payments.canadianvisaexpert.com/handlers/registerhandler.ashx
172.67.6.152301 Moved Permanently 0 B URL HTTP/1.1 payments.canadianvisaexpert.com/handlers/registerhandler.ashx
IP 172.67.6.152:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /handlers/registerhandler.ashx HTTP/1.1
Host: payments.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 26 Jan 2023 09:15:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 26 Jan 2023 10:15:55 GMT
Location: https://payments.canadianvisaexpert.com/handlers/registerhandler.ashx
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78f8259acdf00afe-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7340
Expires: Thu, 26 Jan 2023 11:18:16 GMT
Date: Thu, 26 Jan 2023 09:15:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6531
Expires: Thu, 26 Jan 2023 11:04:47 GMT
Date: Thu, 26 Jan 2023 09:15:56 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 08:35:16 GMT
content-type: application/json
age: 2440
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3722
Expires: Thu, 26 Jan 2023 10:17:58 GMT
Date: Thu, 26 Jan 2023 09:15:56 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Se7t3yeitnbCKJEuXrylS3O9BmIaNg4fr1Z3TjSykpFmllKPA4exg4lE+hFbAAuahu4P5oXsk3Nuu+etMmmnwA==
x-amz-request-id: 4HE1XMQ49TC4ZBJM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 08:48:54 GMT
age: 1622
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 09:15:56 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 053398d14d950c723379fc28d9d1998d
095fdfeecd486e778ec7e1aef76b3d9e2d536fb0
4456e151997557d9ea84487d49fa4a53ea7147070148c64e9b8694c806c67238
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 26 Jan 2023 09:15:56 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 25 Jan 2023 21:14:32 GMT
Expires: Thu, 26 Jan 2023 21:14:32 GMT
ETag: "095fdfeecd486e778ec7e1aef76b3d9e2d536fb0"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 08:49:01 GMT
age: 1615
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6696
Expires: Thu, 26 Jan 2023 11:07:32 GMT
Date: Thu, 26 Jan 2023 09:15:56 GMT
Connection: keep-alive
push.services.mozilla.com/
54.148.77.40101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.148.77.40:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iBD7RBy9e8/UBFzsvaIVyQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Zar9uw3tbrkWJJPPLBVyQmN9bH4=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15607
Expires: Thu, 26 Jan 2023 13:36:05 GMT
Date: Thu, 26 Jan 2023 09:15:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15607
Expires: Thu, 26 Jan 2023 13:36:05 GMT
Date: Thu, 26 Jan 2023 09:15:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15607
Expires: Thu, 26 Jan 2023 13:36:05 GMT
Date: Thu, 26 Jan 2023 09:15:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15607
Expires: Thu, 26 Jan 2023 13:36:05 GMT
Date: Thu, 26 Jan 2023 09:15:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15607
Expires: Thu, 26 Jan 2023 13:36:05 GMT
Date: Thu, 26 Jan 2023 09:15:58 GMT
Connection: keep-alive
payments.canadianvisaexpert.com/handlers/registerhandler.ashx
104.22.11.246302 Found 6.2 kB URL HTTP/2 payments.canadianvisaexpert.com/handlers/registerhandler.ashx
IP 104.22.11.246:0
Hash d98d6058babd756897edf57e018a0745
e79a6604a9774cdfa44dde468bfbaf2b48c4316d
6a96b1cd8c1553135328208d64fdc08b39a7935ac357fefdc84b06a15f3b2bb0
GET /handlers/registerhandler.ashx HTTP/1.1
Host: payments.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 26 Jan 2023 09:15:57 GMT
content-type: text/html; charset=utf-8
location: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
cache-control: private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 78f8259fab7a0b06-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47770e9d-2bfd-4b8d-8653-017d569d133f.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47770e9d-2bfd-4b8d-8653-017d569d133f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8dcb846958865d2b14b540f26c963847
90c1569a936c7922880a04a5882683b1ac85b86f
253e15cc191946fe8c499b0633e95523689bdee6c06579c2953c640168abd7a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47770e9d-2bfd-4b8d-8653-017d569d133f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8897
x-amzn-requestid: ce231e55-4131-43b5-bec6-f4861a952163
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSY_DF03oAMFm8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d52c-611bceff093006444f7955cb;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 07:07:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7nDjP6udEKuZ9WC-XUCtTWcnO_G1uIfv-4cPlO2fzxa6wz2DDO0faQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:37:31 GMT
