-stacked-logo-2.png?1649639734
IP 199.34.228.71:0
File type PNG image data, 202 x 51, 8-bit gray+alpha, non-interlaced\012- data
Hash 66c352d49cce98a2eaeed0ab566c5d46
d491ffee50e644643cd6938387c9fd742b7c9a68
37f9029e6eccd6bfc5a89b408930554ed5c20cc1b18a4dc55c4e6ac89c7e27aa
Analyzer Verdict Alert fortinet Phishing
GET /uploads/1/4/1/4/141422211/published/vm-semi-stacked-logo-2.png?1649639734 HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: image/png
Content-Length: 4137
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2022 01:15:33 GMT
x-rgw-object-type: Normal
ETag: "66c352d49cce98a2eaeed0ab566c5d46"
x-amz-request-id: tx000000000000002bfc22f-0062c43ea4-c033918-sfo1
X-Storage-Bucket: z37f9
X-Storage-Object: 37f9029e6eccd6bfc5a89b408930554ed5c20cc1b18a4dc55c4e6ac89c7e27aa
X-Host: blu141.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.visiblecollege.education/uploads/1/4/1/4/141422211/published/vm-semi-stacked-logo-2.png?1649639724
199.34.228.71200 OK 4.1 kB URL HTTP/1.1 www.visiblecollege.education/uploads/1/4/1/4/141422211/published/vm-semi-stacked-logo-2.png?1649639724
IP 199.34.228.71:0
File type PNG image data, 202 x 51, 8-bit gray+alpha, non-interlaced\012- data
Hash 66c352d49cce98a2eaeed0ab566c5d46
d491ffee50e644643cd6938387c9fd742b7c9a68
37f9029e6eccd6bfc5a89b408930554ed5c20cc1b18a4dc55c4e6ac89c7e27aa
Analyzer Verdict Alert fortinet Phishing
GET /uploads/1/4/1/4/141422211/published/vm-semi-stacked-logo-2.png?1649639724 HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: image/png
Content-Length: 4137
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2022 01:15:33 GMT
x-rgw-object-type: Normal
ETag: "66c352d49cce98a2eaeed0ab566c5d46"
x-amz-request-id: tx000000000000002d8782d-0062c45ca3-c0351c8-sfo1
X-Storage-Bucket: z37f9
X-Storage-Object: 37f9029e6eccd6bfc5a89b408930554ed5c20cc1b18a4dc55c4e6ac89c7e27aa
X-Host: grn75.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.visiblecollege.education/uploads/1/4/1/4/141422211/editor/zschool-logo_3.png
199.34.228.71200 OK 2.6 kB URL HTTP/1.1 www.visiblecollege.education/uploads/1/4/1/4/141422211/editor/zschool-logo_3.png
IP 199.34.228.71:0
File type PNG image data, 93 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash beeed01200a56489dbdb427baa446265
9636c0f125aa00527b77c2861051a39768de3800
c01fd7d4ccca14aeef12e3fc93be4a48d5b060032907f4431869b2292656038b
GET /uploads/1/4/1/4/141422211/editor/zschool-logo_3.png HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: image/png
Content-Length: 2600
Connection: keep-alive
Last-Modified: Tue, 18 Jan 2022 19:27:37 GMT
x-rgw-object-type: Normal
ETag: "beeed01200a56489dbdb427baa446265"
x-amz-request-id: tx000000000000002320b1d-006284f4a5-b9fbc20-sfo1
X-Storage-Bucket: zc01f
X-Storage-Object: c01fd7d4ccca14aeef12e3fc93be4a48d5b060032907f4431869b2292656038b
X-Host: blu64.sf2p.intern.weebly.net
Accept-Ranges: bytes
ssl.google-analytics.com/ga.js
142.250.74.72200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP 142.250.74.72:0
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Tue, 25 Oct 2022 16:32:37 GMT
expires: Tue, 25 Oct 2022 18:32:37 GMT
cache-control: public, max-age=7200
age: 1356
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 25 Oct 2022 16:41:09 GMT
expires: Tue, 25 Oct 2022 18:41:09 GMT
cache-control: public, max-age=7200
age: 844
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.visiblecollege.education/favicon.ico
199.34.228.71200 OK 4.3 kB URL HTTP/1.1 www.visiblecollege.education/favicon.ico
IP 199.34.228.71:0
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 4846aa7e88346c58ca13b59bc135600f
62c0a7a8efe41d33106e4d6f355da79624328eac
5163fb6e037aa0fb771cae695787e0cc9fb85a0bde33ce8114380c9158a7dd85
GET /favicon.ico HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en; _gcl_au=1.1.543811216.1666716911; _ga_VY2RPVKG9S=GS1.1.1666716910.1.0.1666716910.0.0.0; _ga=GA1.1.1078172692.1666716911
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2022 01:14:55 GMT
x-rgw-object-type: Normal
ETag: "4846aa7e88346c58ca13b59bc135600f"
x-amz-request-id: tx000000000000019bcb090-0062e97a40-c0351b0-sfo1
X-Storage-Bucket: z5163
X-Storage-Object: 5163fb6e037aa0fb771cae695787e0cc9fb85a0bde33ce8114380c9158a7dd85
X-Host: grn90.sf2p.intern.weebly.net
Accept-Ranges: bytes
sc-static.net/scevent.min.js
54.230.82.240200 OK 8.8 kB URL HTTP/2 sc-static.net/scevent.min.js
IP 54.230.82.240:0
File type ASCII text, with very long lines (25360), with no line terminators
Hash e9a9d4e245fb5df1ac33be19306752e8
246e5996a63a71ce325dff7ca6c9ef71f324b62f
64211912b65ff9a15aa212c8e8f5d4e60b86629d305c130f8824eb55837b8d4a
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 8764
server: CloudFront
date: Tue, 25 Oct 2022 16:55:13 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Wed, 26 Oct 2022 15:00:06 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8oO92KbkV1TI9YVXmVH8fyhNqF2vaNQNrM4Zd0xo8citmtItH8RUdw==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 85d5182ef7e8ff58c7b91df563383f2e
53c13896a95a3aab73c32490daca0506805356ab
971d04c230f7848e8d5977b1157f9cbd7d2dbf0a9ea92f489c4e501e9b8d42f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 92d2225883779fb9ba6e42be826a4966
b2778aafea16bb8172f327126647fa6cacc52b26
634ea06c3e7078033293f0ed6a9ae060704f14fe186e00a57dc89397e07be80b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "634EA06C3E7078033293F0ED6A9AE060704F14FE186E00A57DC89397E07BE80B"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13465
Expires: Tue, 25 Oct 2022 20:39:38 GMT
Date: Tue, 25 Oct 2022 16:55:13 GMT
Connection: keep-alive
9188115.fls.doubleclick.net/activityi;src=9188115;type=invmedia;cat=georg0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=8913861786545.06?
142.250.74.70200 OK 403 B URL HTTP/2 9188115.fls.doubleclick.net/activityi;src=9188115;type=invmedia;cat=georg0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=8913861786545.06?
