freedukasyon.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: freedukasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 18 Dec 2022 08:14:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 18 Dec 2022 09:14:56 GMT
Location: https://freedukasyon.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2dt1z%2B7%2FOlKgg9FvcIR3UeXT4geVGTr0eA1X4pHneFFosyqWkkRbidh6TyulqvihB9clasOlIR4beX%2FqtIFl1o6kWq%2BqrzdItCZW0IwEUqfSsXf24Jch3GnO7520Nxy4eScn"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b672a298fbb51d-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3cf7e36f17a535e53e5213c02cf2b4
e65acbc03135ce135b9e91b4f74b3e1439faa6f6
a2317476862acd0a92fe523454c3991752b07ba14e7667f421dd9624e0233758
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2317476862ACD0A92FE523454C3991752B07BA14E7667F421DD9624E0233758"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6509
Expires: Sun, 18 Dec 2022 10:03:25 GMT
Date: Sun, 18 Dec 2022 08:14:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 460af93786e1eaa666f135e6c3fdc634
bc8aeba36225c79718f5de73d79928fe817c5490
471f4e7ae29bcf6ba1f749c0f5d4ab446cebfac5aa80c3e19c6edf21be456eb5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "471F4E7AE29BCF6BA1F749C0F5D4AB446CEBFAC5AA80C3E19C6EDF21BE456EB5"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4871
Expires: Sun, 18 Dec 2022 09:36:07 GMT
Date: Sun, 18 Dec 2022 08:14:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcade8542361774f13ecd22557ff8fb8
5e67a3753b0856c765f3b17f1742d3ed684ffb6d
647f8d9d3d1170e60a60e15fdfd9b59445feb56a6ce9d9bb2fa4720f0bfc3a14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "647F8D9D3D1170E60A60E15FDFD9B59445FEB56A6CE9D9BB2FA4720F0BFC3A14"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9093
Expires: Sun, 18 Dec 2022 10:46:29 GMT
Date: Sun, 18 Dec 2022 08:14:56 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 18 Dec 2022 07:45:26 GMT
content-type: application/json
age: 1770
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: wirKbjw7NvV8qAlZuC6qv1j7OVneQZsiHcliPxqThefRny4w1HDrFt/XnhJEd5mvN/gjZSw/9Qw=
x-amz-request-id: WK0R8KQAXJWTA24H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 18 Dec 2022 07:52:07 GMT
age: 1369
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:56 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfaae26ea17e1c2fb9e8f60696671607
b7d53b2574275899a98af2d70d2650a30b064733
0fb56922a25a466bc97245704c86108f3e6216eb7988688a2f854c68cc11d7dc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FB56922A25A466BC97245704C86108F3E6216EB7988688A2F854C68CC11D7DC"
Last-Modified: Sat, 17 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9430
Expires: Sun, 18 Dec 2022 10:52:07 GMT
Date: Sun, 18 Dec 2022 08:14:57 GMT
Connection: keep-alive
inklinkor.com/tag.min.js
200 OK 26 kB IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d4930bffb22d3889953e8cfcbf43844e
d6711a2542b59d04cdb0c3b4447a385932540220
a620ee6df6010225e8a2f9bd2d3cabccafb5fb5c950ae2fa2182694b584af6fb
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedukasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 6e0bfbf2f26cf11889a115d5633e59bf
cache-control: max-age=86400
last-modified: Fri, 16 Dec 2022 15:52:36 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Mon, 19 Dec 2022 07:57:18 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 1059
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VOxipT5X0UakJGlisZRsbW7izwrTRvz%2FhbRhvPT0pCBCvWiM5tHB389Q0yL1KSx0sPS1rMKJXo7HS5JghU%2Bp%2FI5s8iOtOH8VLsZRgx356bmt%2Fc8o%2ByxMb1bSlgRzx5yR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b672a68fa4b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a1871c4755adc9a0f8892d7ac6c2e5d0
695eb3e599fccb70156f2dfed9c23884af1ee697
dbc1e5ee783904ed9e17e0f90282a8c176a7558a0d4bbb8c7efbf784c20f3b4a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBC1E5EE783904ED9E17E0F90282A8C176A7558A0D4BBB8C7EFBF784C20F3B4A"
Last-Modified: Thu, 15 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7977
Expires: Sun, 18 Dec 2022 10:27:54 GMT
Date: Sun, 18 Dec 2022 08:14:57 GMT
Connection: keep-alive
choupsee.com/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: choupsee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://freedukasyon.com/
Origin: https://freedukasyon.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://freedukasyon.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
choupsee.com/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: choupsee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://freedukasyon.com/
Origin: https://freedukasyon.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://freedukasyon.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
choupsee.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: choupsee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freedukasyon.com/
Content-Type: application/json
Origin: https://freedukasyon.com
Content-Length: 368
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 431df67ed21df2680fb45d3734b099a0
access-control-allow-origin: https://freedukasyon.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
choupsee.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: choupsee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freedukasyon.com/
Content-Type: application/json
Origin: https://freedukasyon.com
Content-Length: 746
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 467ec01e4056dd8ed85843b9ab0fa4ba
access-control-allow-origin: https://freedukasyon.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83689e67aaad6ab6c5c526322ff25cd7
cdf283b929ed9a91840c9e5f9be518226ec65924
072ebbb92be347b699e578239050d56c2909ecdba7c1505fdaa471cf781e0a07
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "072EBBB92BE347B699E578239050D56C2909ECDBA7C1505FDAA471CF781E0A07"
Last-Modified: Sat, 17 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14346
Expires: Sun, 18 Dec 2022 12:14:03 GMT
Date: Sun, 18 Dec 2022 08:14:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d84fd4205baaf49975906fccc4f23fa
b509db062b079a8de997f320bbddabc23bdce8e1
49b7815827a3d2c268eaee6f0905643f065d0543ffe2ede372f5c81c7b3c2b48
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49B7815827A3D2C268EAEE6F0905643F065D0543FFE2EDE372F5C81C7B3C2B48"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3356
Expires: Sun, 18 Dec 2022 09:10:53 GMT
Date: Sun, 18 Dec 2022 08:14:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 346b16116d089a7fabbfec2332df23f2
0f28d420462e9626548e9f7c982c3205f98199fb