age: 5907
etag: "90c1569a936c7922880a04a5882683b1ac85b86f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
104.22.11.246200 OK 3.8 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
IP 104.22.11.246:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1014)
Hash dc712d91af94585a8ac923f5b42e0010
3320360589b09cd0bcdbfbd3206df5e62a001415
f39afe44bae55aa9d7691c315e686deb4a0bb4f2ea90962375b88f0b8bddffa8
GET /lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: text/html
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:17 GMT
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 78f825a7faa50b06-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
104.22.11.246200 OK 4.8 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
IP 104.22.11.246:0
Hash c2c851d7c65b61ea97f767dda48bf7bc
1b5c10545c98a167488dd33743121a7ce5a9dec5
dd20a4f492c9ac4ab08c00c360d1daeeb4db069acd61a5324c168dcc0193d28d
GET /lp/cve/register_sub0/Style/style.css HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: text/css
content-length: 4752
cache-control: max-age=604800
content-encoding: gzip
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: "1b9e171132ed91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99745
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ab2da50b06-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74736a6-2e9e-46aa-9c09-e96ce23f160c.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74736a6-2e9e-46aa-9c09-e96ce23f160c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13fa7641221298b50dd96428df4a60a7
8f306f479049964b44288c97919e3abf3196f785
c5063d45d5222aaf0bf9ddd3a5a24c9856d2684e3c7650e48cd1e9f90d365295
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74736a6-2e9e-46aa-9c09-e96ce23f160c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4774
x-amzn-requestid: 280effa4-1bf4-4c89-9831-e1982ff23153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSYeyG6voAMFzAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d45e-0db1bd5e44404c964dec763a;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 07:03:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bE-O-xdBLQ_A14Me54-PoMs5VDqRYTdIHCUglJuMIKDV-pPdRY703g==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:34:51 GMT
age: 6067
etag: "8f306f479049964b44288c97919e3abf3196f785"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/Translations.js
104.22.11.246200 OK 2.1 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Translations.js
IP 104.22.11.246:0
File type Unicode text, UTF-8 text, with very long lines (596)
Hash f051dee3a21ed8e2ea133632c3dd36da
213aa7b950659708672180f77958b6e8298df274
f98933e2bd6ec2db5db021f5de154e57fb797ecadd85ac192bc2e7ce7e457dff
GET /lp/cve/register_sub0/Translations.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: application/x-javascript
content-length: 2101
cache-control: max-age=604800
content-encoding: gzip
last-modified: Mon, 12 Dec 2022 14:00:37 GMT
etag: "f2d0da1c32ed91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99743
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ab2dab0b06-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c7f25e5-06eb-4d3f-99e2-edacd0739efb.jpeg
34.120.237.76200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c7f25e5-06eb-4d3f-99e2-edacd0739efb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cfe699b31f96add9f1439af1ff1191eb
f77a833a69b69eef4a39e404c102f624e96b52c0
44312979ac13221e5c3328ad590f0f3dc7da00380c07c433382cd81c47b717f8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c7f25e5-06eb-4d3f-99e2-edacd0739efb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14856
x-amzn-requestid: e7d931f7-d086-42b9-a1f3-c8253b82eba6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSY_OHw7IAMFj6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d52e-4fd95c5f5a64861720a1ee60;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2yzeIjHl8sUO9s5n2sZfN6DSWOVDVQl-xdSrNmHu-yWXj_7VJJk5qA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:39:30 GMT
age: 5788
etag: "f77a833a69b69eef4a39e404c102f624e96b52c0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4cb7be12333fa7ea3353901b4b3215af
4b758cc432874384f330568177eef5a328d7e69a
d6f86c0ddbabd5c4fd7cee72ce4da62ccddd9d29139c9ab033bb1ab8425bae22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11918