IP 142.250.74.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (532), with no line terminators
Hash 98d8727b83f254766245bc43a5677ede
6da34edc07854ec5e8568058dad4e11808f4ce9e
4f4b256cdb0ae4a76cd83c7fd802a93eeccab754148bb773d41fd0f880ba37aa
GET /activityi;src=9188115;type=invmedia;cat=georg0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=8913861786545.06? HTTP/1.1
Host: 9188115.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 16:55:13 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 403
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 25-Oct-2022 17:10:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash e4437344d4b0ece1fb4270782e0b1da9
b77d641b8c871f87bcc88233bbe0de9fed6f369a
88b2e1e3783deb42d2eb869c03039b3fc4fab5fdfc688cb3fcb7548f69bb24f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2380
Cache-Control: max-age=116119
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "63572e3c-117"
Expires: Thu, 27 Oct 2022 01:10:32 GMT
Last-Modified: Tue, 25 Oct 2022 00:30:52 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
www.visiblecollege.education/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
199.34.228.71200 OK 348 B URL HTTP/1.1 www.visiblecollege.education/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP 199.34.228.71:0
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
Analyzer Verdict Alert fortinet Phishing
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: www.visiblecollege.education
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.visiblecollege.education
Connection: keep-alive
Referer: https://www.visiblecollege.education/unsubscribe-cx.html
Cookie: is_mobile=0; language=en; _gcl_au=1.1.543811216.1666716911; _ga_VY2RPVKG9S=GS1.1.1666716910.1.0.1666716910.0.0.0; _ga=GA1.1.1078172692.1666716911; _snow_ses.e20b=*; _snow_id.e20b=e7e7ade0-21a8-4662-833c-73ceb162e933.1666716911.1.1666716911.1666716911.e42b968e-9daf-4997-b4c3-5ac2f98ff26c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:13 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: grn66.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=72
Connection: Keep-Alive
Content-Type: application/json
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b833ab766b992882aea296df820a15ce
d03bb12ee3605f6bdc7ce045754146a6072779d9
a00a402921a52a35f2f76dded866a5c36591febf3ee6a14ec7a6f9b2e2aea817
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4644
Cache-Control: max-age=137478
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "635778d3-1d7"
Expires: Thu, 27 Oct 2022 07:06:31 GMT
Last-Modified: Tue, 25 Oct 2022 05:49:07 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 85d5182ef7e8ff58c7b91df563383f2e
53c13896a95a3aab73c32490daca0506805356ab
971d04c230f7848e8d5977b1157f9cbd7d2dbf0a9ea92f489c4e501e9b8d42f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b833ab766b992882aea296df820a15ce
d03bb12ee3605f6bdc7ce045754146a6072779d9
a00a402921a52a35f2f76dded866a5c36591febf3ee6a14ec7a6f9b2e2aea817
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4644
Cache-Control: max-age=137478
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "635778d3-1d7"
Expires: Thu, 27 Oct 2022 07:06:31 GMT
Last-Modified: Tue, 25 Oct 2022 05:49:07 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b833ab766b992882aea296df820a15ce
d03bb12ee3605f6bdc7ce045754146a6072779d9
a00a402921a52a35f2f76dded866a5c36591febf3ee6a14ec7a6f9b2e2aea817
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2238
Cache-Control: max-age=135072
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "635778d3-1d7"
Expires: Thu, 27 Oct 2022 06:26:25 GMT
Last-Modified: Tue, 25 Oct 2022 05:49:07 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
region1.google-analytics.com/g/collect?v=2&tid=G-VY2RPVKG9S>m=2oeaj0&_p=1233232138&cid=1078172692.1666716911&ul=en-us&sr=1280x1024&_s=1&sid=1666716910&sct=1&seg=0&dl=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&dt=Unsubscribe%20-%20CX%20-%20Visible%20Music%20College&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-VY2RPVKG9S>m=2oeaj0&_p=1233232138&cid=1078172692.1666716911&ul=en-us&sr=1280x1024&_s=1&sid=1666716910&sct=1&seg=0&dl=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&dt=Unsubscribe%20-%20CX%20-%20Visible%20Music%20College&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VY2RPVKG9S>m=2oeaj0&_p=1233232138&cid=1078172692.1666716911&ul=en-us&sr=1280x1024&_s=1&sid=1666716910&sct=1&seg=0&dl=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&dt=Unsubscribe%20-%20CX%20-%20Visible%20Music%20College&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.visiblecollege.education
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.visiblecollege.education
date: Tue, 25 Oct 2022 16:55:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 4e89fb162f750f19917b524debb2cbad
190e966d47497691df83568515094ca3fe816d27
d7a1b8568e36a2a07add1ddea607c34705f0f69391567511caf46cdd9b49beab
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=165625
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "6357f051-1d7"
Expires: Thu, 27 Oct 2022 14:55:38 GMT
Last-Modified: Tue, 25 Oct 2022 14:18:57 GMT
Server: ECS (dcb/7EA3)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rz3AA2v18iyBXuhjz352yqKDHOysV7QGbwN0BTwSLzUdY4vyIfOzoQ==
Age: 2201
tr.snapchat.com/cm/i?pid=5574edef-da44-408c-96f2-796f6a84a753&u_scsid=9baeb804-4618-407e-8d57-8e586a97c29d&u_sclid=5f7483c4-8868-421f-9061-0b7d5627ed85
35.190.43.134200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=5574edef-da44-408c-96f2-796f6a84a753&u_scsid=9baeb804-4618-407e-8d57-8e586a97c29d&u_sclid=5f7483c4-8868-421f-9061-0b7d5627ed85
IP 35.190.43.134:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=5574edef-da44-408c-96f2-796f6a84a753&u_scsid=9baeb804-4618-407e-8d57-8e586a97c29d&u_sclid=5f7483c4-8868-421f-9061-0b7d5627ed85 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 16:55:13 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
siteimproveanalytics.com/js/siteanalyze_66356305.js
172.64.105.36200 OK 9.2 kB URL HTTP/2 siteimproveanalytics.com/js/siteanalyze_66356305.js
IP 172.64.105.36:0
File type ASCII text, with very long lines (28333), with no line terminators
Hash 72b8dc9660238afea0db83f2d349f2aa
90e2c2baf26f808635ca58fe47bc8e0b1e3579b4
06681cac7cd2cd69138a7ccd295a9ea1201fe7b40164513a63667beee20cd71f
GET /js/siteanalyze_66356305.js HTTP/1.1
Host: siteimproveanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 16:55:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 9241
x-amz-id-2: DRHJDUtBQLIVkV92AhLsOesjO0BcM6QjDgnCdz84WkArWp7nqvyIkksFlnGfwoAE5vrqqoWemxE=
x-amz-request-id: EKMSN94ERSAC50F7
cache-control: max-age=86400, no-transform
content-encoding: gzip
last-modified: Wed, 12 Oct 2022 12:52:00 GMT
etag: "72b8dc9660238afea0db83f2d349f2aa"
cf-cache-status: HIT
age: 36
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UAwDNwoIxu16fu%2Bcndr2zXeKdOswR7chHJ8f%2FM526XNj5oisdeZNefYwzfb2GBzAYGosiVJLjWpSoQ3suzPZXgeeIHi%2FNv2tfakvtNuIKKgSbvJrCZnkTZRD1bO5C%2BMlxe6gZdR8rtFKtEg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fc7a86a8b90dad-MRS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tr.snapchat.com/p
35.190.43.134200 OK 68 B IP 35.190.43.134:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------35897972171935261270991946623
Content-Length: 2276
Origin: https://www.visiblecollege.education
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 16:55:13 GMT
access-control-allow-origin: https://www.visiblecollege.education
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBiREAIQgEsIqYWb7lbMdDq6B4k0DWNgvRxZKw/8jntwQXp72zE3tGSZZyqQ8e85J3GjIAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 4
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=9188115;type=invmedia;cat=georg0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=8913861786545.06;~oref=https://www.visiblecollege.education/
216.58.211.2200 OK 402 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9188115;type=invmedia;cat=georg0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=8913861786545.06;~oref=https://www.visiblecollege.education/
IP 216.58.211.2:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (531), with no line terminators
Hash 84056dbe81afd5b849eec4ad6b0edcac
7e5bc6076894721a635d3bb8db09dee4a74e3b92
d3c121b4aa32b8d407a6ff2f3b880acb8204b8925df305f631d33789c2de1525
GET /ddm/fls/i/src=9188115;type=invmedia;cat=georg0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=8913861786545.06;~oref=https://www.visiblecollege.education/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://9188115.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 16:55:13 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 402
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b833ab766b992882aea296df820a15ce
d03bb12ee3605f6bdc7ce045754146a6072779d9
a00a402921a52a35f2f76dded866a5c36591febf3ee6a14ec7a6f9b2e2aea817
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4644
Cache-Control: max-age=137478
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "635778d3-1d7"
Expires: Thu, 27 Oct 2022 07:06:31 GMT
Last-Modified: Tue, 25 Oct 2022 05:49:07 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash e4437344d4b0ece1fb4270782e0b1da9
b77d641b8c871f87bcc88233bbe0de9fed6f369a
88b2e1e3783deb42d2eb869c03039b3fc4fab5fdfc688cb3fcb7548f69bb24f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2591