35935c1e04373377b5874026d601b95f02680c56bea92ce3554ebf54275d9202
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35935C1E04373377B5874026D601B95F02680C56BEA92CE3554EBF54275D9202"
Last-Modified: Sat, 17 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14444
Expires: Sun, 18 Dec 2022 12:15:41 GMT
Date: Sun, 18 Dec 2022 08:14:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 36873546bc8b0b69c86c49005473030d
95277b14b4a826ad2600b6ef8c5b671f0051d68b
d3aed5d2b06286ae1330d72ddc1be32fc2f5e853835ec293737cbc26b0fff096
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3AED5D2B06286AE1330D72DDC1BE32FC2F5E853835EC293737CBC26B0FFF096"
Last-Modified: Sat, 17 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16050
Expires: Sun, 18 Dec 2022 12:42:27 GMT
Date: Sun, 18 Dec 2022 08:14:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 18 Dec 2022 07:33:23 GMT
age: 2494
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=fc325617f9bc4e3f8de68498d47968a8
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=fc325617f9bc4e3f8de68498d47968a8
IP
File type JSON data\012- , ASCII text
Hash 4793a481a7b21dde12f9543e64e4818b
7264393d93528171ef9195c3d8caf708c59f60cb
084c3debf8425808cea5ae25a2f5cf8e97b4e4be591ef4670112e8bda2c862cf
GET /gid.js?userId=fc325617f9bc4e3f8de68498d47968a8 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freedukasyon.com
Connection: keep-alive
Referer: https://freedukasyon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://freedukasyon.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=fc325617f9bc4e3f8de68498d47968a8; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibrapush.com/zone?pub=0&zone_id=5113554&is_mobile=false&domain=freedukasyon.com&var=&ymid=&var_3=
200 OK 664 B URL HTTP/2 ibrapush.com/zone?pub=0&zone_id=5113554&is_mobile=false&domain=freedukasyon.com&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (663)
Hash dee063e1f425a3bb655ab35dbf7caf60
1868b8e80c91f4da261a4509ad96f58dc825f7c8
ab067e2c3d9ccfab2b446a9a00400f00bbfdda952abb7616b4c4fd65b1d7f9ba
GET /zone?pub=0&zone_id=5113554&is_mobile=false&domain=freedukasyon.com&var=&ymid=&var_3= HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freedukasyon.com/
Origin: https://freedukasyon.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/json; charset=utf-8
content-length: 664
x-trace-id: 2ed3b6a8daf801d94ccbd069507e221c
access-control-allow-origin: https://freedukasyon.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2d1752cd6eb7f48e7494373911a5b996
43d9c23c4d03cccce0fc478f0e12c0874dc762fd
aded7fd1d638c001b0b462fdfeee0549d2ed61b51ced88eb83690e2e20ed36d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4929
Cache-Control: max-age=94443
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 08:14:57 GMT
Etag: "639d86ab-1d7"
Expires: Mon, 19 Dec 2022 10:29:00 GMT
Last-Modified: Sat, 17 Dec 2022 09:06:51 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
betotodilea.com/400/5113684
200 OK 33 kB URL HTTP/2 betotodilea.com/400/5113684
IP
Hash 203f675237c6ba0f129f0a2ec3d3dc7b
9779a3fc277c08a183deb16f75b34c7e12353f9a
56fce09bf1cd7b58124032eee6f9293c21715918ea04b043824ba6d5907d33db
GET /400/5113684 HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedukasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/javascript
x-trace-id: 9caf12044168a5ba0e8a5d439d3b4ec9
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=b7bd16b8144d48fdb725ed4db2fbd066; expires=Mon, 18 Dec 2023 08:14:57 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/x-QEV4IR2x0
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/x-QEV4IR2x0
IP
Hash 4a1bc3cb40d6b9bf677640e02047799f
154685bd61af3d5660850b209a56a0d4755eafac
44677b5fd202acac7de18cbfb67050dd94455d1bb316e52752638e834d6d62bd
POST /s/gts1p5/x-QEV4IR2x0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 08:14:57 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ibrapush.com/pfe/current/universal.min.js?v=3.1.410
200 OK 39 kB URL HTTP/2 ibrapush.com/pfe/current/universal.min.js?v=3.1.410
IP
Hash ff9a9f36ce88a5dd29f0f31201c2342f
634ff2cebf48f13d27ff0eb938b577acf97f7bfa
63aabab572cecb86641a1a827012f22d3bd7f6e110b41cc9aa89cac7d1e57a50
GET /pfe/current/universal.min.js?v=3.1.410 HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freedukasyon.com/
Origin: https://freedukasyon.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 09:06:10 GMT
etag: W/"63984082-18c6c"
access-control-allow-origin: https://freedukasyon.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash f252f948f6ea3ef5dedfdbb8efa25486
db3fb1e3451b7eba0923e6a89297adbb2d246fcd
c30e45d76fbfcaf8d73fa0cae1d3aa44babab9f29aacd9f099936363a0a0f40a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 08:14:57 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 15 Dec 2022 12:52:25 GMT
Expires: Thu, 22 Dec 2022 12:52:24 GMT
Etag: "db3fb1e3451b7eba0923e6a89297adbb2d246fcd"
Cache-Control: max-age=361646,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77b672aafaa81c0e-OSL
nanouwho.com/9?z=5113553&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=fc325617f9bc4e3f8de68498d47968a8
204 No Content 0 B URL HTTP/2 nanouwho.com/9?z=5113553&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=fc325617f9bc4e3f8de68498d47968a8
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /9?z=5113553&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=fc325617f9bc4e3f8de68498d47968a8 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://freedukasyon.com/
Origin: https://freedukasyon.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://freedukasyon.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 895
Origin: https://freedukasyon.com
Connection: keep-alive
Referer: https://freedukasyon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sun, 18 Dec 2022 08:15:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://freedukasyon.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RiL8MA3ZkBl+NOfs6MuTHg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qxSqyGNnSAnhNuFZ3tngYGhy45k=
betotodilea.com/500/5113684?excludes=&oaid=fc325617f9bc4e3f8de68498d47968a8&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Ffreedukasyon.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 betotodilea.com/500/5113684?excludes=&oaid=fc325617f9bc4e3f8de68498d47968a8&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Ffreedukasyon.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/5113684?excludes=&oaid=fc325617f9bc4e3f8de68498d47968a8&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Ffreedukasyon.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://freedukasyon.com/