x-amzn-requestid: df7df0ae-d70e-4b80-9483-2ecd5c8ee4a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fEqvPEXMoAMF5Aw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb57fa-04193e0514c1c1e85d9d023b;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 03:11:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fznabMNG3n9Uo4L1jrrewtL_hJnQv8oR2qggeZtruvOLVzpUpcs7Tw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 17:10:40 GMT
etag: "4b758cc432874384f330568177eef5a328d7e69a"
content-type: image/jpeg
age: 57918
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/init.js
104.22.11.246200 OK 6.3 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/init.js
IP 104.22.11.246:0
File type C++ source, Unicode text, UTF-8 (with BOM) text, with very long lines (1618)
Hash 9440af496706def4caf77f4e69e6ad5e
5e589720af3a0337c50b8a34b59874e3da61570e
efe4fe6bf0342bf240355e0b089ecb06653e316ed8e90a3d047e5ccb3c980bbb
GET /lp/Shared/init.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: application/x-javascript
content-length: 6266
cache-control: max-age=604800
content-encoding: gzip
last-modified: Wed, 21 Sep 2022 14:25:01 GMT
etag: "859494efc5cdd81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99741
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ab3db60b06-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05a55fc3-efb4-4124-a48d-b57fc1e9bea4.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05a55fc3-efb4-4124-a48d-b57fc1e9bea4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c331b0423afe4c6888533296b5f275bc
766aba1f8bb596a068f4e611161fa54616f506ed
0551882e8ba5962ca2c3a8634574e75f11321d46f9c901430614a9c73eaeae12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05a55fc3-efb4-4124-a48d-b57fc1e9bea4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7426
x-amzn-requestid: 1c0f08ae-9b11-4c41-a6e9-819343332f34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPF-fElWIAMFg8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf838f-6cf92e9d28ec0c9727e7419a;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:06:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A9cyJReV84QegjGfuOcBlZ-T6uefiGXXKnIBXIcn3a1x0kRYQ6XI3A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:13:57 GMT
age: 7321
etag: "766aba1f8bb596a068f4e611161fa54616f506ed"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/settings.js
104.22.11.246200 OK 539 B URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/settings.js
IP 104.22.11.246:0
Hash 93aaf62c3a0d533a0b9d5127e3e4c968
86f88b5d5503d4ce226e22a47cfc0c1d50bcf3c0
56a488e64ce53867336f9085678e3b89a68c86fa814c0df399f2f72ec0a23655
GET /lp/cve/settings.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: application/x-javascript
content-length: 539
cache-control: max-age=604800
content-encoding: gzip
last-modified: Wed, 06 Jul 2022 08:05:48 GMT
etag: "51807233f91d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99741
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ab3db40b06-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-28213132-20
142.250.74.168200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-28213132-20
IP 142.250.74.168:0
File type ASCII text, with very long lines (1759)
Hash e2e2c07fc6d9e9c3ccc96d49f81f6707
c5827da9d28c50c1559e9823feabb52a8eec043d
65088b2d42f04f902a428a6bb208893aee58f4cd053200b3f0eddc3f2a26d5e8
GET /gtag/js?id=UA-28213132-20 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 09:15:58 GMT
expires: Thu, 26 Jan 2023 09:15:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45059
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-28213132-2
142.250.74.168200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-28213132-2
IP 142.250.74.168:0
File type ASCII text, with very long lines (1759)
Hash d6055e646464e48e849ded66767f5ba5
64a7e46d05c008b11fc225ac6a82b5928399f45a
beb7fb3279b91b450a561d563f1aabf7e88fe24d72940bc63b2fd8769d367ce5
GET /gtag/js?id=UA-28213132-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 09:15:58 GMT
expires: Thu, 26 Jan 2023 09:15:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44987
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/Yahoo-Logo.png
104.22.11.246200 OK 3.4 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/Yahoo-Logo.png
IP 104.22.11.246:0
File type PNG image data, 238 x 67, 8-bit colormap, non-interlaced\012- data
Hash d92ac810555767d1a68a98f18be62545
3a252517c038a1a6b2f7772ca99060ed783b7503
5612397564017cc052b36ea883775fb2848fb5299e0dddd8fe2a5f95c254dfe5
GET /lp/cve/register_sub0/Style/Yahoo-Logo.png HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: image/png
content-length: 3369
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: "b78c231132ed91:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99722