Cache-Control: max-age=116330
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "63572e3c-117"
Expires: Thu, 27 Oct 2022 01:14:03 GMT
Last-Modified: Tue, 25 Oct 2022 00:30:52 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 130509513bc271340f20f1c556b2592a
6fd8b0623344d4c06ecf4e0708eb51a37d79ed9d
6a69bfbb5b21f5cfae366b21ab59426e78d51467926430c7bbf44d7f8ac704de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash ed185694054186f8312e3cb587dc51fc
1e189c4aeef208deee3eafd92a6a9f289cc56747
b22d1d3dd019e32451986f85ee8442264994c88b57cec3b02f6dc05afc2c91bb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89039
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "6356c090-1d7"
Expires: Wed, 26 Oct 2022 17:39:12 GMT
Last-Modified: Mon, 24 Oct 2022 16:42:56 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: p86vY6oeX0naK6h2NpnG_DzznZ4iAD0XK59V-KhpwaO8E1DiIn9QRQ==
Age: 3376
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash ed185694054186f8312e3cb587dc51fc
1e189c4aeef208deee3eafd92a6a9f289cc56747
b22d1d3dd019e32451986f85ee8442264994c88b57cec3b02f6dc05afc2c91bb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89191
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "6356c090-1d7"
Expires: Wed, 26 Oct 2022 17:41:44 GMT
Last-Modified: Mon, 24 Oct 2022 16:42:56 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bE4KPAztQqV_K-zsmeLoSnrpJt1Hxrut4eFLgL8qZ7eCf_S6lLPjvw==
Age: 3528
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 18a22e23404f0e9de4fd33503b3a8fd2
6dc47a335b441889968defc8ecef885586a8948e
e8cccc4f711f1850659b23801eafc9fe5e04a7c3ddb143a042356204832cbec4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=108606
Date: Tue, 25 Oct 2022 16:55:13 GMT
Etag: "63570c93-1d7"
Expires: Wed, 26 Oct 2022 23:05:19 GMT
Last-Modified: Mon, 24 Oct 2022 22:07:15 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RcTqcDhgv3URXwjwdg0tM2i7yfGFO8njcVkpZgYNUyW-GqnVVzK4ZQ==
Age: 3484
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 19c5719e45cfb53e9fdd342d81c046e0
d588591f72e278a8936e6fcaab8297f6c65b4904
b75e541f0f1468d70b4845424348e052fdde69d5334d88317c47414e18dbec2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=9188115;type=invmedia;cat=georg0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=8913861786545.06;~oref=https://www.visiblecollege.education/
142.250.74.98200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=9188115;type=invmedia;cat=georg0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=8913861786545.06;~oref=https://www.visiblecollege.education/
IP 142.250.74.98:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=9188115;type=invmedia;cat=georg0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=8913861786545.06;~oref=https://www.visiblecollege.education/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 16:55:13 GMT
expires: Tue, 25 Oct 2022 16:55:13 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/init?pids=5574edef-da44-408c-96f2-796f6a84a753
35.190.43.134200 OK 502 B URL HTTP/2 tr.snapchat.com/init?pids=5574edef-da44-408c-96f2-796f6a84a753
IP 35.190.43.134:0
File type JSON data\012- , ASCII text, with very long lines (321)
Hash 30c6566a07c3aca1ae84db40a732d101
50c323d2da6c2166d05e34cb7acba6779d503774
699cfa19a225ef149eeebc3a1b4f951ec27b7dee1ed9442259133e1d7d6582f8
GET /init?pids=5574edef-da44-408c-96f2-796f6a84a753 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.visiblecollege.education/
Origin: https://www.visiblecollege.education
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 16:55:13 GMT
access-control-allow-origin: https://www.visiblecollege.education
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 5ce788cdd348a769704a7f874b5a2474
4a4dfb44c394a90c5f56af273be8e0924535b8a5
a6ccf1a057148266591bc317c4f8225d00cd81880c559db08f824012f0c397d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
collector-5081.tvsquared.com/tv2track.js
3.142.216.121200 OK 8.5 kB URL HTTP/1.1 collector-5081.tvsquared.com/tv2track.js
IP 3.142.216.121:0
File type ASCII text, with very long lines (1162)
Hash 541a38b4f06e41464c0d654e841ac424
d8e6cdf23733cbe85120de52b58c2c7dbe746758
55df73bbedbdb87259af7ccc47efce4497781d0a3154e97a8e07ff059ace234d
GET /tv2track.js HTTP/1.1
Host: collector-5081.tvsquared.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Encoding: gzip
Content-Type: application/javascript
Date: Tue, 25 Oct 2022 16:55:13 GMT
ETag: "6305f9ab-2133"
Expires: Tue, 25 Oct 2022 17:05:13 GMT
Last-Modified: Wed, 24 Aug 2022 10:12:59 GMT
Server: nginx
X-Robots-Tag: noindex
Content-Length: 8499
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 610706b925d374ba06ac70adbe10f399
4402478cc0dd7bd5ee77c681c7f0d67957f24f69
d590cb0379590690ecf4e89987a44e159b7780fc7ae5c62d8775494350799284
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=109885
Date: Tue, 25 Oct 2022 16:55:14 GMT
Etag: "6357082b-1d7"
Expires: Wed, 26 Oct 2022 23:26:39 GMT
Last-Modified: Mon, 24 Oct 2022 21:48:27 GMT
Server: ECS (nyb/1DCD)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oU8_63zKS_rQ-4s8EkbQtYvSbTrjvllIlfKr3BmKpViKqIm8FYLOvg==
Age: 5892
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
35.82.13.103200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP 35.82.13.103:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.visiblecollege.education/
Origin: https://www.visiblecollege.education
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 16:55:14 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.visiblecollege.education
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
23.36.79.17200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 704
Origin: https://www.visiblecollege.education
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Cookie: _ttp=2GdSLjVHEopJqIVG3T8Ilc6Df5n
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202210251655146CD19C693D745B974CB6
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6095a9f6ff93115297bddc89802eb91bbe55f9c60a83db1ae1f770a509ab063b738bf1f5a1baaebc2b0f4f1cecccfbc14f9dd55a04b7088c05fe792fbbb32ba870a150cf0993b3c322d360448dad46df0f
x-origin-response-time: 26,23.194.131.87
x-akamai-request-id: 8d431bd3.7bcac085
expires: Tue, 25 Oct 2022 16:55:14 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 25 Oct 2022 16:55:14 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.0-44537982) (-)
x-cache-remote: TCP_MISS from a23-194-131-87.deploy.akamaitechnologies.com (AkamaiGHost/10.10.0-44537982) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=110, origin; dur=26, inner; dur=16
x-parent-response-time: 132,23.36.79.13
X-Firefox-Spdy: h2
66356305.global.siteimproveanalytics.io/image.aspx?url=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&title=Unsubscribe%20-%20CX%20-%20Visible%20Music%20College&res=1280x1024&accountid=66356305&rt=3478&prev=aebdebb3-e898-8634-fdd9-31daf2d66bd7&luid=50ec33ce-dca7-1900-fba6-6e87fb619250&rnd=52097
3.73.195.171200 OK 34 B URL HTTP/2 66356305.global.siteimproveanalytics.io/image.aspx?url=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&title=Unsubscribe%20-%20CX%20-%20Visible%20Music%20College&res=1280x1024&accountid=66356305&rt=3478&prev=aebdebb3-e898-8634-fdd9-31daf2d66bd7&luid=50ec33ce-dca7-1900-fba6-6e87fb619250&rnd=52097
IP 3.73.195.171:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash a82ba3a9d42148e9cf209df13d8c3f3d
dba80835d31175bdcf0bcad1abafefb06d86e304
1e85ec81b9800b4c443d39caca0d0926089a3ac201120db1ceb45b93789480b8
GET /image.aspx?url=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&title=Unsubscribe%20-%20CX%20-%20Visible%20Music%20College&res=1280x1024&accountid=66356305&rt=3478&prev=aebdebb3-e898-8634-fdd9-31daf2d66bd7&luid=50ec33ce-dca7-1900-fba6-6e87fb619250&rnd=52097 HTTP/1.1
Host: 66356305.global.siteimproveanalytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: image/gif
content-length: 34
set-cookie: AWSALB=dqEY+jwa0cH0VxMNarhBWlsO7x09uOx8e9EKBEaF4EMdUBq6FMNItyUz5Ti8KuQd9F2cN2Duggiwh38633o0g6YeAmA87jZtlHGQ2SQT2jrlqZUOyslvwIWFa4+I; Expires=Tue, 01 Nov 2022 16:55:14 GMT; Path=/
AWSALBCORS=dqEY+jwa0cH0VxMNarhBWlsO7x09uOx8e9EKBEaF4EMdUBq6FMNItyUz5Ti8KuQd9F2cN2Duggiwh38633o0g6YeAmA87jZtlHGQ2SQT2jrlqZUOyslvwIWFa4+I; Expires=Tue, 01 Nov 2022 16:55:14 GMT; Path=/; SameSite=None; Secure
cache-control: max-age=0
expires: Tue, 25 Oct 2022 16:55:14 UTC
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
23.36.79.17200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 702
Origin: https://www.visiblecollege.education
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Cookie: _ttp=2GdSLjVHEopJqIVG3T8Ilc6Df5n
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2022102516551487E896055307E092230B
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6095a9f6ff93115297bddc89802eb91bbe82fb0b8cec3ac1859c482a6c927e5de60e0a7670d868758481458fa27e82877e55bdd1740486f53e835486683ebf85b3a81446dfb544c952204477d5516ca057
x-origin-response-time: 25,23.194.131.13
x-akamai-request-id: 9b05349d.7bcac0a3
expires: Tue, 25 Oct 2022 16:55:14 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 25 Oct 2022 16:55:14 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.0-44537982) (-)
x-cache-remote: TCP_MISS from a23-194-131-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.0-44537982) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=129, origin; dur=25, inner; dur=17