Origin: https://freedukasyon.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://freedukasyon.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
nanouwho.com/11?rnd=2351161988&z=5113553&b=15763363&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=gI0rNM6RqLDSRO17R7DICb6UmC7_N2DGiH7FIZR2clqt48wuoxyRzViVhuUImfLb6t1UH_iFtOSqq4iHxuLwaMQpfN__1P8plSJ_9vCkwms0qqQ8l3VgvEoanEzOTYX4G0UsK8WBaXVKngW89H05JlR-RBYy686UWPMj9uKNsiqyrKB4rO7vBmLJ8ljrXyUEgAlvBOE1iNFR9cKJ4i6wp8hOfs0LD6IP84P9DiwqrNSQPVJ_HRDlMih2obSpotl0TKw201BX7I45wx7kQJIILkBHbglmoCeuuqjmBXqDtJWOYz-hO6UWFdBKPiaXLv_nlU1hrhamgHqy0PhlqB6ExN8zZwVd4G-LP7NoyHPXub-AdARB7utWDFAwUPkaQJQJPG0vt_XZeniiocfkkLBNexROTo7HlJI3NLRpZUfA-20M8XhCaD-qqhKV0cHtq9rdYVKxyk0LHXbTA7gZUoD8o-HjZR1M5-Tj43jLJDvIyjnxOQ15SHgIi0AiyCcxPMaJN2k23ppC8fgC-DoHBSzggnkxfjMB7nNvarGJ0-tmrtV6uwnZd09iLPLibxYHXLiSAEE-de4GYN7ued-ABgOteFoNGgJvSOb9xTPDKyYWAvjVKQ_dCuGCbWHIjM9IjF0304tX0C5QbzALW7VS-5xeNjWn3AI9YVISPoGuiHKA0fIjVP7RPTh9vm8h_4WFfLbWySy7yYn27uhY8fIzmHmPLoh5q2tSCsCrymgQIAGwzP4pA-94DkQpSMMPcb7OV0Vq6rJNcA==&ruid=e65cebcd-cfaf-4ca0-9bab-455c3e69befe&subid=628255484085809152&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&ot=89
200 OK 0 B URL HTTP/2 nanouwho.com/11?rnd=2351161988&z=5113553&b=15763363&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=gI0rNM6RqLDSRO17R7DICb6UmC7_N2DGiH7FIZR2clqt48wuoxyRzViVhuUImfLb6t1UH_iFtOSqq4iHxuLwaMQpfN__1P8plSJ_9vCkwms0qqQ8l3VgvEoanEzOTYX4G0UsK8WBaXVKngW89H05JlR-RBYy686UWPMj9uKNsiqyrKB4rO7vBmLJ8ljrXyUEgAlvBOE1iNFR9cKJ4i6wp8hOfs0LD6IP84P9DiwqrNSQPVJ_HRDlMih2obSpotl0TKw201BX7I45wx7kQJIILkBHbglmoCeuuqjmBXqDtJWOYz-hO6UWFdBKPiaXLv_nlU1hrhamgHqy0PhlqB6ExN8zZwVd4G-LP7NoyHPXub-AdARB7utWDFAwUPkaQJQJPG0vt_XZeniiocfkkLBNexROTo7HlJI3NLRpZUfA-20M8XhCaD-qqhKV0cHtq9rdYVKxyk0LHXbTA7gZUoD8o-HjZR1M5-Tj43jLJDvIyjnxOQ15SHgIi0AiyCcxPMaJN2k23ppC8fgC-DoHBSzggnkxfjMB7nNvarGJ0-tmrtV6uwnZd09iLPLibxYHXLiSAEE-de4GYN7ued-ABgOteFoNGgJvSOb9xTPDKyYWAvjVKQ_dCuGCbWHIjM9IjF0304tX0C5QbzALW7VS-5xeNjWn3AI9YVISPoGuiHKA0fIjVP7RPTh9vm8h_4WFfLbWySy7yYn27uhY8fIzmHmPLoh5q2tSCsCrymgQIAGwzP4pA-94DkQpSMMPcb7OV0Vq6rJNcA==&ruid=e65cebcd-cfaf-4ca0-9bab-455c3e69befe&subid=628255484085809152&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&ot=89
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /11?rnd=2351161988&z=5113553&b=15763363&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=gI0rNM6RqLDSRO17R7DICb6UmC7_N2DGiH7FIZR2clqt48wuoxyRzViVhuUImfLb6t1UH_iFtOSqq4iHxuLwaMQpfN__1P8plSJ_9vCkwms0qqQ8l3VgvEoanEzOTYX4G0UsK8WBaXVKngW89H05JlR-RBYy686UWPMj9uKNsiqyrKB4rO7vBmLJ8ljrXyUEgAlvBOE1iNFR9cKJ4i6wp8hOfs0LD6IP84P9DiwqrNSQPVJ_HRDlMih2obSpotl0TKw201BX7I45wx7kQJIILkBHbglmoCeuuqjmBXqDtJWOYz-hO6UWFdBKPiaXLv_nlU1hrhamgHqy0PhlqB6ExN8zZwVd4G-LP7NoyHPXub-AdARB7utWDFAwUPkaQJQJPG0vt_XZeniiocfkkLBNexROTo7HlJI3NLRpZUfA-20M8XhCaD-qqhKV0cHtq9rdYVKxyk0LHXbTA7gZUoD8o-HjZR1M5-Tj43jLJDvIyjnxOQ15SHgIi0AiyCcxPMaJN2k23ppC8fgC-DoHBSzggnkxfjMB7nNvarGJ0-tmrtV6uwnZd09iLPLibxYHXLiSAEE-de4GYN7ued-ABgOteFoNGgJvSOb9xTPDKyYWAvjVKQ_dCuGCbWHIjM9IjF0304tX0C5QbzALW7VS-5xeNjWn3AI9YVISPoGuiHKA0fIjVP7RPTh9vm8h_4WFfLbWySy7yYn27uhY8fIzmHmPLoh5q2tSCsCrymgQIAGwzP4pA-94DkQpSMMPcb7OV0Vq6rJNcA==&ruid=e65cebcd-cfaf-4ca0-9bab-455c3e69befe&subid=628255484085809152&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&ot=89 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freedukasyon.com
Connection: keep-alive
Referer: https://freedukasyon.com/
Cookie: scm=1; OAID=fc325617f9bc4e3f8de68498d47968a8; oaidts=1671351297
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://freedukasyon.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 5748a13330e55627d6046f012cdfa264
access-control-expose-headers: X-Sc
set-cookie: OAID=fc325617f9bc4e3f8de68498d47968a8; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
oaidts=1671351297; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
nanouwho.com/121?rnd=3442093110&z=5113553&b=15763363&c=6332999&var=&d=https%3A%2F%2Fwww.nbfcs.org%2F%23signUp%3D628255484085809152&cln={CELL_NUMBER}&btp=7&rb=gI0rNM6RqLDSRO17R7DICb6UmC7_N2DGiH7FIZR2clqt48wuoxyRzViVhuUImfLb6t1UH_iFtOSqq4iHxuLwaMQpfN__1P8plSJ_9vCkwms0qqQ8l3VgvEoanEzOTYX4G0UsK8WBaXVKngW89H05JlR-RBYy686UWPMj9uKNsiqyrKB4rO7vBmLJ8ljrXyUEgAlvBOE1iNFR9cKJ4i6wp8hOfs0LD6IP84P9DiwqrNSQPVJ_HRDlMih2obSpotl0TKw201BX7I45wx7kQJIILkBHbglmoCeuuqjmBXqDtJWOYz-hO6UWFdBKPiaXLv_nlU1hrhamgHqy0PhlqB6ExN8zZwVd4G-LP7NoyHPXub-AdARB7utWDFAwUPkaQJQJPG0vt_XZeniiocfkkLBNexROTo7HlJI3NLRpZUfA-20M8XhCaD-qqhKV0cHtq9rdYVKxyk0LHXbTA7gZUoD8o-HjZR1M5-Tj43jLJDvIyjnxOQ15SHgIi0AiyCcxPMaJN2k23ppC8fgC-DoHBSzggnkxfjMB7nNvarGJ0-tmrtV6uwnZd09iLPLibxYHXLiSAEE-de4GYN7ued-ABgOteFoNGgJvSOb9xTPDKyYWAvjVKQ_dCuGCbWHIjM9IjF0304tX0C5QbzALW7VS-5xeNjWn3AI9YVISPoGuiHKA0fIjVP7RPTh9vm8h_4WFfLbWySy7yYn27uhY8fIzmHmPLoh5q2tSCsCrymgQIAGwzP4pA-94DkQpSMMPcb7OV0Vq6rJNcA==&bag=52J8L-e06gPP2ZEbR9b5w2DwMerUpzqj&ruid=e65cebcd-cfaf-4ca0-9bab-455c3e69befe&subid=628255484085809152
302 Found 0 B URL HTTP/2 nanouwho.com/121?rnd=3442093110&z=5113553&b=15763363&c=6332999&var=&d=https%3A%2F%2Fwww.nbfcs.org%2F%23signUp%3D628255484085809152&cln={CELL_NUMBER}&btp=7&rb=gI0rNM6RqLDSRO17R7DICb6UmC7_N2DGiH7FIZR2clqt48wuoxyRzViVhuUImfLb6t1UH_iFtOSqq4iHxuLwaMQpfN__1P8plSJ_9vCkwms0qqQ8l3VgvEoanEzOTYX4G0UsK8WBaXVKngW89H05JlR-RBYy686UWPMj9uKNsiqyrKB4rO7vBmLJ8ljrXyUEgAlvBOE1iNFR9cKJ4i6wp8hOfs0LD6IP84P9DiwqrNSQPVJ_HRDlMih2obSpotl0TKw201BX7I45wx7kQJIILkBHbglmoCeuuqjmBXqDtJWOYz-hO6UWFdBKPiaXLv_nlU1hrhamgHqy0PhlqB6ExN8zZwVd4G-LP7NoyHPXub-AdARB7utWDFAwUPkaQJQJPG0vt_XZeniiocfkkLBNexROTo7HlJI3NLRpZUfA-20M8XhCaD-qqhKV0cHtq9rdYVKxyk0LHXbTA7gZUoD8o-HjZR1M5-Tj43jLJDvIyjnxOQ15SHgIi0AiyCcxPMaJN2k23ppC8fgC-DoHBSzggnkxfjMB7nNvarGJ0-tmrtV6uwnZd09iLPLibxYHXLiSAEE-de4GYN7ued-ABgOteFoNGgJvSOb9xTPDKyYWAvjVKQ_dCuGCbWHIjM9IjF0304tX0C5QbzALW7VS-5xeNjWn3AI9YVISPoGuiHKA0fIjVP7RPTh9vm8h_4WFfLbWySy7yYn27uhY8fIzmHmPLoh5q2tSCsCrymgQIAGwzP4pA-94DkQpSMMPcb7OV0Vq6rJNcA==&bag=52J8L-e06gPP2ZEbR9b5w2DwMerUpzqj&ruid=e65cebcd-cfaf-4ca0-9bab-455c3e69befe&subid=628255484085809152