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac2e740b06-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b9b15b35959ceeca1569e92e1a4fb1fb
7f16c60b731b6dc09a3cde7fe140b59ab5b23af9
9c9b962881bf7fe4496ee43d2c912d589624f48e7172982e6b26515fd24a285c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C9B962881BF7FE4496EE43D2C912D589624F48E7172982E6B26515FD24A285C"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9525
Expires: Thu, 26 Jan 2023 11:54:43 GMT
Date: Thu, 26 Jan 2023 09:15:58 GMT
Connection: keep-alive
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/bullet.png
104.22.11.246200 OK 1.8 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/bullet.png
IP 104.22.11.246:0
File type PNG image data, 102 x 102, 8-bit colormap, non-interlaced\012- data
Hash 0da7ed5c555cc9e51df1b43648cc4f3e
e25ed17369f15ba7bf6eaa8c86d4bd4630311e8e
1c6d6dfec75940cb4650ff009def7e2aabe60e2cbb3fd3373490188a2d7020c9
GET /lp/cve/register_sub0/Style/bullet.png HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: image/png
content-length: 1759
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: "ccd3ff1032ed91:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99721
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac1e6f0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/Bloomberg-Logo.png
104.22.11.246200 OK 4.6 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/Bloomberg-Logo.png
IP 104.22.11.246:0
File type PNG image data, 272 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a71fda574b7e122a0241679172507f6
6135c53db637a14c2b2bdec901c3a7d7f1ddcc87
2f86a85df65480ad062604200232e0963c10b352a04b2c5b9c930440a6da2b45
GET /lp/cve/register_sub0/Style/Bloomberg-Logo.png HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: image/png
content-length: 4579
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: "ccd3ff1032ed91:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99722
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac2e770b06-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 715f2a2c57230b2e1aedef83c76e0cbc
df5a219b8564a6c8fbe802e574ba625be7f204ca
ca239808557d30d1df2527ae94987866734b640bfd631282414a39eac87b872c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/reuters-logo.png
104.22.11.246200 OK 11 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/reuters-logo.png
IP 104.22.11.246:0
File type PNG image data, 314 x 79, 8-bit/color RGB, non-interlaced\012- data
Hash 22947eace8948f1c47b034c180799c8d
06298815bb9654decbe39ccbb00dfae73e074baa
be98a11b509ca367de82d54a0f7b9014bb75cf5c27efedcc9cf326d8d50ecedb
GET /lp/cve/register_sub0/Style/reuters-logo.png HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: image/png
content-length: 10676
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: "6675101132ed91:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99722
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac2e7a0b06-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 47d71bf163265666c21e2410fb568043
54a4b0f241af261f878967ce058f5885be476cc4
8b7ce4c8269941cf55ca12415b1abfd7d4ae7bf5823657f3afe5e8dd34bed80b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b9b15b35959ceeca1569e92e1a4fb1fb
7f16c60b731b6dc09a3cde7fe140b59ab5b23af9
9c9b962881bf7fe4496ee43d2c912d589624f48e7172982e6b26515fd24a285c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C9B962881BF7FE4496EE43D2C912D589624F48E7172982E6B26515FD24A285C"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9525
Expires: Thu, 26 Jan 2023 11:54:43 GMT
Date: Thu, 26 Jan 2023 09:15:58 GMT
Connection: keep-alive
fonts.googleapis.com/css2?family=Amiri:wght@400;700&family=Open+Sans:wght@400;600;700&display=swap
142.250.74.138200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css2?family=Amiri:wght@400;700&family=Open+Sans:wght@400;600;700&display=swap
IP 142.250.74.138:0
Hash 171acdbe679a2cd459b07bd7c2cbb103
8264c1bc2a4ea5a00642b1cb99bf0b88ba9c8e25
82cdc63d016f6a12b63fe958baeb2ddc3eacc598ccce7cf8e88cd706b8522e52
GET /css2?family=Amiri:wght@400;700&family=Open+Sans:wght@400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 26 Jan 2023 09:15:58 GMT
date: Thu, 26 Jan 2023 09:15:58 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3e7fdf1ab4be9ee80518d0400683f0d3
dd2ec6511ba05e7fb89d32a1ad407db5eaa1520b
eb789178a0b528aad87a5bf0d05aecd45e7623ebaf198820f9310887757e1d5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/lang.svg
104.22.11.246200 OK 45 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/lang.svg
IP 104.22.11.246:0
Hash bf2ff48673480c4bc4bc81c9406dc690