x-parent-response-time: 122,23.36.79.13
X-Firefox-Spdy: h2
collector-5081.tvsquared.com/tv2track.php?action_name=Unsubscribe%20-%20CX%20-%20Visible%20Music%20College&idsite=TV-45901881-1&rec=1&r=298152&h=16&m=55&s=11&url=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&_id=f5e974bf23359179&_idts=1666716912&_idvc=0&_idn=1&_viewts=&cookie=1&res=1280x1024>_ms=206
3.142.216.121200 OK 42 B URL HTTP/1.1 collector-5081.tvsquared.com/tv2track.php?action_name=Unsubscribe%20-%20CX%20-%20Visible%20Music%20College&idsite=TV-45901881-1&rec=1&r=298152&h=16&m=55&s=11&url=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&_id=f5e974bf23359179&_idts=1666716912&_idvc=0&_idn=1&_viewts=&cookie=1&res=1280x1024>_ms=206
IP 3.142.216.121:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 00657dd79637a8daf5e6196ca17f1887
3e064855d1fe7c6eac52981a646ec5840ba7efb5
f0c71e3da5b3fcab3c66af1cf0cdbf262c97b9330b7b37116f1ae2ab18bdc660
GET /tv2track.php?action_name=Unsubscribe%20-%20CX%20-%20Visible%20Music%20College&idsite=TV-45901881-1&rec=1&r=298152&h=16&m=55&s=11&url=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&_id=f5e974bf23359179&_idts=1666716912&_idvc=0&_idn=1&_viewts=&cookie=1&res=1280x1024>_ms=206 HTTP/1.1
Host: collector-5081.tvsquared.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 25 Oct 2022 16:55:14 GMT
P3p: CP='OTI DSP COR NID STP UNI OTPa OUR'
Request-Id: 44e1ed33-662a-4879-b150-5115f3a1502f
Server: nginx
Content-Length: 42
Connection: keep-alive
forms.zohopublic.com/admissions44/form/Wearesorrytoseeyougo93/formperma/PoYFQDFO2Mn0UNgMkSCRTSFHJv7Rll6vps0kKm3ekdA
136.143.190.97200 21 kB URL HTTP/1.1 forms.zohopublic.com/admissions44/form/Wearesorrytoseeyougo93/formperma/PoYFQDFO2Mn0UNgMkSCRTSFHJv7Rll6vps0kKm3ekdA
IP 136.143.190.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (18662)
Hash 9ed9fc90e6c3a00b36a4f16110923802
f4a3480b823e57174b2a1720ab496bed68cbb750
3810c9d1867bef9e4986c5a79dd103ad055c47849453504a3b0e85f1d828e64f
GET /admissions44/form/Wearesorrytoseeyougo93/formperma/PoYFQDFO2Mn0UNgMkSCRTSFHJv7Rll6vps0kKm3ekdA HTTP/1.1
Host: forms.zohopublic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: ZGS
Date: Tue, 25 Oct 2022 16:55:13 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: 383aeadb58=280479ea15bf81fc9c754cc68b20a917; Path=/
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
vary: accept-encoding
Content-Encoding: gzip
Content-Language: en-US
Strict-Transport-Security: max-age=63072000
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 4d57b64672bb55dbec5595cb23267175
8ea7695079793bf7728b0557e7a7ed59c5561e57
87c9c8b10999099590f57c6df2d71def6ccc9578fa2f91cd891bff034d473f4e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 15:09:29 GMT
Expires: Mon, 31 Oct 2022 15:09:28 GMT
Etag: "8ea7695079793bf7728b0557e7a7ed59c5561e57"
Cache-Control: max-age=511453,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fc7a897e52b4ed-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 4d57b64672bb55dbec5595cb23267175
8ea7695079793bf7728b0557e7a7ed59c5561e57
87c9c8b10999099590f57c6df2d71def6ccc9578fa2f91cd891bff034d473f4e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 15:09:29 GMT
Expires: Mon, 31 Oct 2022 15:09:28 GMT
Etag: "8ea7695079793bf7728b0557e7a7ed59c5561e57"
Cache-Control: max-age=511453,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fc7a897cb01bfa-OSL
static.zohocdn.com/forms/css/themes/media/customMedia.bdbbc9b6f964ee4f4c1d1debd83b0068.css
185.20.209.147200 OK 193 B URL HTTP/2 static.zohocdn.com/forms/css/themes/media/customMedia.bdbbc9b6f964ee4f4c1d1debd83b0068.css
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
Hash daa87951fc446e172d1546a8e9bc1f48
9d2a19e2146513420966df2550d1dfe5e01a6c8b
56b021f87c4b7b7835a494ec63f8bd320d7bb9766989d01f7cc80f6aec32261c
GET /forms/css/themes/media/customMedia.bdbbc9b6f964ee4f4c1d1debd83b0068.css HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: text/css;charset=UTF-8
content-length: 193
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
etag: "daa87951fc446e172d1546a8e9bc1f48"
content-language: en-US
last-modified: Wed, 19 May 2021 11:02:52 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: 688f79eff1c8021224d647cf9000b461
z-origin-id: ex1-2f6e73ca32da42de9baba74685f94041
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
static.zohocdn.com/forms/js/formsthirdpartylivejs.fa80d21e90eb2a92193fc45ef5617573.js
185.20.209.147200 OK 37 kB URL HTTP/2 static.zohocdn.com/forms/js/formsthirdpartylivejs.fa80d21e90eb2a92193fc45ef5617573.js
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash 519d10234a6e863f26825a7305cb746c
b1dbdc7b42c01f843ac8bb952aa41aedda86deda
cc63dff891f38e2246bd46f551780ebcbefef78dc9deba4070dc48cff295fc5f
GET /forms/js/formsthirdpartylivejs.fa80d21e90eb2a92193fc45ef5617573.js HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: application/javascript
content-length: 37358
x-content-type-options: nosniff
x-xss-protection: 1
etag: "519d10234a6e863f26825a7305cb746c"
content-language: en-US
last-modified: Tue, 03 Mar 2020 10:10:51 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
cache-control: public, max-age=7776000, must-revalidate, proxy-revalidate
timing-allow-origin: *
x-cache: HIT
nb-request-id: cbcfd8354f8df9f0cb1c552b41d1400d
z-origin-id: ex1-5f5aab8acf71e33f7287535a
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/identify.js
23.36.79.17200 OK 57 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/identify.js
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
Hash 6810dd968e6b81972e1b1c49037ee5d0
9c13e52d22f06579c2330119b540819d1c9ca26a
95ae8ea42191da35c0f393c01cb0650e47e1993a8359a7d57a4257c07819891f
GET /i18n/pixel/identify.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221025165513211E24B8DF861D9566CC
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601c5f6a04a777121cde7d9af65489455e4fe429a83a2a987dda9a9d25b877297f83b4a36092159a5b89c62b81bc5522d922f1265dd49814f8b91e0b56e81e57fc
content-encoding: gzip
expires: Tue, 25 Oct 2022 16:55:13 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 25 Oct 2022 16:55:13 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.0-44537982) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=0, origin; dur=115
x-origin-response-time: 115,23.36.79.13
x-akamai-request-id: 7bcabe52
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
35.82.13.103200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP 35.82.13.103:0
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1864
Origin: https://www.visiblecollege.education
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=0673071d-b6ef-4636-9323-d371505e7cf0; Expires=Wed, 25 Oct 2023 16:55:14 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.visiblecollege.education
access-control-allow-credentials: true
X-Firefox-Spdy: h2
static.zohocdn.com/forms/css/formsthirdparty.2755260429cd02c98112dac6f4b5b8ce.css
185.20.209.147200 OK 12 kB URL HTTP/2 static.zohocdn.com/forms/css/formsthirdparty.2755260429cd02c98112dac6f4b5b8ce.css
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
File type ASCII text, with very long lines (65440)
Hash a338608fc2b539683c6cccb5717cf0aa
e9a5f68ee4fe0972da9cf6ce40df9e170e217b87
6a43f0b04d96257c7b01e2564e33b5e780582a1d1cceb31678d5e101b3a834bd
GET /forms/css/formsthirdparty.2755260429cd02c98112dac6f4b5b8ce.css HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: text/css
content-length: 11641
x-content-type-options: nosniff
x-xss-protection: 1
pragma: public, max-age=5184000, immutable
cache-control: public, max-age=5184000, immutable
expires: Sat, 19 Jun 2021 11:17:42 GMT
etag: "a338608fc2b539683c6cccb5717cf0aa"
content-language: en-US
last-modified: Fri, 16 Apr 2021 06:59:29 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: b7697f57e80a465fce119cc02cfbeb1a
z-origin-id: ex1-8e085564830442f698aa1383c8aa24ec
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
static.zohocdn.com/forms/css/themes/media.39339956c202c136a11c5e49e29b909e.css
185.20.209.147200 OK 5.6 kB URL HTTP/2 static.zohocdn.com/forms/css/themes/media.39339956c202c136a11c5e49e29b909e.css
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
Hash 22ac534e0ef19e0059c5fb948d8c19b4
8c0707de1cd88cfbe53cbd076af841c739ab558a
e25f8b6067e27b99568f9ff0b48bb6e52d9585d1ca299c1592e6cd6d71d64bb0
GET /forms/css/themes/media.39339956c202c136a11c5e49e29b909e.css HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: text/css;charset=UTF-8
content-length: 5590
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
etag: "22ac534e0ef19e0059c5fb948d8c19b4"
content-language: en-US
last-modified: Thu, 09 Jun 2022 09:28:48 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: 3fdbb6b59a9f96b1a7ec5d1fdc97d500
z-origin-id: ex1-5bd386d26efc4a52be912cc4a11f2b3d
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 4d57b64672bb55dbec5595cb23267175
8ea7695079793bf7728b0557e7a7ed59c5561e57
87c9c8b10999099590f57c6df2d71def6ccc9578fa2f91cd891bff034d473f4e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 15:09:29 GMT
Expires: Mon, 31 Oct 2022 15:09:28 GMT
Etag: "8ea7695079793bf7728b0557e7a7ed59c5561e57"
Cache-Control: max-age=511453,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fc7a8979aab500-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 4d57b64672bb55dbec5595cb23267175