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /121?rnd=3442093110&z=5113553&b=15763363&c=6332999&var=&d=https%3A%2F%2Fwww.nbfcs.org%2F%23signUp%3D628255484085809152&cln={CELL_NUMBER}&btp=7&rb=gI0rNM6RqLDSRO17R7DICb6UmC7_N2DGiH7FIZR2clqt48wuoxyRzViVhuUImfLb6t1UH_iFtOSqq4iHxuLwaMQpfN__1P8plSJ_9vCkwms0qqQ8l3VgvEoanEzOTYX4G0UsK8WBaXVKngW89H05JlR-RBYy686UWPMj9uKNsiqyrKB4rO7vBmLJ8ljrXyUEgAlvBOE1iNFR9cKJ4i6wp8hOfs0LD6IP84P9DiwqrNSQPVJ_HRDlMih2obSpotl0TKw201BX7I45wx7kQJIILkBHbglmoCeuuqjmBXqDtJWOYz-hO6UWFdBKPiaXLv_nlU1hrhamgHqy0PhlqB6ExN8zZwVd4G-LP7NoyHPXub-AdARB7utWDFAwUPkaQJQJPG0vt_XZeniiocfkkLBNexROTo7HlJI3NLRpZUfA-20M8XhCaD-qqhKV0cHtq9rdYVKxyk0LHXbTA7gZUoD8o-HjZR1M5-Tj43jLJDvIyjnxOQ15SHgIi0AiyCcxPMaJN2k23ppC8fgC-DoHBSzggnkxfjMB7nNvarGJ0-tmrtV6uwnZd09iLPLibxYHXLiSAEE-de4GYN7ued-ABgOteFoNGgJvSOb9xTPDKyYWAvjVKQ_dCuGCbWHIjM9IjF0304tX0C5QbzALW7VS-5xeNjWn3AI9YVISPoGuiHKA0fIjVP7RPTh9vm8h_4WFfLbWySy7yYn27uhY8fIzmHmPLoh5q2tSCsCrymgQIAGwzP4pA-94DkQpSMMPcb7OV0Vq6rJNcA==&bag=52J8L-e06gPP2ZEbR9b5w2DwMerUpzqj&ruid=e65cebcd-cfaf-4ca0-9bab-455c3e69befe&subid=628255484085809152 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: scm=1; OAID=fc325617f9bc4e3f8de68498d47968a8; oaidts=1671351297
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-length: 0
location: https://www.nbfcs.org/#signUp=628255484085809152
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: d743e80f6e9b10f695c6b23e731930e6
access-control-expose-headers: X-Sc
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
nanouwho.com/11?rnd=2351161988&z=5113553&b=15763363&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=gI0rNM6RqLDSRO17R7DICb6UmC7_N2DGiH7FIZR2clqt48wuoxyRzViVhuUImfLb6t1UH_iFtOSqq4iHxuLwaMQpfN__1P8plSJ_9vCkwms0qqQ8l3VgvEoanEzOTYX4G0UsK8WBaXVKngW89H05JlR-RBYy686UWPMj9uKNsiqyrKB4rO7vBmLJ8ljrXyUEgAlvBOE1iNFR9cKJ4i6wp8hOfs0LD6IP84P9DiwqrNSQPVJ_HRDlMih2obSpotl0TKw201BX7I45wx7kQJIILkBHbglmoCeuuqjmBXqDtJWOYz-hO6UWFdBKPiaXLv_nlU1hrhamgHqy0PhlqB6ExN8zZwVd4G-LP7NoyHPXub-AdARB7utWDFAwUPkaQJQJPG0vt_XZeniiocfkkLBNexROTo7HlJI3NLRpZUfA-20M8XhCaD-qqhKV0cHtq9rdYVKxyk0LHXbTA7gZUoD8o-HjZR1M5-Tj43jLJDvIyjnxOQ15SHgIi0AiyCcxPMaJN2k23ppC8fgC-DoHBSzggnkxfjMB7nNvarGJ0-tmrtV6uwnZd09iLPLibxYHXLiSAEE-de4GYN7ued-ABgOteFoNGgJvSOb9xTPDKyYWAvjVKQ_dCuGCbWHIjM9IjF0304tX0C5QbzALW7VS-5xeNjWn3AI9YVISPoGuiHKA0fIjVP7RPTh9vm8h_4WFfLbWySy7yYn27uhY8fIzmHmPLoh5q2tSCsCrymgQIAGwzP4pA-94DkQpSMMPcb7OV0Vq6rJNcA==&ruid=e65cebcd-cfaf-4ca0-9bab-455c3e69befe&subid=628255484085809152&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
200 OK 0 B URL HTTP/2 nanouwho.com/11?rnd=2351161988&z=5113553&b=15763363&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=gI0rNM6RqLDSRO17R7DICb6UmC7_N2DGiH7FIZR2clqt48wuoxyRzViVhuUImfLb6t1UH_iFtOSqq4iHxuLwaMQpfN__1P8plSJ_9vCkwms0qqQ8l3VgvEoanEzOTYX4G0UsK8WBaXVKngW89H05JlR-RBYy686UWPMj9uKNsiqyrKB4rO7vBmLJ8ljrXyUEgAlvBOE1iNFR9cKJ4i6wp8hOfs0LD6IP84P9DiwqrNSQPVJ_HRDlMih2obSpotl0TKw201BX7I45wx7kQJIILkBHbglmoCeuuqjmBXqDtJWOYz-hO6UWFdBKPiaXLv_nlU1hrhamgHqy0PhlqB6ExN8zZwVd4G-LP7NoyHPXub-AdARB7utWDFAwUPkaQJQJPG0vt_XZeniiocfkkLBNexROTo7HlJI3NLRpZUfA-20M8XhCaD-qqhKV0cHtq9rdYVKxyk0LHXbTA7gZUoD8o-HjZR1M5-Tj43jLJDvIyjnxOQ15SHgIi0AiyCcxPMaJN2k23ppC8fgC-DoHBSzggnkxfjMB7nNvarGJ0-tmrtV6uwnZd09iLPLibxYHXLiSAEE-de4GYN7ued-ABgOteFoNGgJvSOb9xTPDKyYWAvjVKQ_dCuGCbWHIjM9IjF0304tX0C5QbzALW7VS-5xeNjWn3AI9YVISPoGuiHKA0fIjVP7RPTh9vm8h_4WFfLbWySy7yYn27uhY8fIzmHmPLoh5q2tSCsCrymgQIAGwzP4pA-94DkQpSMMPcb7OV0Vq6rJNcA==&ruid=e65cebcd-cfaf-4ca0-9bab-455c3e69befe&subid=628255484085809152&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /11?rnd=2351161988&z=5113553&b=15763363&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=gI0rNM6RqLDSRO17R7DICb6UmC7_N2DGiH7FIZR2clqt48wuoxyRzViVhuUImfLb6t1UH_iFtOSqq4iHxuLwaMQpfN__1P8plSJ_9vCkwms0qqQ8l3VgvEoanEzOTYX4G0UsK8WBaXVKngW89H05JlR-RBYy686UWPMj9uKNsiqyrKB4rO7vBmLJ8ljrXyUEgAlvBOE1iNFR9cKJ4i6wp8hOfs0LD6IP84P9DiwqrNSQPVJ_HRDlMih2obSpotl0TKw201BX7I45wx7kQJIILkBHbglmoCeuuqjmBXqDtJWOYz-hO6UWFdBKPiaXLv_nlU1hrhamgHqy0PhlqB6ExN8zZwVd4G-LP7NoyHPXub-AdARB7utWDFAwUPkaQJQJPG0vt_XZeniiocfkkLBNexROTo7HlJI3NLRpZUfA-20M8XhCaD-qqhKV0cHtq9rdYVKxyk0LHXbTA7gZUoD8o-HjZR1M5-Tj43jLJDvIyjnxOQ15SHgIi0AiyCcxPMaJN2k23ppC8fgC-DoHBSzggnkxfjMB7nNvarGJ0-tmrtV6uwnZd09iLPLibxYHXLiSAEE-de4GYN7ued-ABgOteFoNGgJvSOb9xTPDKyYWAvjVKQ_dCuGCbWHIjM9IjF0304tX0C5QbzALW7VS-5xeNjWn3AI9YVISPoGuiHKA0fIjVP7RPTh9vm8h_4WFfLbWySy7yYn27uhY8fIzmHmPLoh5q2tSCsCrymgQIAGwzP4pA-94DkQpSMMPcb7OV0Vq6rJNcA==&ruid=e65cebcd-cfaf-4ca0-9bab-455c3e69befe&subid=628255484085809152&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freedukasyon.com
Connection: keep-alive
Referer: https://freedukasyon.com/
Cookie: scm=1; OAID=fc325617f9bc4e3f8de68498d47968a8; oaidts=1671351297
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://freedukasyon.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 7d9db1eaad9dd901f9a8025e0b5a9d61
access-control-expose-headers: X-Sc
set-cookie: OAID=fc325617f9bc4e3f8de68498d47968a8; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
oaidts=1671351297; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
oaidvc=1; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
CNT=1_v1_o4fwAAEAAACQSzAA; expires=Sun, 18 Dec 2022 09:14:57 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 3ca518720dd2f4f8387dfe190ca3c180
c719658477f930471eaaa1855f3f2841fba8cb20
d7ddd8407a4a4d6f13319c3e76d2bc738968ead7b4d3a82ef9125f76ef191e90
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4330
Cache-Control: max-age=151459
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 08:14:58 GMT
Etag: "639e67bb-117"
Expires: Tue, 20 Dec 2022 02:19:17 GMT
Last-Modified: Sun, 18 Dec 2022 01:07:07 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
offerimage.com/www/images/e27e78d3b01907b714b7d939d7eed85d.png
200 OK 43 kB URL HTTP/2 offerimage.com/www/images/e27e78d3b01907b714b7d939d7eed85d.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash e27e78d3b01907b714b7d939d7eed85d
2d4aa0d84925e5031861258c341788450ba8b43c
37024bac32f0cc3299c2492471b40e6beb2fd7b3cb73b172d68207e87cdfd6e6
GET /www/images/e27e78d3b01907b714b7d939d7eed85d.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedukasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Dec 2022 08:14:58 GMT
content-type: image/png
content-length: 43157
last-modified: Thu, 10 Dec 2020 12:59:54 GMT
etag: "5fd21bca-a895"
expires: Sun, 18 Dec 2022 09:49:05 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 80753
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b672acd91ef13a-ARN
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2ebbe4c913c816148dd033877b6308b0
d8f8cba86b216880237b97bd5032f162971b8818
7b661f08928e3e08a30d7efd350c633dad49fdd77d43bdcc37e805575b13d41f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B661F08928E3E08A30D7EFD350C633DAD49FDD77D43BDCC37E805575B13D41F"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21560
Expires: Sun, 18 Dec 2022 14:14:18 GMT
Date: Sun, 18 Dec 2022 08:14:58 GMT