851bb35d43ff8e9afb523bb396f17e097a11049b
ea23d116c66675e3aa5ec0db4902f96c618d11af5e0b09254df0efbcd9e280cc
GET /lp/cve/register_sub0/Style/lang.svg HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: image/svg+xml
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:38 GMT
etag: W/"d63ffc1c32ed91:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99741
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac1e6b0b06-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/amiri/v27/J7aRnpd8CGxBHpUutLM.woff2
216.58.207.227200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/amiri/v27/J7aRnpd8CGxBHpUutLM.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 20600, version 1.0\012- data
Hash eb1549f20172d360b329ce726a1b4453
4ad45add919a87c6ef0a2f532310e6204da1e3f2
a92804b4f3d92b723406c03e1f9c5c108aef481303f4e8a9f4fc60f2141aca6b
GET /s/amiri/v27/J7aRnpd8CGxBHpUutLM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 00:45:37 GMT
expires: Fri, 26 Jan 2024 00:45:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 09 Jan 2023 22:59:42 GMT
content-type: font/woff2
age: 30621
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/amiri/v27/J7acnpd8CGxBHp2VkaY_zp4.woff2
216.58.207.227200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/amiri/v27/J7acnpd8CGxBHp2VkaY_zp4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 20128, version 1.0\012- data
Hash 69d0527de9164e39cc0b31519a054788
124c9f159af9519e556bb77a42e965268daab82c
1a8f71fc51db00860f9f3dea4b9261b7abd75f48cb3ade8b1e015bc910974549
GET /s/amiri/v27/J7acnpd8CGxBHp2VkaY_zp4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 12:24:39 GMT
expires: Thu, 25 Jan 2024 12:24:39 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 09 Jan 2023 22:59:44 GMT
content-type: font/woff2
age: 75079
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/logo.svg
104.22.11.246200 OK 84 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/logo.svg
IP 104.22.11.246:0
Hash df90ea89c72b72486ef2c0c5e0b2055b
a2ac0ba9a185fbabeaa2de47ec35548e82013b4e
e62eb913d597b90f1ce2a2d1ea171df690d0f8407bb0e55fb9fc25623a16b8ac
GET /lp/cve/register_sub0/Style/logo.svg HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: image/svg+xml
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: W/"a5fc61132ed91:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99736
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac1e6a0b06-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CAQ469BC77UBO7QI1IG0&lib=ttq
95.101.10.184200 OK 1.4 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CAQ469BC77UBO7QI1IG0&lib=ttq
IP 95.101.10.184:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (3287)
Hash 22a6d2f07704643a7ecf83cae1bb5a7a
801ee83c9f5539744e1ed1ec9343750e6edb4530
6a649bb8081f0dae6fd98e4e1813fd53ebde0dbd7adad850b0da277c2bfc0493
GET /i18n/pixel/events.js?sdkid=CAQ469BC77UBO7QI1IG0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230126091558A81649A65743D68FB882
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb6a4fd614f4cc01d61e332712a307f468a6ac6a61ee20e30fc10d0c73533f4b590f2fb758d7ac19f9c32688a2534c594b17fbcf27b0df27def9a97574942ef3fd0185c028346aa9e2fd5f992f74535fd8725ae111b59a218b6f1d2901822510b48
content-encoding: gzip
content-length: 1416
x-origin-response-time: 6,23.220.107.214
x-akamai-request-id: 28d39819.162a0adf
expires: Thu, 26 Jan 2023 09:15:58 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 26 Jan 2023 09:15:58 GMT
x-cache: TCP_MISS from a95-101-10-180.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2KrEyogPRo5BzRaGfo8cayakOdA; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-220-107-214.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=95, origin; dur=6, inner; dur=2
x-parent-response-time: 101,95.101.10.180
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
95.101.10.184200 OK 70 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMQ.js
IP 95.101.10.184:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash 0ee951646422f4b1d0ba6bf1341c86e4
7c47b7ca2a0fe31278d5d46a15439bbaa73f5112
7468187adc69bb54e683428598fb1d15368c9a72cfee467fcd217e0a575f2a4c
GET /i18n/pixel/static/main.MWE2YWY2YTgzMQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Cookie: _ttp=2KrEyogPRo5BzRaGfo8cayakOdA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175846C1594C909FD799AD743C
x-tt-trace-host: 01017a36535d16b01285413ef1c76fec440ee96c163840ba7b09f8be7849df9a3182eb32fd2dc99b4ee04181ce8ced2ac57f59ec3d3f4d224d1f2e04490b852e05195e15f26c44615f8c4113ead1bb47c8afe1f7083a2419bfe87288a4d0ddc6c0
content-encoding: gzip