8ea7695079793bf7728b0557e7a7ed59c5561e57
87c9c8b10999099590f57c6df2d71def6ccc9578fa2f91cd891bff034d473f4e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 15:09:29 GMT
Expires: Mon, 31 Oct 2022 15:09:28 GMT
Etag: "8ea7695079793bf7728b0557e7a7ed59c5561e57"
Cache-Control: max-age=511453,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fc7a8978e6b4fa-OSL
forms.zohopublic.com/formstatic/fonts?family=Open+Sans:400,700i,700,600i,600,400i,300i,300
136.143.190.97200 220 B URL HTTP/1.1 forms.zohopublic.com/formstatic/fonts?family=Open+Sans:400,700i,700,600i,600,400i,300i,300
IP 136.143.190.97:0
Hash 9a28d1179664ba6bc299429fa6ad2ffc
75e6c37130a729665af1b3255889f1d7bc9f6b50
c3c5f38d3b34298da17c03f724f13edbfc2a0b91f0f6638501b34b17da8219a8
GET /formstatic/fonts?family=Open+Sans:400,700i,700,600i,600,400i,300i,300 HTTP/1.1
Host: forms.zohopublic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/admissions44/form/Wearesorrytoseeyougo93/formperma/PoYFQDFO2Mn0UNgMkSCRTSFHJv7Rll6vps0kKm3ekdA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: ZGS
Date: Tue, 25 Oct 2022 16:55:14 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: 383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196; Path=/
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
X-Frame-Options: DENY
vary: accept-encoding
Content-Encoding: gzip
Content-Language: en-US
Strict-Transport-Security: max-age=63072000
static.zohocdn.com/forms/js/formslive.94026cda3195b26751dd12b9fc80c9ea.js
185.20.209.147200 OK 110 kB URL HTTP/2 static.zohocdn.com/forms/js/formslive.94026cda3195b26751dd12b9fc80c9ea.js
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
File type ASCII text, with very long lines (65433)
Size 110 kB (109768 bytes)
Hash 5a190fb4dcc8bf1f2a7fcfbf70afa52f
03276eaafe4add3da52ad371940a3a764da0b248
c10c64db2c9b22c4779741f01dab84b38e89ca0d20d82df25a03c821a635b95e
GET /forms/js/formslive.94026cda3195b26751dd12b9fc80c9ea.js HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: application/javascript;charset=UTF-8
content-length: 109768
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
etag: "5a190fb4dcc8bf1f2a7fcfbf70afa52f"
content-language: en-US
last-modified: Thu, 13 Oct 2022 06:45:37 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: 8508c137007521c701f554071bde24ca
z-origin-id: ex1-a47b83ee32584d13be0bb1a40d45830f
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
static.zohocdn.com/forms/images/warning-info.607d397302b1f344f8d8df1258004046.png
185.20.209.147200 OK 613 B URL HTTP/2 static.zohocdn.com/forms/images/warning-info.607d397302b1f344f8d8df1258004046.png
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
File type PNG image data, 70 x 69, 8-bit colormap, non-interlaced\012- data
Hash 795e63fefb59c2bff5f31b157b6d01e9
3ee71d25fe4f55464cd8a8444a5cb377b443bc4d
5e1c9c77a6d4cb7a4e0c844a0855b7372dfe6a835ad22015dd2429d035349993
GET /forms/images/warning-info.607d397302b1f344f8d8df1258004046.png HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: image/png
content-length: 613
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
etag: "795e63fefb59c2bff5f31b157b6d01e9"
content-language: en-US
last-modified: Wed, 19 May 2021 11:02:20 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: 82e9bdcfbb839be9c61e67a60cf709a7
z-origin-id: ex1-04f31b44b1084589b8e48c5a3771dd21
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
static.zohocdn.com/forms/images/loader.79de1b954774690fff0e7345d82faa25.gif
185.20.209.147200 OK 2.6 kB URL HTTP/2 static.zohocdn.com/forms/images/loader.79de1b954774690fff0e7345d82faa25.gif
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
File type GIF image data, version 89a, 24 x 24\012- data
Hash 8f3d3ae8228ea0894bbcba2f0dc68375
807d493a6b66eaa5a2c32f5c1588f2a22b371276
ae88234e6373f222a729d38c75dc250f4928e61cde23148267551d517cba42d5
GET /forms/images/loader.79de1b954774690fff0e7345d82faa25.gif HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: image/gif
content-length: 2558
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
etag: "8f3d3ae8228ea0894bbcba2f0dc68375"
content-language: en-US
last-modified: Wed, 19 May 2021 11:02:33 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: 2a6214c5ed5a70bb4166ac152fd02663
z-origin-id: ex1-e806c5da4c79441ea24289fb574aca32
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
static.zohocdn.com/forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png
185.20.209.147200 OK 4.6 kB URL HTTP/2 static.zohocdn.com/forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash dad0f95db26f4856b486ad2e685c98dd
2cd05580ee6671c1d1658c6119ee675d7f6ec452
84fd3c918b8ed33805a1fc5df510ebb1ae10020b9bdfa88fab6c0e3d7476b0b1
GET /forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: image/png
content-length: 4599
x-content-type-options: nosniff
x-xss-protection: 1
etag: "dad0f95db26f4856b486ad2e685c98dd"
content-language: en-US
last-modified: Thu, 03 Dec 2020 06:50:19 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
cache-control: public, max-age=5184000, immutable
timing-allow-origin: *
x-cache: HIT
nb-request-id: ba01bf237f96843a77518304fc9d22da
z-origin-id: ex1-5fc8c5b881b7c33c33aa4c58
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
static.zohocdn.com/forms/css/themes/custom.188b5c3635ff5b5d96f7f360387fe751.css
185.20.209.147200 OK 12 kB URL HTTP/2 static.zohocdn.com/forms/css/themes/custom.188b5c3635ff5b5d96f7f360387fe751.css
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
File type ASCII text, with very long lines (454)
Hash 1314cc1a858f1948b93bef9027c9bb57
c9842d9085084f326871be17bb974468641bc807
6a084dc59332e9b5afce1895118892bd55770de71f4e7b33e23067341cce8a6b
GET /forms/css/themes/custom.188b5c3635ff5b5d96f7f360387fe751.css HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: text/css;charset=UTF-8
content-length: 12324
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
etag: "1314cc1a858f1948b93bef9027c9bb57"
content-language: en-US
last-modified: Mon, 16 May 2022 07:44:34 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: bc0c6cf6a17d9884cfb087425e2a0f2c
z-origin-id: ex1-31b76d19476f4644873e03bb25d6923a
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 4d57b64672bb55dbec5595cb23267175
8ea7695079793bf7728b0557e7a7ed59c5561e57
87c9c8b10999099590f57c6df2d71def6ccc9578fa2f91cd891bff034d473f4e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 15:09:29 GMT
Expires: Mon, 31 Oct 2022 15:09:28 GMT
Etag: "8ea7695079793bf7728b0557e7a7ed59c5561e57"
Cache-Control: max-age=511453,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fc7a897da01c06-OSL
static.zohocdn.com/forms/css/formslive.a39cfcba494a08bd3f6c83765a292f19.css
185.20.209.147200 OK 46 kB URL HTTP/2 static.zohocdn.com/forms/css/formslive.a39cfcba494a08bd3f6c83765a292f19.css
IP 185.20.209.147:0
ASN #41913 Computerline GmbH
File type ASCII text, with very long lines (65430)
Hash a00e47826917ac99a242ab6eb944d56e
ce9b47bc512276f72c669e17ad2839922a92caa1
74b0f04e7bbfe65551bce7390a1f21f9621ac1bec7d682e2667966abff907122
GET /forms/css/formslive.a39cfcba494a08bd3f6c83765a292f19.css HTTP/1.1
Host: static.zohocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ZGS
date: Tue, 25 Oct 2022 16:55:14 GMT
content-type: text/css;charset=UTF-8
content-length: 46539
x-content-type-options: nosniff
x-xss-protection: 1
cache-control: public, max-age=7776000, immutable
etag: "a00e47826917ac99a242ab6eb944d56e"
content-language: en-US
last-modified: Wed, 21 Sep 2022 14:38:09 GMT
content-encoding: br
access-control-expose-headers: *
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=15768000
timing-allow-origin: *
x-cache: HIT
nb-request-id: cb6d2b89f83cfcc9c8d7c5f891881385
z-origin-id: ex1-9c1baaf5f1c04c719100ca826172dbba
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 6baa57a69c5050ff44abe04de42db7e7
721cf4e1bcbb07ec9e758b6fcabba9ce0a30eb47
357c4b3a78580a5cf31ff731872047aaf1255468c9472f3277185ff02c52eee1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6154
Cache-Control: max-age=96112
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:14 GMT
Etag: "6356d158-1d7"
Expires: Wed, 26 Oct 2022 19:37:06 GMT
Last-Modified: Mon, 24 Oct 2022 17:54:32 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
157.240.221.16200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 157.240.221.16:0
File type ASCII text, with very long lines (64348)
Hash 71875f848896ee82a106224e048bd060
277a624e507dff2cd9cff104aa0c5618ca76e105
a22635e404a419027fc88eee705d254910d05d481953733d5e1fda4bc6ab3c5b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: r/UKT4PZKgCuSnDdbOsBhMd25oznFEYhlgDAVp+VmGgyUgekLVf14WNIyAczuyF/zDmBMvUOdhq8wWGJP7T+QA==
priority: u=3,i
content-length: 27027
x-fb-trip-id: 1679558926
date: Tue, 25 Oct 2022 16:55:14 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 6baa57a69c5050ff44abe04de42db7e7
721cf4e1bcbb07ec9e758b6fcabba9ce0a30eb47
357c4b3a78580a5cf31ff731872047aaf1255468c9472f3277185ff02c52eee1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5167
Cache-Control: max-age=95125
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:14 GMT
Etag: "6356d158-1d7"
Expires: Wed, 26 Oct 2022 19:20:39 GMT
Last-Modified: Mon, 24 Oct 2022 17:54:32 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
webfonts.zohowebstatic.com/opensans/font.woff2