Connection: keep-alive
www.nbfcs.org/
200 OK 6.0 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (21931), with no line terminators
Hash 5f7bf11fe4965444b0f60708039f2756
7a017b537166ce95466d22f01873b76dee22a406
968467102c12a84386c1985823dbc8183e1f601df49d30fdf6be9b64e9bcb411
GET / HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Next.js
ETag: "cagw76a31ggx7"
Vary: Accept-Encoding
Content-Encoding: gzip
www.nbfcs.org/_next/static/css/684b39f62cded0db.css
200 OK 6.4 kB URL HTTP/1.1 www.nbfcs.org/_next/static/css/684b39f62cded0db.css
IP
File type ASCII text, with very long lines (27619), with CRLF line terminators
Hash 8f6f8eb3b0994d1acbfa31c204f97cb0
c7f5a98f4889e4ebf3ef7fca1084ebf9c60eab96
31c04ae070593e8623484bbde04e4b844c9d0f96140a00dade6ac4ccf43935a6
GET /_next/static/css/684b39f62cded0db.css HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: text/css; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"6c23-18519e9b3b1"
Vary: Accept-Encoding
Content-Encoding: gzip
www.nbfcs.org/_next/static/chunks/webpack-be42ab225d639761.js
200 OK 1.1 kB URL HTTP/1.1 www.nbfcs.org/_next/static/chunks/webpack-be42ab225d639761.js
IP
File type ASCII text, with very long lines (2279), with no line terminators
Hash 3f0938761804a130090e2ab548c4a257
d25c3e36258fe0f9bdc96f70090841f4734603fb
76c6d61fc52d50db36f3edb88298f5cc6bb76f7fa127b93b17e6e3b25dd27c05
GET /_next/static/chunks/webpack-be42ab225d639761.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"8e7-18519e9b3b9"
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b09c5fd392d9d40a99ab4c70e59fd24e
40e39676ca8052fd8b9eab501750f0011737f507
8c2b60b0ec0a8121d5c5a8dda2ec1a57b923efe10246386262f359f6a458cdcd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 08:14:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nbfcs.org/_next/static/chunks/554-8e154f641094aae5.js
200 OK 6.4 kB URL HTTP/1.1 www.nbfcs.org/_next/static/chunks/554-8e154f641094aae5.js
IP
File type ASCII text, with very long lines (28773), with no line terminators
Hash 59e24887f5a60c851516e207eb0c1248
4acefb4c45a8056f4d9f1ebdfda39f92e9d56009
ea4099e28e9846da0dddfcd1704e90f0cefa2ac31d4519463d5a6485a3330b0a
GET /_next/static/chunks/554-8e154f641094aae5.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"7065-18519e9b3bd"
Vary: Accept-Encoding
Content-Encoding: gzip
www.nbfcs.org/_next/static/chunks/510-95033bf0c5e8ae7d.js
200 OK 9.1 kB URL HTTP/1.1 www.nbfcs.org/_next/static/chunks/510-95033bf0c5e8ae7d.js
IP
File type ASCII text, with very long lines (24507), with no line terminators
Hash c9afdcc5726812a6e53924c2cc3dd308
8dc7e80ae881c27e629a5964ada697f1d50a21e1
556d4c3ca6ce59f3c07aa84b6a1a89dc7cae412d8e91cd61107bf6d42aadc645
GET /_next/static/chunks/510-95033bf0c5e8ae7d.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"5fbb-18519e9b3b9"
Vary: Accept-Encoding
Content-Encoding: gzip
www.nbfcs.org/_next/static/chunks/675-b73f41980c39ec6a.js
200 OK 4.0 kB URL HTTP/1.1 www.nbfcs.org/_next/static/chunks/675-b73f41980c39ec6a.js
IP
File type ASCII text, with very long lines (9695), with no line terminators
Hash b3c02e1fad26ce52b2c668a7a4d28cee
569685ce3b8247f5129b1c919c3a053c6ddc5dd9
c29babbe1453bd1bc3dc66e5d57024e097bf3826119f6e7347af63503907cfe2
GET /_next/static/chunks/675-b73f41980c39ec6a.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"25df-18519e9b3b9"
Vary: Accept-Encoding
Content-Encoding: gzip
fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&family=Raleway:wght@400;500;600;700;800&display=swap
200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&family=Raleway:wght@400;500;600;700;800&display=swap
IP
Hash 07eafa90d918d524a1d87a15a09899b5
1a132cc55fc6ff3d40d7a51cd6a3212b500771f1
d73b495ece5f9b6fef471eebdd89ce8c87fc7b532eea4846d27e269e326efc1b
GET /css2?family=Montserrat:wght@400;500;600;700&family=Raleway:wght@400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 Dec 2022 08:14:58 GMT
date: Sun, 18 Dec 2022 08:14:58 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.nbfcs.org/_next/static/chunks/142-4eeb76513e56b47d.js
200 OK 4.1 kB URL HTTP/1.1 www.nbfcs.org/_next/static/chunks/142-4eeb76513e56b47d.js
IP
File type ASCII text, with very long lines (11209), with no line terminators
Hash a6de8a29c8a2d58309f2b9f5636a74d4
f47d921080dc687019f6d7e7ea9468312fc4dd43
b32c259c08e464c37a1d8ceb19eebbd748469d1d201e2f23e3b70ca3bcb40ee4
GET /_next/static/chunks/142-4eeb76513e56b47d.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"2bc9-18519e9b3bd"
Vary: Accept-Encoding
Content-Encoding: gzip
www.nbfcs.org/_next/static/chunks/main-9bf4c2cf7c353ef0.js
200 OK 35 kB URL HTTP/1.1 www.nbfcs.org/_next/static/chunks/main-9bf4c2cf7c353ef0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ec75f4a553ad6ba12bd1a09ccb06fe0f
72ea52608d3768bf396189607b7a374a60992a84
9180ad39779c801c05be91b1df046e8712b6325e1404fa691e9053ddfbfcb883
GET /_next/static/chunks/main-9bf4c2cf7c353ef0.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"1ce12-18519e9b3b1"
Vary: Accept-Encoding
Content-Encoding: gzip
www.nbfcs.org/_next/static/chunks/framework-4556c45dd113b893.js
200 OK 45 kB URL HTTP/1.1 www.nbfcs.org/_next/static/chunks/framework-4556c45dd113b893.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 828d2085295ecc1a26daac2042176dd3
1321a70d7499f927489b164a3a7ba3d49c5ef066
5347335eb87a340da6f347359ca03c7bfc9e2135448556ac64e17c83c051ba13
GET /_next/static/chunks/framework-4556c45dd113b893.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"22682-18519e9b3b9"
Vary: Accept-Encoding
Content-Encoding: gzip
www.nbfcs.org/_next/static/z4cPseZpLYq1PBPvlNXVA/_ssgManifest.js
200 OK 77 B URL HTTP/1.1 www.nbfcs.org/_next/static/z4cPseZpLYq1PBPvlNXVA/_ssgManifest.js
IP
File type ASCII text, with no line terminators
Hash b6652df95db52feb4daf4eca35380933
65451d110137761b318c82d9071c042db80c4036
6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
GET /_next/static/z4cPseZpLYq1PBPvlNXVA/_ssgManifest.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 77
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"4d-18519e9b3b1"
Vary: Accept-Encoding
www.nbfcs.org/_next/static/chunks/pages/index-e03b0d8901133460.js
200 OK 18 kB URL HTTP/1.1 www.nbfcs.org/_next/static/chunks/pages/index-e03b0d8901133460.js
IP
File type ASCII text, with very long lines (57773), with no line terminators
Hash 44ff1bd1b591e18f765a264e3618f9e5
e3860182c7414d526b639488bce4edaa2bd12ed2
43739d3da7f302b20db71871400a638d0ef2a1bf894c8b500b51b3fa4b41ffd5