content-length: 70494
date: Thu, 26 Jan 2023 09:15:58 GMT
x-cache: TCP_HIT from a95-101-10-180.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 162a0b69
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/main.js
104.22.11.246200 OK 1.5 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/main.js
IP 104.22.11.246:0
Hash 2c840110275811100e99491f43d86e92
4859c7e9c5d450a40f873f044bc4e7a533c3d748
235e5484460648fa9df980d53c05de3579f9ba9161fba0dcbd28ed97f4ecd50f
GET /lp/cve/register_sub0/main.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: application/x-javascript
content-length: 1498
cache-control: max-age=604800
content-encoding: gzip
last-modified: Mon, 12 Dec 2022 14:00:17 GMT
etag: "8281f11032ed91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ab3dc00b06-OSL
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/www-player.css
172.217.21.174200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/4248d311/www-player.css
IP 172.217.21.174:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8a6331ed48be29c59230b0c7360068de
22a20436f427d6b8e26eb30ed9aab51a43d389bf
72f0818ab04697fc29d331b2add584f3cd5e269446c7297300701a4666c9d95e
GET /s/player/4248d311/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/MtV2OdpT3jE
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49911
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 22:04:20 GMT
expires: Tue, 23 Jan 2024 22:04:20 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/css
age: 213098
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 04cb7fc8b1e2a65a0b198cc53eb5e5cd
6d04611612d81108e856467f0e4b0479cbb37d33
1c745d8ace7ea6f8e5d7da5e9c067b7b3427ce9c5a5e2c5c35d1c345266de518
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jan 2023 21:48:03 GMT
expires: Fri, 19 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 559675
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js
172.217.21.174200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js
IP 172.217.21.174:0
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/MtV2OdpT3jE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 17:46:05 GMT
expires: Thu, 25 Jan 2024 17:46:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 55793
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jan 2023 16:40:43 GMT
expires: Fri, 19 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 578116
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 515c4eac10a2f61a04f3d63eaffdcc3a
83d2d27f82728771171b8a45cb928fa6f29cf559
760f619b46fbfb915bf9144c518466b39f8983744518a3ac026046740e58d7bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "760F619B46FBFB915BF9144C518466B39F8983744518A3AC026046740E58D7BB"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10505
Expires: Thu, 26 Jan 2023 12:11:04 GMT
Date: Thu, 26 Jan 2023 09:15:59 GMT
Connection: keep-alive
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/journy_BG_1920.png
104.22.11.246200 OK 17 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/journy_BG_1920.png
IP 104.22.11.246:0
File type PNG image data, 1923 x 406, 8-bit/color RGBA, non-interlaced\012- data
Hash 48ae3ef038d65b7d1f5b4c3870fa134c
05442188c3453b35c6e395c4a272f29e7d925049
cdf19e8e6de965d0834319bd1401d7d6fd789aae1d43aaccbe85eb88787371c8
GET /lp/cve/register_sub0/Style/journy_BG_1920.png HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: image/png
content-length: 16745
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: "b93621132ed91:0"
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac1e700b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/arrow_right.png
104.22.11.246200 OK 1.3 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/arrow_right.png
IP 104.22.11.246:0
File type PNG image data, 45 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash 903048e619c8cabe7e31b1528e8b86ea
2ff481c729a7b88316fe73654391033acb76d0e5
12d73fe57b9cf2a39e738ba2582f04b05262fcb284a425e5f5388c6882ce650e
GET /lp/cve/register_sub0/Style/arrow_right.png HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: image/png
content-length: 1288
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:38 GMT
etag: "aa24e91c32ed91:0"
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac2e730b06-OSL
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
95.101.10.184200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
IP 95.101.10.184:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash e35cd3aeb48075134b13d5d593e609af
b967aced0b33616a54a9b7d5d3d092f28b9cca81
e25f7cb45c4d46dc9ebcf4cbe5209c87765cb94c15384780899eee7d888273e6