143.204.55.34200 OK 51 kB URL HTTP/2 webfonts.zohowebstatic.com/opensans/font.woff2
IP 143.204.55.34:0
File type Web Open Font Format (Version 2), TrueType, length 51084, version 1.6554\012- data
Hash ed0d14764bbe7e7ae8cd093af6c12c5b
74ef71b6a0b867d772a639179ad55233659c4ee2
5ceec82f9678fbbb7630f682842efddfff95f8a1c4e913b3c236a22ef8cac959
GET /opensans/font.woff2 HTTP/1.1
Host: webfonts.zohowebstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forms.zohopublic.com
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 51084
server: ZGS
date: Fri, 23 Sep 2022 10:19:20 GMT
last-modified: Wed, 28 Jul 2021 13:35:31 GMT
etag: "61015d23-c78c"
expires: Sat, 23 Sep 2023 10:19:20 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
strict-transport-security: max-age=63072000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: efta0T1Iv_ekUoK6W3ayVsI7TvwynKS6U3vGEjGJzRWSb9Z7sdachA==
age: 2788554
X-Firefox-Spdy: h2
webfonts.zohowebstatic.com/opensansitalic/font.woff
143.204.55.34200 OK 65 kB URL HTTP/2 webfonts.zohowebstatic.com/opensansitalic/font.woff
IP 143.204.55.34:0
File type Web Open Font Format, TrueType, length 65140, version 0.0\012- data
Hash d03b5f6162242a2684e82f4817866d74
6a213ba96ecc80c0819a17a637c0f0227aa6e607
0563263549f5b1b03297da7100d9acf32a4df025f936c347181619e8fdaf72ea
GET /opensansitalic/font.woff HTTP/1.1
Host: webfonts.zohowebstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forms.zohopublic.com
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/font-woff
content-length: 65140
server: ZGS
date: Fri, 02 Sep 2022 14:21:30 GMT
last-modified: Wed, 28 Jul 2021 13:35:35 GMT
etag: "61015d27-fe74"
expires: Sat, 02 Sep 2023 14:21:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
strict-transport-security: max-age=63072000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pCshenlKaLT5Uss_k1xhU4w9N7S85QoZjm7ldUZC4_Def6Zj07X_7g==
age: 4588423
X-Firefox-Spdy: h2
webfonts.zohowebstatic.com/opensansbold/font.woff
143.204.55.34200 OK 70 kB URL HTTP/2 webfonts.zohowebstatic.com/opensansbold/font.woff
IP 143.204.55.34:0
File type Web Open Font Format, TrueType, length 70128, version 0.0\012- data
Hash 0369ece0ad8891e7aaf14abc4294e5ae
6fbc2965b490b558702ee6af2facaae41a5e13b5
77180141da496f33b3a6a909ae063e620a6bebd83d228c19d2064b261dfdb751
GET /opensansbold/font.woff HTTP/1.1
Host: webfonts.zohowebstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://forms.zohopublic.com
Connection: keep-alive
Referer: https://forms.zohopublic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/font-woff
content-length: 70128
server: ZGS
date: Thu, 11 Aug 2022 22:29:17 GMT
last-modified: Wed, 28 Jul 2021 13:35:26 GMT
etag: "61015d1e-111f0"
expires: Fri, 11 Aug 2023 22:29:17 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
strict-transport-security: max-age=63072000
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: O6E8tCOfZn6HmzCFCcKHn0GMgDm7Matft3nQlIKuIFeylCOKCsvQFw==
age: 6459957
X-Firefox-Spdy: h2
discover.georgiasouthern.edu/ping
34.198.122.35200 OK 601 B URL HTTP/1.1 discover.georgiasouthern.edu/ping
IP 34.198.122.35:0
File type ASCII text, with very long lines (998), with no line terminators
Hash ca2db280388fcd710104bc46c9f9d691
d423e318db371eec2e44212401696f0e1032a36a
556e786c7230e17a4deca320c28b7f349eb32471d57b3f041970c14e3a12ce6b
GET /ping HTTP/1.1
Host: discover.georgiasouthern.edu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: application/javascript; charset=utf-8
Content-Encoding: gzip
Expires: Tue, 25 Oct 2022 17:25:14 GMT
Set-Cookie: _hash=991843ba-5857-400e-a9bb-ddb1021cbd59; path=/; secure; HttpOnly; SameSite=None
_hash=991843ba-5857-400e-a9bb-ddb1021cbd59; expires=Mon, 25-Oct-2027 04:00:00 GMT; path=/; secure; HttpOnly; SameSite=None
_hashV=202210/1; path=/; secure; HttpOnly; SameSite=None
_hashV=202210/1; expires=Mon, 25-Oct-2027 04:00:00 GMT; path=/; secure; HttpOnly; SameSite=None
_node=536873482.47873.0000; path=/; Httponly; Secure
TS01e84c7d=01370406fa5f2fbc0ef5f442ecc37e867c8cc54ddffa9d107a0d25747571efbd5cb0c81728d705d037146017268e421f33ba8e9331; Path=/; HTTPOnly
Strict-Transport-Security: max-age=31536000
Referrer-Policy: origin-when-cross-origin
Date: Tue, 25 Oct 2022 16:55:14 GMT
Content-Length: 601
mx.technolutions.net/ping?id=bef102ba-14f4-ed87-e020-5c2c1773bae3&sid=qZsN758jV_3tvHAED79xLUulcXKoOwH5FmsJd4g8RIXRK-Ddz0bMUqCos1WjVMu0xyj_9-tfU99VMahghHxA_MRNoLpjeQalVlLR5DTx_fYvblEPE5UEex6C_z1qwclT&hid=0eaca121-9cb9-579f-6e49-595b952863d6
143.204.55.14200 OK 4.5 kB URL HTTP/2 mx.technolutions.net/ping?id=bef102ba-14f4-ed87-e020-5c2c1773bae3&sid=qZsN758jV_3tvHAED79xLUulcXKoOwH5FmsJd4g8RIXRK-Ddz0bMUqCos1WjVMu0xyj_9-tfU99VMahghHxA_MRNoLpjeQalVlLR5DTx_fYvblEPE5UEex6C_z1qwclT&hid=0eaca121-9cb9-579f-6e49-595b952863d6
IP 143.204.55.14:0
Hash c1d6d02775779d0d173264155f37e095
c42b592e825e07824086322143d1ab3b2d900bd3
6669e9de16f22ed1b96875826dd295a21b7286addd1fda9d77ef72409e466df7
GET /ping?id=bef102ba-14f4-ed87-e020-5c2c1773bae3&sid=qZsN758jV_3tvHAED79xLUulcXKoOwH5FmsJd4g8RIXRK-Ddz0bMUqCos1WjVMu0xyj_9-tfU99VMahghHxA_MRNoLpjeQalVlLR5DTx_fYvblEPE5UEex6C_z1qwclT&hid=0eaca121-9cb9-579f-6e49-595b952863d6 HTTP/1.1
Host: mx.technolutions.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 4469
server: CloudFront
date: Tue, 25 Oct 2022 16:55:14 GMT
cache-control: private, max-age=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5uaJz0S03tLGe8S2IkKY60VZRu9BxzAEp37TsbHXLWrVyBMCciP_Sg==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 0a48de2685a2125ad9cd4d24b4235dfe
2c78c16d867b97ed4f2ff4265d2ec2604d76be93
d85e1b6224be49edae1b67497b86cdc93d9609d92b55979167ccc4ee48c65dde
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=129804
Date: Tue, 25 Oct 2022 16:55:15 GMT
Etag: "635756ff-1d7"
Expires: Thu, 27 Oct 2022 04:58:39 GMT
Last-Modified: Tue, 25 Oct 2022 03:24:47 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iv2x6mo83-z8WK3V6ihREW3KLINmh4lmeR5AxL4nqVk4CtVN-1KvUQ==
Age: 5632
www.facebook.com/tr/?id=442225499993182&ev=PageView&dl=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&rl=&if=false&ts=1666716912681&sw=1280&sh=1024&v=2.9.87&r=stable&ec=0&o=30&fbp=fb.1.1666716912680.1101726350&it=1666716912312&coo=false&rqm=GET
157.240.221.35200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=442225499993182&ev=PageView&dl=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&rl=&if=false&ts=1666716912681&sw=1280&sh=1024&v=2.9.87&r=stable&ec=0&o=30&fbp=fb.1.1666716912680.1101726350&it=1666716912312&coo=false&rqm=GET
IP 157.240.221.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=442225499993182&ev=PageView&dl=https%3A%2F%2Fwww.visiblecollege.education%2Funsubscribe-cx.html&rl=&if=false&ts=1666716912681&sw=1280&sh=1024&v=2.9.87&r=stable&ec=0&o=30&fbp=fb.1.1666716912680.1101726350&it=1666716912312&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 25 Oct 2022 16:55:15 GMT
X-Firefox-Spdy: h2
exploregrad.georgiasouthern.edu/ping
34.198.122.35200 OK 429 B URL HTTP/1.1 exploregrad.georgiasouthern.edu/ping
IP 34.198.122.35:0
File type ASCII text, with very long lines (644), with no line terminators
Hash dbe7a423a1698b70b2758dc2b93adbe1
f7f0ada0d497caff1a5fee981389d38d92043185
e1655d28b4daeedfb33bed7766696f86bd9155aceaf25357e85c274794835173
GET /ping HTTP/1.1
Host: exploregrad.georgiasouthern.edu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: application/javascript; charset=utf-8
Content-Encoding: gzip
Expires: Tue, 25 Oct 2022 17:25:15 GMT
Set-Cookie: _hash=589f01e8-a81f-4673-94b6-e59b3e986b41; path=/; secure; HttpOnly; SameSite=None
_hash=589f01e8-a81f-4673-94b6-e59b3e986b41; expires=Mon, 25-Oct-2027 04:00:00 GMT; path=/; secure; HttpOnly; SameSite=None
_hashV=202210/1; path=/; secure; HttpOnly; SameSite=None
_hashV=202210/1; expires=Mon, 25-Oct-2027 04:00:00 GMT; path=/; secure; HttpOnly; SameSite=None
_node=1476463114.47873.0000; path=/; Httponly; Secure
TS01e84c7d=01370406fafa6b023ba2209f3ebd4f1d4c42b165022f88c00f663f102fc4d40e12979b41ea863ecf9fb5dae123d72b7ef78bb3f493; Path=/; HTTPOnly
Strict-Transport-Security: max-age=31536000
Referrer-Policy: origin-when-cross-origin
Date: Tue, 25 Oct 2022 16:55:14 GMT
Content-Length: 429
tr.snapchat.com/collector/is_enabled?pids=5574edef-da44-408c-96f2-796f6a84a753&tld=education
35.190.43.134200 OK 572 B URL HTTP/2 tr.snapchat.com/collector/is_enabled?pids=5574edef-da44-408c-96f2-796f6a84a753&tld=education
IP 35.190.43.134:0
Hash 3c44bdc9bceeaf2e6174d92dff6b7d32
8026a1237ba58e37b2a5bdc345ef2ee127e06713
78ba52256350c07072a50036952573429301e0bf7d571a37e838989fb3fabe42
GET /collector/is_enabled?pids=5574edef-da44-408c-96f2-796f6a84a753&tld=education HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.visiblecollege.education/
Origin: https://www.visiblecollege.education
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 16:55:13 GMT
access-control-allow-origin: https://www.visiblecollege.education
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.datasteam.io/v1/C/RawData/A02686A39F7C?v=d5e8d695-209b-440b-9da0-fdbdd789f4d8&se=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7&d=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%3D%3D&callback=cb5efce06d5a17
34.226.25.128200 OK 207 B URL HTTP/1.1 api.datasteam.io/v1/C/RawData/A02686A39F7C?v=d5e8d695-209b-440b-9da0-fdbdd789f4d8&se=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7&d=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%3D%3D&callback=cb5efce06d5a17