GET /_next/static/chunks/pages/index-e03b0d8901133460.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"e1ad-18519e9b3b9"
Vary: Accept-Encoding
Content-Encoding: gzip
www.nbfcs.org/_next/static/z4cPseZpLYq1PBPvlNXVA/_buildManifest.js
200 OK 911 B URL HTTP/1.1 www.nbfcs.org/_next/static/z4cPseZpLYq1PBPvlNXVA/_buildManifest.js
IP
File type ASCII text, with very long lines (2531), with no line terminators
Hash 57f32b32eef14ffdd6d7dae777d9aa72
ac960e0f6d86125d3b67f28b570c5d3d32e72029
684a5a2b82564986168d1e43826b5dcb76a9b26fdd40e5bd6c33bce0fb934bba
GET /_next/static/z4cPseZpLYq1PBPvlNXVA/_buildManifest.js HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:58 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Fri, 16 Dec 2022 07:50:24 GMT
ETag: W/"9e3-18519e9b3b1"
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7897
Expires: Sun, 18 Dec 2022 10:26:36 GMT
Date: Sun, 18 Dec 2022 08:14:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7897
Expires: Sun, 18 Dec 2022 10:26:36 GMT
Date: Sun, 18 Dec 2022 08:14:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7897
Expires: Sun, 18 Dec 2022 10:26:36 GMT
Date: Sun, 18 Dec 2022 08:14:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7897
Expires: Sun, 18 Dec 2022 10:26:36 GMT
Date: Sun, 18 Dec 2022 08:14:59 GMT
Connection: keep-alive
nanouwho.com/9?z=5113553&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=fc325617f9bc4e3f8de68498d47968a8
200 OK 15 kB URL HTTP/2 nanouwho.com/9?z=5113553&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=fc325617f9bc4e3f8de68498d47968a8
IP
Hash f75eefac83463657f3b45124fde3e752
791fb83e320cfd1fcbdb16a3af28d90fc1279e2a
2429ad36067a219c23c957e9d2cc4f878732dabc27b6a7d1f6c4068f6b1c3275
Analyzer Verdict Alert quad9 Sinkholed
POST /9?z=5113553&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffreedukasyon.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&sah=1002&drf=&hil=1&ist=0&oaid=fc325617f9bc4e3f8de68498d47968a8 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 143
Origin: https://freedukasyon.com
Connection: keep-alive
Referer: https://freedukasyon.com/
Cookie: scm=1; OAID=0fee75b9281445d28d88652d364f5442; oaidts=1671351297
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://freedukasyon.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: f7563668ad90424fd927a5b566608294
access-control-expose-headers: X-Sc
set-cookie: OAID=fc325617f9bc4e3f8de68498d47968a8; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
oaidts=1671351297; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bfd0e913579b4ff2f511223d70cb01fb
497e0ffef816e100e6ddc221ec17d5f389c1142a
bee68ae1a938a5111a32dab4ec4f6964994e6c39143eac9ab94d6c5e29999372
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KyEMrUTeuVTPJ3EIkrH1DLYqa4bHK7fe6dApTAFP4XY0G4airnflGA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 38273
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F345d372d-49ec-4387-99c1-d3cf9f5906f5.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F345d372d-49ec-4387-99c1-d3cf9f5906f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e9d18ca29ccd52a2d503336cd466b00d
d9efd68382ccd3309c943690088cca4e5934ecff
de202292f0930aaaf434fc9b54652707b9da5ef7ccd7a1f888d3bf46755874be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F345d372d-49ec-4387-99c1-d3cf9f5906f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5439
x-amzn-requestid: 52d18b91-20fd-417a-9fb2-2d039e05e6a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2Z2HCXoAMFsqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3772-2f8d69d42408b30e4725763a;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:41:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LXJDMcnNM5qf9LmdkozPQOR1WBoiXGA4e4jrw9CE41NtDs_NxTuueQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:23 GMT
age: 37236
etag: "d9efd68382ccd3309c943690088cca4e5934ecff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12c4c2232b6d09e9085f0214b3260c1e
a24f8e949a2f2a973fe2dd5af994cd970d37f13a
000475ed7d0aab9a7dab3e25f0a29f82552739fea99f98cbf5131282d0db7d63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10670
x-amzn-requestid: d72e1904-caf4-4c72-a811-d1bde023f4b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT11JGCsIAMFRDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3687-7789040d71253d00378f9162;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8qqSQbj22k16ApKTT8y5BQItInb8EjZuACdWcsW_FnMysvnDADbLxQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:11 GMT
age: 38268
etag: "a24f8e949a2f2a973fe2dd5af994cd970d37f13a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ada04738696f861648635c9ba98841e4
ce644cd4349d88aa7c24b2503b0b18b444061639
e5cee777efbf1d8a0f95f6cce71199e5f016a91f90cf0afe38bc86654b9d730d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8696
x-amzn-requestid: c897aeed-a082-46a1-965f-39e8c763cb05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10ZH3jIAMF0gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-548ac80840737a20743980f5;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JecluZu8ExMmP-UHM8QbK-bjm_yqULU1tl2QQDfKMea8NHM6y2JI7g==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 38273
etag: "ce644cd4349d88aa7c24b2503b0b18b444061639"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae5629d0-2146-4184-be4e-96bb9ad63cda.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae5629d0-2146-4184-be4e-96bb9ad63cda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f483fbc04fdbb1b30097fadad516f718
5acc44f724df315d42fad6c3a6147c781285f498
c0709eab8e4a270d6a1ff763953241c6820dfd53f1c45fd73b0a8e2837934b58
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae5629d0-2146-4184-be4e-96bb9ad63cda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5290
x-amzn-requestid: 78198cd7-6565-48c4-a017-52522d65d9af
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dOAbhGYpoAMF3gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639be116-62976f8f1156951a5f8173f8;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 03:08:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2iWdl5-74fJleg5LpAWNtIhG1xbDtulnFiD_XfzKC5dQS90JsRkDrg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Dec 2022 03:50:20 GMT
age: 15879
etag: "5acc44f724df315d42fad6c3a6147c781285f498"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.nbfcs.org/api/authUser
200 OK 2 B URL HTTP/1.1 www.nbfcs.org/api/authUser
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /api/authUser HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nbfcs.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:59 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