GET /i18n/pixel/static/identify_c4832.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Cookie: _ttp=2KrEyogPRo5BzRaGfo8cayakOdA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175825795F92399DF9E7BC6845
x-tt-trace-host: 01213c9428e1dc2e706424a5e4830ae2753a9403fe7ed2020932fc61a3c47c96784adda24a6c56428140d39df42ee71252f6133830581f45dad09e0f84f6c427e5570f8f5241c1349d3294ee56c52eab748dbda5cfd0ecad2a022e79233890d27b
content-encoding: gzip
content-length: 30930
date: Thu, 26 Jan 2023 09:15:59 GMT
x-cache: TCP_MEM_HIT from a95-101-10-180.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=1
x-akamai-request-id: 162a0c62
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Phone_code/index.js
104.22.11.246200 OK 2.0 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Phone_code/index.js
IP 104.22.11.246:0
Hash 2eec9917e9ff3d27186ce181aba42f1f
aef66f59364a29f1e9962cbdb77eda7839825eb6
5b6719643dd28e841ca0a9e66c1ea6a9153704941f462278ce74a660ece556b6
GET /lp/Shared/FormElements/Phone_code/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 2036
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:07:06 GMT
etag: "19d492af47f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae686b0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Birthday/index.js
104.22.11.246200 OK 3.1 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Birthday/index.js
IP 104.22.11.246:0
File type HTML document, Unicode text, UTF-8 text
Hash 34967eea1f7fbc2c48e5bd5ef6d14522
28b52a733afe372b5dd20ad8f405f98e5d92f120
385e1b5d03e5f973a5945f89528309c90d47cc855c306282a8376612aa7b1bfd
GET /lp/Shared/FormElements/Birthday/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 3107
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:06:20 GMT
etag: "6c37f49347f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae888d0b06-OSL
X-Firefox-Spdy: h2
q.quora.com/_/ad/3f04bd95412840f2a44fd5304454e6cd/pixel?j=1&u=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den&tag=ViewContent&ts=1674724556695
52.4.132.247200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/3f04bd95412840f2a44fd5304454e6cd/pixel?j=1&u=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den&tag=ViewContent&ts=1674724556695
IP 52.4.132.247:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/3f04bd95412840f2a44fd5304454e6cd/pixel?j=1&u=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den&tag=ViewContent&ts=1674724556695 HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Thu, 26 Jan 2023 09:15:59 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,53cece66a9a5aa5ec1dccd0a10046af7,10.0.0.160,22170,91.90.42.154,,230638031540,1,1674724559.186,0.001,,.,0,0,0.000,0.000,-,0,0,197,166,83,10,26847,,,,,,-,
Content-Length: 43
Connection: keep-alive
lp.canadianvisaexpert.com/lp/Shared/FormElements/ContactLangauge/index.js
104.22.11.246200 OK 2.1 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/ContactLangauge/index.js
IP 104.22.11.246:0
Hash 6b5013690927def9fea1bafdf6b1941c
9e2c771071aa2fb8b632469ab6f74a622c76fc03
42486f54a229c075ba7638f37ef74cfc07036d38b605e1339ad60bcc6c49e86f
GET /lp/Shared/FormElements/ContactLangauge/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 2079
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:13 GMT
etag: "65237b4370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8c70b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/main_BG_1920.png
104.22.11.246200 OK 80 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/main_BG_1920.png
IP 104.22.11.246:0
File type PNG image data, 1923 x 870, 8-bit/color RGBA, non-interlaced\012- data
Hash b734aac1d207fc7d27569e2022d65692
8cb09f9b80bba5a1b9cc954e2e2ac845c82ca0d0
8ae9efb01a946a019b7e461fd9114aecf58d551616f05ef40c694618ecfc61bb
GET /lp/cve/register_sub0/Style/main_BG_1920.png HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: image/png
content-length: 80257
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: "665f91132ed91:0"
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac1e6e0b06-OSL
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
95.101.10.184200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP 95.101.10.184:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 849
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Cookie: _ttp=2KrEyogPRo5BzRaGfo8cayakOdA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230126091559DD5431CE0ADA2EC96892
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb6a4fd614f4cc01d61e332712a307f468ad106835a015e975efe2ec074d807b469cbd404bf7538f881fca67ca981a59bc1d9fd69702a89e5ccc23f9509001d4316b62cb629b434b2a8abf47668e9a8f975ada3a7d84004f2d3c4fa9ff82a912f3a