IP 34.226.25.128:0
File type ASCII text, with no line terminators
Hash c14f90cfa9ce7334a0ced68e962a2a56
d73171f32d02d11e30e82881699c3f9516c07e79
ea0acd0d0d8047238a56a418e8dfaa94592e969b267756f2ec4b5a39ab0ede7c
GET /v1/C/RawData/A02686A39F7C?v=d5e8d695-209b-440b-9da0-fdbdd789f4d8&se=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7&d=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%3D%3D&callback=cb5efce06d5a17 HTTP/1.1
Host: api.datasteam.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:15 GMT
Server: Kestrel
Set-Cookie: MGX_U=79d6af1b-fe74-4875-8c99-4c40902d8c25; expires=Wed, 25 Oct 2023 16:55:15 GMT; domain=.datasteam.io; path=/; secure; samesite=none
MGX_A02686A39F7C=d5e8d695-209b-440b-9da0-fdbdd789f4d8; expires=Wed, 25 Oct 2023 16:55:15 GMT; domain=.datasteam.io; path=/; secure; samesite=none
MGX_PX_A02686A39F7C=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7; expires=Tue, 25 Oct 2022 17:25:15 GMT; domain=.datasteam.io; path=/; secure; samesite=none
Content-Length: 207
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 787a199bb694d0c7539b7b6a197982bb
29620445fc0b87632f997b88e48b3e862125a258
cd988b115bc77815b164677453907b2a723d4f334588a5a5a7a5784fe95af2ff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6208
Cache-Control: max-age=137941
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:15 GMT
Etag: "63577488-2d7"
Expires: Thu, 27 Oct 2022 07:14:16 GMT
Last-Modified: Tue, 25 Oct 2022 05:30:48 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash 787a199bb694d0c7539b7b6a197982bb
29620445fc0b87632f997b88e48b3e862125a258
cd988b115bc77815b164677453907b2a723d4f334588a5a5a7a5784fe95af2ff
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6208
Cache-Control: max-age=137941
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:16 GMT
Etag: "63577488-2d7"
Expires: Thu, 27 Oct 2022 07:14:16 GMT
Last-Modified: Tue, 25 Oct 2022 05:30:48 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 727
aa.agkn.com/adscores/g.jsonp?sid=9202274878&userid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
34.250.137.124200 OK 82 B URL HTTP/2 aa.agkn.com/adscores/g.jsonp?sid=9202274878&userid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
IP 34.250.137.124:0
File type ASCII text, with no line terminators
Hash ae708136e46f5ab7a3be5d2a6ff558ac
cfddee7c8aaf2245d3a531efb187df16cf35c751
9e446e75dc20b6dc693b247aaf7704112e55ef434588368aa0761fc76b3a29a5
GET /adscores/g.jsonp?sid=9202274878&userid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 16:55:16 GMT
content-type: application/json
content-length: 82
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
set-cookie: ab=0001%3A533JzPfk4KildYa0Y1egxVNqFjwhVADi; Path=/; Domain=.agkn.com; Expires=Wed, 25-Oct-2023 16:55:16 GMT; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
api.datasteam.io/v1/C/RawData/A02686A39F7C?v=d5e8d695-209b-440b-9da0-fdbdd789f4d8&se=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7&d=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%3D%3D&callback=cbccffd117787518
34.226.25.128200 OK 209 B URL HTTP/1.1 api.datasteam.io/v1/C/RawData/A02686A39F7C?v=d5e8d695-209b-440b-9da0-fdbdd789f4d8&se=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7&d=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%3D%3D&callback=cbccffd117787518
IP 34.226.25.128:0
File type ASCII text, with no line terminators
Hash 567dbab09f4fec4815d3cbe5515a57a9
cf7ed0c907adde62388ea5208634624535391e78
49af9b4441c01f0956d3308798c593c2749233817cf79694e23c10904049667a
GET /v1/C/RawData/A02686A39F7C?v=d5e8d695-209b-440b-9da0-fdbdd789f4d8&se=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7&d=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%3D%3D&callback=cbccffd117787518 HTTP/1.1
Host: api.datasteam.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Cookie: MGX_U=79d6af1b-fe74-4875-8c99-4c40902d8c25; MGX_A02686A39F7C=d5e8d695-209b-440b-9da0-fdbdd789f4d8; MGX_PX_A02686A39F7C=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:16 GMT
Server: Kestrel
Set-Cookie: MGX_U=79d6af1b-fe74-4875-8c99-4c40902d8c25; expires=Wed, 25 Oct 2023 16:55:16 GMT; domain=.datasteam.io; path=/; secure; samesite=none
MGX_A02686A39F7C=d5e8d695-209b-440b-9da0-fdbdd789f4d8; expires=Wed, 25 Oct 2023 16:55:16 GMT; domain=.datasteam.io; path=/; secure; samesite=none
MGX_PX_A02686A39F7C=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7; expires=Tue, 25 Oct 2022 17:25:16 GMT; domain=.datasteam.io; path=/; secure; samesite=none
Content-Length: 209
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash b5cea1a68a5ce5459c228378d2f79bb3
7a8afcf2c821a03a99b608f69aa3afcc3b561d42
80ec375372a80bfd12b989b4899f6f4a6b0eeb2c6e98fdd5bb0f7579dd117e75
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106592
Date: Tue, 25 Oct 2022 16:55:16 GMT
Etag: "6357120c-1d7"
Expires: Wed, 26 Oct 2022 22:31:48 GMT
Last-Modified: Mon, 24 Oct 2022 22:30:36 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UIAqJJwcrA_g2gcR-HmVu8XoCiJvb_4LN4vqfV6gtnSlEO75kd8IDQ==
Age: 72
api.datasteam.io/v1/C/RawData/A02686A39F7C?v=d5e8d695-209b-440b-9da0-fdbdd789f4d8&se=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7&d=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&callback=cb71e19565ed93a8
34.226.25.128200 OK 209 B URL HTTP/1.1 api.datasteam.io/v1/C/RawData/A02686A39F7C?v=d5e8d695-209b-440b-9da0-fdbdd789f4d8&se=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7&d=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&callback=cb71e19565ed93a8
IP 34.226.25.128:0
File type ASCII text, with no line terminators
Hash c55806a49ec79246e618b745e02d046c
e9e0878b06c76bff495eb2820f0c481f68da70e8
512fc5783fa028c0d71b1dc0c09a031f001591917997ea6cce0f7639164aa79e
GET /v1/C/RawData/A02686A39F7C?v=d5e8d695-209b-440b-9da0-fdbdd789f4d8&se=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7&d=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&callback=cb71e19565ed93a8 HTTP/1.1
Host: api.datasteam.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Cookie: MGX_U=79d6af1b-fe74-4875-8c99-4c40902d8c25; MGX_A02686A39F7C=d5e8d695-209b-440b-9da0-fdbdd789f4d8; MGX_PX_A02686A39F7C=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:16 GMT
Server: Kestrel
Set-Cookie: MGX_U=79d6af1b-fe74-4875-8c99-4c40902d8c25; expires=Wed, 25 Oct 2023 16:55:16 GMT; domain=.datasteam.io; path=/; secure; samesite=none
MGX_A02686A39F7C=d5e8d695-209b-440b-9da0-fdbdd789f4d8; expires=Wed, 25 Oct 2023 16:55:16 GMT; domain=.datasteam.io; path=/; secure; samesite=none
MGX_PX_A02686A39F7C=bd276b79-0c2f-4add-bf7f-3d20c1dc0ef7; expires=Tue, 25 Oct 2022 17:25:16 GMT; domain=.datasteam.io; path=/; secure; samesite=none
Content-Length: 209
Connection: keep-alive
i.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
3.230.222.9303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
IP 3.230.222.9:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8 HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Tue, 25 Oct 2022 16:55:16 GMT
Content-Length: 0
Connection: keep-alive
Location: /s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_li_chk=true&previous_uuid=d4e2d6bafc054043a24d20f9bf07ed4d
Set-Cookie: lidid=d4e2d6ba-fc05-4043-a24d-20f9bf07ed4d; Max-Age=63072000; Expires=Thu, 24 Oct 2024 16:55:16 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains
i.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_li_chk=true&previous_uuid=d4e2d6bafc054043a24d20f9bf07ed4d
3.230.222.9303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_li_chk=true&previous_uuid=d4e2d6bafc054043a24d20f9bf07ed4d
IP 3.230.222.9:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_li_chk=true&previous_uuid=d4e2d6bafc054043a24d20f9bf07ed4d HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.visiblecollege.education/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Tue, 25 Oct 2022 16:55:16 GMT
Content-Length: 0
Connection: keep-alive
Location: https://i6.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
Set-Cookie: _li_ss=MgkI_____wcQyBM; Max-Age=2592000; Expires=Thu, 24 Nov 2022 16:55:16 GMT; SameSite=None; Path=/s; Secure
lidid=016df77e-d0ae-42e5-9138-b7713a41be89; Max-Age=63072000; Expires=Thu, 24 Oct 2024 16:55:16 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 2
Strict-Transport-Security: max-age=31536000; includeSubDomains
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 1b92998b74d95677b2da3367404734a1
03a273e15ea0345730ee20ff618f7714636f4a48
dd3528e5d4132056b1dbc65d6c58c6a7a8958cee3915e0305ac8b49661cadde0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=112617
Date: Tue, 25 Oct 2022 16:55:16 GMT
Etag: "63571934-1d7"
Expires: Thu, 27 Oct 2022 00:12:13 GMT
Last-Modified: Mon, 24 Oct 2022 23:01:08 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: G1LXsLag_xAUFXYRspu1eriuRoBSwdu7JQhllTqiCQDsvMoVStqeLA==
Age: 4265
api.dtstmio.com/v1/visitaction/nspx?segment=000&userID=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&takID=A02686A39F7C&seg1=
35.174.135.127302 Found 0 B URL HTTP/1.1 api.dtstmio.com/v1/visitaction/nspx?segment=000&userID=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&takID=A02686A39F7C&seg1=