ETag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
www.nbfcs.org/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FhandPhone.d82b3fd5.png&w=1200&q=75
200 OK 62 kB URL HTTP/1.1 www.nbfcs.org/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FhandPhone.d82b3fd5.png&w=1200&q=75
IP
Hash 9c26c40e444a9d552e1d05b2c0028b7c
ecca3d817435a98834541d412903431d0f6dc8a2
5586667b5f7fbab78a71d2bf2497447c5d607d690023e53ed7e22e5f86c6cc3e
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FhandPhone.d82b3fd5.png&w=1200&q=75 HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:59 GMT
Content-Type: image/webp
Content-Length: 40358
Connection: keep-alive
Vary: Accept
Cache-Control: public, max-age=315360000, immutable
ETag: 6tHqL3RVmby6AiCwgY7mFH4g2dUHWcdu3xEvOl0bmkg=
Content-Disposition: inline; filename="handPhone.webp"
Content-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;
X-Nextjs-Cache: HIT
www.nbfcs.org/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fform.e5986808.png&w=640&q=75
200 OK 8.9 kB URL HTTP/1.1 www.nbfcs.org/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fform.e5986808.png&w=640&q=75
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 18293f3c0452895c1c3a222f65f87bc1
518b919779481eab098c975a0e1d327d13e18077
3ca64d58b362f06f982c2bafa478478ca36713375b2fc4542394fcc413e40f35
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fform.e5986808.png&w=640&q=75 HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:59 GMT
Content-Type: image/webp
Content-Length: 8854
Connection: keep-alive
Vary: Accept
Cache-Control: public, max-age=315360000, immutable
ETag: PKZNWLNi8G+YLCuvpHhHjKNnEzdbL8RUI5T8xBPkDzU=
Content-Disposition: inline; filename="form.webp"
Content-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;
X-Nextjs-Cache: HIT
www.nbfcs.org/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fworld.c12e01af.png&w=1200&q=75
200 OK 37 kB URL HTTP/1.1 www.nbfcs.org/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fworld.c12e01af.png&w=1200&q=75
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 76341a391d7dab85dd7d219410e9718b
5e4be2c4616b9893339a0e19d1e1765e34fcc8c4
99b87290fdd4a0692eb23a380eb2c7c4e40ca3fc5f5e7702bdb41e9018b56b74
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fworld.c12e01af.png&w=1200&q=75 HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:59 GMT
Content-Type: image/webp
Content-Length: 37200
Connection: keep-alive
Vary: Accept
Cache-Control: public, max-age=315360000, immutable
ETag: mbhykP3UoGkusjo4DrLHxOQMo-xfXncCvbQekBi1a3Q=
Content-Disposition: inline; filename="world.webp"
Content-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;
X-Nextjs-Cache: HIT
www.nbfcs.org/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fus.2cafd197.png&w=750&q=75
200 OK 32 kB URL HTTP/1.1 www.nbfcs.org/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fus.2cafd197.png&w=750&q=75
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 746x478, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 975d5adf70ce77384e3238bf72f00e96
0e188e26a0bb4ca0b5d2748ce0704d9b2e814714
df49b0eb8da8fbc1ac0b6d7e4773e6299d8e242dd3b18101bab092661cd870aa
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fus.2cafd197.png&w=750&q=75 HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 18 Dec 2022 08:14:59 GMT
Content-Type: image/webp
Content-Length: 32380
Connection: keep-alive
Vary: Accept
Cache-Control: public, max-age=315360000, immutable
ETag: 30mw642o+8GsC21+R3PmKZ2OJC3TsYEBurCSZhzYcKo=
Content-Disposition: inline; filename="us.webp"
Content-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;
X-Nextjs-Cache: HIT
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 08:14:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 08:14:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 08:14:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 08:14:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nbfcs.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Dec 2022 21:08:51 GMT
expires: Tue, 12 Dec 2023 21:08:51 GMT
cache-control: public, max-age=31536000
age: 471968
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 08:14:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
betotodilea.com/impression/lY-IphGaBzQsospMoiLosGh8_jxOBvV4ZUdM7k_pDqrqHmX5RRQY3K801R_IhSvVCi0EBXt60s6J8m9y1qbOIHN9lrgA2-IRbD0ccdmzC9nucx8GmZCBXd_qRVk7FL4XHHua6pdJ7pmr0OUP9RBJZhnkV3SHVN2jqm7ST85tQbQttQTBFYJgxvj86MMsWkVaqFjbqUYoBa4GirKTB-LZbgUnwekl_5nVpkvd_NoOONk0xd49bwqx_YdDXTj0WVcwuMi0hnaUBNyMag8NXjlAP9tygp1X-oOJHoHy6JCHUxYwtATmZlv-C51gruIWneZLQG5cWrpGg5DH4IrehrUdY6rRmgqeq3g79BHGyAEjgt20VXUGmaETrZ48-itAumK7D7pupdi2bcboFxvYD7YK3Ey7phpdUohvfOeCAq9g0DPmWPWUyf0kqJaBxtKXOoyh1pQWs_1tR-1Lv8Lc9kt3lCWG2rg7IM0Qi6Hz1DDrv4mNU6hXAeaCO7mRMiRrXoS-4kgrNdT42abeDSvaCwsiPbHpjIJTjfAVyURHaAoEqzxXzuzS8tcFQY4c_Aoe1IpchoP46e_78jcoMZQLFVPYg71ua6_A71tY?_z=5113684&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Ffreedukasyon.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 43 B URL HTTP/2 betotodilea.com/impression/lY-IphGaBzQsospMoiLosGh8_jxOBvV4ZUdM7k_pDqrqHmX5RRQY3K801R_IhSvVCi0EBXt60s6J8m9y1qbOIHN9lrgA2-IRbD0ccdmzC9nucx8GmZCBXd_qRVk7FL4XHHua6pdJ7pmr0OUP9RBJZhnkV3SHVN2jqm7ST85tQbQttQTBFYJgxvj86MMsWkVaqFjbqUYoBa4GirKTB-LZbgUnwekl_5nVpkvd_NoOONk0xd49bwqx_YdDXTj0WVcwuMi0hnaUBNyMag8NXjlAP9tygp1X-oOJHoHy6JCHUxYwtATmZlv-C51gruIWneZLQG5cWrpGg5DH4IrehrUdY6rRmgqeq3g79BHGyAEjgt20VXUGmaETrZ48-itAumK7D7pupdi2bcboFxvYD7YK3Ey7phpdUohvfOeCAq9g0DPmWPWUyf0kqJaBxtKXOoyh1pQWs_1tR-1Lv8Lc9kt3lCWG2rg7IM0Qi6Hz1DDrv4mNU6hXAeaCO7mRMiRrXoS-4kgrNdT42abeDSvaCwsiPbHpjIJTjfAVyURHaAoEqzxXzuzS8tcFQY4c_Aoe1IpchoP46e_78jcoMZQLFVPYg71ua6_A71tY?_z=5113684&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Ffreedukasyon.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/lY-IphGaBzQsospMoiLosGh8_jxOBvV4ZUdM7k_pDqrqHmX5RRQY3K801R_IhSvVCi0EBXt60s6J8m9y1qbOIHN9lrgA2-IRbD0ccdmzC9nucx8GmZCBXd_qRVk7FL4XHHua6pdJ7pmr0OUP9RBJZhnkV3SHVN2jqm7ST85tQbQttQTBFYJgxvj86MMsWkVaqFjbqUYoBa4GirKTB-LZbgUnwekl_5nVpkvd_NoOONk0xd49bwqx_YdDXTj0WVcwuMi0hnaUBNyMag8NXjlAP9tygp1X-oOJHoHy6JCHUxYwtATmZlv-C51gruIWneZLQG5cWrpGg5DH4IrehrUdY6rRmgqeq3g79BHGyAEjgt20VXUGmaETrZ48-itAumK7D7pupdi2bcboFxvYD7YK3Ey7phpdUohvfOeCAq9g0DPmWPWUyf0kqJaBxtKXOoyh1pQWs_1tR-1Lv8Lc9kt3lCWG2rg7IM0Qi6Hz1DDrv4mNU6hXAeaCO7mRMiRrXoS-4kgrNdT42abeDSvaCwsiPbHpjIJTjfAVyURHaAoEqzxXzuzS8tcFQY4c_Aoe1IpchoP46e_78jcoMZQLFVPYg71ua6_A71tY?_z=5113684&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Ffreedukasyon.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedukasyon.com/