IP 35.174.135.127:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/visitaction/nspx?segment=000&userID=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&takID=A02686A39F7C&seg1= HTTP/1.1
Host: api.dtstmio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.visiblecollege.education/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Tue, 25 Oct 2022 16:55:16 GMT
Location: https://api.datasteam.io/v1/visitaction/nspx?segment=000&userID=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&takID=A02686A39F7C&seg1=
Server: Kestrel
Set-Cookie: MGX_EID_A02686A39F7C=ns_seg_000; expires=Wed, 26 Oct 2022 16:55:16 GMT; domain=api.dtstmio.com; path=/; secure; samesite=none
Content-Length: 0
Connection: keep-alive
aa.agkn.com/adscores/g.pixel?sid=9202283468&_userID=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_takID=A02686A39F7C
34.250.137.124302 Found 0 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9202283468&_userID=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_takID=A02686A39F7C
IP 34.250.137.124:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adscores/g.pixel?sid=9202283468&_userID=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_takID=A02686A39F7C HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 25 Oct 2022 16:55:16 GMT
location: https://api.dtstmio.com/v1/visitaction/nspx?segment=000&userID=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&takID=A02686A39F7C&seg1=
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
set-cookie: ab=0001%3ApHx5j%2B9t8tSldYa0Y1egxZs6qXhS6nDR; Path=/; Domain=.agkn.com; Expires=Wed, 25-Oct-2023 16:55:16 GMT; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
i.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
3.230.222.9303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
IP 3.230.222.9:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8 HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.visiblecollege.education/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Tue, 25 Oct 2022 16:55:16 GMT
Content-Length: 0
Connection: keep-alive
Location: /s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_li_chk=true&previous_uuid=fca9a44aae8a4cdbb16d9a7725062f9f
Set-Cookie: lidid=fca9a44a-ae8a-4cdb-b16d-9a7725062f9f; Max-Age=63072000; Expires=Thu, 24 Oct 2024 16:55:16 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains
i6.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
52.54.149.65200 OK 43 B URL HTTP/1.1 i6.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
IP 52.54.149.65:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8 HTTP/1.1
Host: i6.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.visiblecollege.education/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:16 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Request-Time: 0
Cache-Control: no-store
Strict-Transport-Security: max-age=31536000; includeSubDomains
i.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_li_chk=true&previous_uuid=fca9a44aae8a4cdbb16d9a7725062f9f
3.230.222.9303 See Other 0 B URL HTTP/1.1 i.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_li_chk=true&previous_uuid=fca9a44aae8a4cdbb16d9a7725062f9f
IP 3.230.222.9:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8&_li_chk=true&previous_uuid=fca9a44aae8a4cdbb16d9a7725062f9f HTTP/1.1
Host: i.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.visiblecollege.education/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Tue, 25 Oct 2022 16:55:16 GMT
Content-Length: 0
Connection: keep-alive
Location: https://i6.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
Set-Cookie: _li_ss=MgkI_____wcQyBM; Max-Age=2592000; Expires=Thu, 24 Nov 2022 16:55:16 GMT; SameSite=None; Path=/s; Secure
lidid=e2ed3d04-c90f-4fa1-b59a-ffd932663c66; Max-Age=63072000; Expires=Thu, 24 Oct 2024 16:55:16 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
Request-Time: 1
Strict-Transport-Security: max-age=31536000; includeSubDomains
i6.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
52.54.149.65200 OK 43 B URL HTTP/1.1 i6.liadm.com/s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8
IP 52.54.149.65:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /s/63537?bidder_id=242861&bidder_uuid=A39F7C-D5E8D695-209B-440B-9DA0-FDBDD789F4D8 HTTP/1.1
Host: i6.liadm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.visiblecollege.education/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:16 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Request-Time: 0
Cache-Control: no-store
Strict-Transport-Security: max-age=31536000; includeSubDomains
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9ed554f0d1187302352f943e39d6c91a
10e1bb8702d0d14c56b659b1662b7c857484b0e7
2e1eda67a00dcf60ade2e3332b7f8b0c18c88ea6794fbb49fa9503e7c02236e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-44517167-1&cid=1078172692.1666716911&jid=1851474637&gjid=1652949641&_gid=2022321274.1666716911&_u=aCDACEAiBAAAACAAI~&z=1253098373
173.194.222.154200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-44517167-1&cid=1078172692.1666716911&jid=1851474637&gjid=1652949641&_gid=2022321274.1666716911&_u=aCDACEAiBAAAACAAI~&z=1253098373
IP 173.194.222.154:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-44517167-1&cid=1078172692.1666716911&jid=1851474637&gjid=1652949641&_gid=2022321274.1666716911&_u=aCDACEAiBAAAACAAI~&z=1253098373 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.visiblecollege.education
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.visiblecollege.education
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 25 Oct 2022 16:55:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9ed554f0d1187302352f943e39d6c91a
10e1bb8702d0d14c56b659b1662b7c857484b0e7
2e1eda67a00dcf60ade2e3332b7f8b0c18c88ea6794fbb49fa9503e7c02236e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-44517167-1&cid=1078172692.1666716911&jid=1851474637&_u=aCDACEAiBAAAACAAI~&z=732713997
142.250.74.35200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-44517167-1&cid=1078172692.1666716911&jid=1851474637&_u=aCDACEAiBAAAACAAI~&z=732713997
IP 142.250.74.35:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-44517167-1&cid=1078172692.1666716911&jid=1851474637&_u=aCDACEAiBAAAACAAI~&z=732713997 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 16:55:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash 6b183dc2bd0829ce80eb64a0a28d91e7
432f422b2723fdba3f195d9d28ab75492ad497d2
cae00bc5a9c3b9e166805e53c4175d96a0b739817d883f477102e1501a49ac57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 16:55:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-44517167-1&cid=1078172692.1666716911&jid=1851474637&_u=aCDACEAiBAAAACAAI~&z=732713997
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-44517167-1&cid=1078172692.1666716911&jid=1851474637&_u=aCDACEAiBAAAACAAI~&z=732713997
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-44517167-1&cid=1078172692.1666716911&jid=1851474637&_u=aCDACEAiBAAAACAAI~&z=732713997 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 25 Oct 2022 16:55:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.datasteam.io/js/D2A02686A39F7C.js
143.204.55.33200 OK 0 B URL HTTP/2 cdn.datasteam.io/js/D2A02686A39F7C.js
IP 143.204.55.33:0
GET /js/D2A02686A39F7C.js HTTP/1.1
Host: cdn.datasteam.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Mon, 18 Jul 2022 20:18:05 GMT
server: AmazonS3
content-encoding: gzip
date: Tue, 25 Oct 2022 03:54:59 GMT
cache-control: max-age=600,s-maxage=86400
etag: W/"9fc031330761f7e2da55de0eba6cd93d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _968Hk9mix_BGEGHlgMJWqBd_PaR6860LrXU-58IsSFdl0OqocW2Kg==
age: 46815
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
104.18.20.226200 OK 0 B URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q3
IP 104.18.20.226:0
POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 16:55:12 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "FB402DCBA95D8C82153831F14AC8D1ADE883D5C0"
Expires: Wed, 26 Oct 2022 04:00:00 GMT
Last-Modified: Tue, 25 Oct 2022 16:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 826
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75fc7a7fdbc11c16-OSL
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C44PDBJR2IL96OOAVENG&lib=ttq
23.36.79.17200 OK 0 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C44PDBJR2IL96OOAVENG&lib=ttq
IP 23.36.79.17:0
ASN #20940 Akamai International B.V.
GET /i18n/pixel/events.js?sdkid=C44PDBJR2IL96OOAVENG&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.visiblecollege.education/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202210251655131A2524E2CA74819751D0
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf600abfded03f52e527228925ae696ca9b55ac32e591ceb2f572b93f84e233f6a988af77ed2e11f90e55ed199391709ad2fe083499ccbfa638b6230f9838f8e5a2c93a43a99f7ab0664bfc082836dd2f61e
content-encoding: gzip
x-origin-response-time: 10,23.218.220.142
x-akamai-request-id: 11fccef9.7bcabc16
expires: Tue, 25 Oct 2022 16:55:13 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 25 Oct 2022 16:55:13 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.0-44537982) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a23-218-220-142.deploy.akamaitechnologies.com (AkamaiGHost/10.10.0-44537982) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=100, origin; dur=10, inner; dur=2
x-parent-response-time: 110,23.36.79.13
X-Firefox-Spdy: h2