Cookie: OAID=fc325617f9bc4e3f8de68498d47968a8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:15:02 GMT
content-type: image/gif
content-length: 43
x-trace-id: 658950ad203a879f9c742dcd3e8d90d5
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
choupsee.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: choupsee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freedukasyon.com/
Content-Type: application/json
Origin: https://freedukasyon.com
Content-Length: 377
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:15:05 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: b42db9dd708641551fdbebdce8e4e876
access-control-allow-origin: https://freedukasyon.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=12333dd2625a406aa2cb5469e8038b0b&zoneId=3913309&checkDuplicate=true&ymid=&var=
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=12333dd2625a406aa2cb5469e8038b0b&zoneId=3913309&checkDuplicate=true&ymid=&var=
IP
File type JSON data\012- , ASCII text
Hash 4793a481a7b21dde12f9543e64e4818b
7264393d93528171ef9195c3d8caf708c59f60cb
084c3debf8425808cea5ae25a2f5cf8e97b4e4be591ef4670112e8bda2c862cf
GET /gid.js?pub=0&userId=12333dd2625a406aa2cb5469e8038b0b&zoneId=3913309&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freedukasyon.com/
Origin: https://freedukasyon.com
Connection: keep-alive
Cookie: ID=fc325617f9bc4e3f8de68498d47968a8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:15:05 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://freedukasyon.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=fc325617f9bc4e3f8de68498d47968a8; expires=Mon, 18 Dec 2023 08:15:05 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
choupsee.com/pfe/current/tag.min.js?z=3913309
200 OK 0 B URL HTTP/2 choupsee.com/pfe/current/tag.min.js?z=3913309
IP
GET /pfe/current/tag.min.js?z=3913309 HTTP/1.1
Host: choupsee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedukasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 09:06:10 GMT
etag: W/"63984082-390a"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
choupsee.com/pfe/current/universal.min.js?v=3.1.410
200 OK 0 B URL HTTP/2 choupsee.com/pfe/current/universal.min.js?v=3.1.410
IP
GET /pfe/current/universal.min.js?v=3.1.410 HTTP/1.1
Host: choupsee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freedukasyon.com/
Origin: https://freedukasyon.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 09:06:10 GMT
etag: W/"63984082-18c6c"
access-control-allow-origin: https://freedukasyon.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
freedukasyon.com/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: freedukasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 18 Dec 2022 08:14:56 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=86400
expires: Sun, 18 Dec 2022 08:57:32 GMT
cf-cache-status: HIT
age: 1044
last-modified: Sun, 18 Dec 2022 07:57:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CTz%2BEaf3bp1TTB3UqZyyhO2T9BVS4WMQMQvGDGyV3RsOHlDI88Vo8Rhx0yYy6xaWbBRBZWaroHEQtqhaTuSNKyhVdvHOrT%2Bvv4faPJXGBqC2bD%2Bis%2FLJdwBvNBb3RdLUS%2B3O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77b672a47c7a0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ibrapush.com/pfe/current/tag.min.js?z=5113554
200 OK 0 B URL HTTP/2 ibrapush.com/pfe/current/tag.min.js?z=5113554
IP
GET /pfe/current/tag.min.js?z=5113554 HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedukasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 09:06:10 GMT
etag: W/"63984082-390a"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
link: <https://my.rtmark.net>; rel=dns-prefetch;, <https://my.rtmark.net>; rel=preconnect
content-encoding: gzip
X-Firefox-Spdy: h2
nanouwho.com/1?z=5113553
200 OK 0 B IP
Analyzer Verdict Alert quad9 Sinkholed
GET /1?z=5113553 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedukasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 511bd3e530b9d581ab0b26019b4ad4da
access-control-expose-headers: X-Sc
x-sc: 10fzZJ4yTCh15mi3-zw7cSKgKzwHgspeE9WKFnFZq3tOESuQEWoVNPg2WviZq3LX-2GF57dLucjzEAQS6Xk4_0mK3eg=
set-cookie: scm=1; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
OAID=0fee75b9281445d28d88652d364f5442; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
oaidts=1671351297; expires=Mon, 18 Dec 2023 08:14:57 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
betotodilea.com/500/5113684?excludes=&oaid=fc325617f9bc4e3f8de68498d47968a8&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Ffreedukasyon.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
200 OK 0 B URL HTTP/2 betotodilea.com/500/5113684?excludes=&oaid=fc325617f9bc4e3f8de68498d47968a8&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Ffreedukasyon.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
IP
GET /500/5113684?excludes=&oaid=fc325617f9bc4e3f8de68498d47968a8&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Ffreedukasyon.com%2F&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: betotodilea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://freedukasyon.com
Connection: keep-alive
Referer: https://freedukasyon.com/
Cookie: OAID=b7bd16b8144d48fdb725ed4db2fbd066
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/javascript
x-trace-id: 7d4fa08fe9c6d7a28ed599c425716da4
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: https://freedukasyon.com
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=fc325617f9bc4e3f8de68498d47968a8; expires=Mon, 18 Dec 2023 08:14:57 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
bedrapiona.com/5/5113555/?oo=1&js_build=iclick-v1.464.1
200 OK 0 B URL HTTP/2 bedrapiona.com/5/5113555/?oo=1&js_build=iclick-v1.464.1
IP
GET /5/5113555/?oo=1&js_build=iclick-v1.464.1 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freedukasyon.com
Connection: keep-alive
Referer: https://freedukasyon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 08:14:57 GMT
content-type: application/json
x-trace-id: e96968bfd10a94f0e64a3150a06525d6
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://freedukasyon.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=fc325617f9bc4e3f8de68498d47968a8; expires=Mon, 18 Dec 2023 08:14:57 GMT; path=/; secure; SameSite=None
oaidts=1671351297; expires=Mon, 18 Dec 2023 08:14:57 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
188.114.97.1
172.67.211.29
104.18.32.68
139.45.197.251
23.36.76.226