x-origin-response-time: 16,23.220.107.201
x-akamai-request-id: aecf436a.162a0c8c
expires: Thu, 26 Jan 2023 09:15:59 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 26 Jan 2023 09:15:59 GMT
x-cache: TCP_MISS from a95-101-10-180.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-cache-remote: TCP_MISS from a23-220-107-201.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=97, origin; dur=16, inner; dur=13
x-parent-response-time: 107,95.101.10.180
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/reviewsData.js
104.22.11.246200 OK 1.0 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/reviewsData.js
IP 104.22.11.246:0
Hash 3ef248509f370c1491b6c68228abdd2e
ad3616277eca9c75bd52ada6daa96b0a53161925
1d37d9eabd844f3a21a35bdde3f538881eb825eb1c83968f2cb5b21f1a38fd7e
GET /lp/cve/register_sub0/reviewsData.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/main.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1036
cache-control: max-age=604800
content-encoding: gzip
last-modified: Mon, 12 Dec 2022 14:00:37 GMT
etag: "651dd61c32ed91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825adcfd70b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Fullname/index.js
104.22.11.246200 OK 1.9 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Fullname/index.js
IP 104.22.11.246:0
Hash 3384e8e11d3a7c6ea398d69122e1a073
27342c432d6e8dfdb94868eab0e227e3ffd9da2c
eca075d9d789460813fd4cba4e63bcd372dc7f603a940d15250a0e58d1fa983d
GET /lp/Shared/FormElements/Fullname/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1892
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:07:06 GMT
etag: "962763af47f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae685d0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/testimonial_BG_1920.png
104.22.11.246200 OK 259 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/testimonial_BG_1920.png
IP 104.22.11.246:0
File type PNG image data, 1920 x 836, 8-bit/color RGBA, non-interlaced\012- data
Size 259 kB (259423 bytes)
Hash 09ba5d462e497a22ba6f849c19cd5ed0
c40c01076b2a34df4b18c58d396d8436097e8e86
75e4e7fe0ea60dd0d5e418c3badd026815b6aab27343207ac8301bc11b313b15
GET /lp/cve/register_sub0/Style/testimonial_BG_1920.png HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: image/png
content-length: 259423
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:38 GMT
etag: "73b8301d32ed91:0"
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac1e710b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Email/index.js
104.22.11.246200 OK 1.6 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Email/index.js
IP 104.22.11.246:0
Hash 62d7d614dd9bbd246d0ed5d52e5c3f28
5525e6af04ba90183d1cfc5f64b5f365e55a901e
2ddd8190fbf6d6adc1dde36879f42e4dc72315a911739b9b34a9bc9030af0e50
GET /lp/Shared/FormElements/Email/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1589
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:06:20 GMT
etag: "7d61fb9347f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae584e0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Fname/index.js
104.22.11.246200 OK 1.4 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Fname/index.js
IP 104.22.11.246:0
Hash 9c145bfe1061753afdb2e19045372007
efd10a0eca705ff777c2d193841f82029185efe8
a9b69dd144dd83de68a16709c1452e8c586763c97155762d516457e3e7251719
GET /lp/Shared/FormElements/Fname/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1447
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:06:20 GMT
etag: "788f29447f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae58510b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Birth_country/index.js
104.22.11.246200 OK 1.7 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Birth_country/index.js
IP 104.22.11.246:0
Hash 87cb6374d7eb12a0cfdf7be3ecdd67ff
bfaba51c2e3c23ca716ab401f2a2f7b1da435a22
0b05f4a9e3568a854f7908ac35072b2e019e1cad3019ef724fb1ff886035e802
GET /lp/Shared/FormElements/Birth_country/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1699
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:07:06 GMT
etag: "3f7152af47f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae58540b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Citizenship/index.js
104.22.11.246200 OK 1.7 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Citizenship/index.js
IP 104.22.11.246:0
Hash 476c935c3a360389852194b3c3d1c538
8eceec8e3c4bcd594a731166c9fb2db9d99a4fad
3553dde5ae430f8037bff50244e6bcfb6f29975359ac5ddc5ffec0c6a609a75d
GET /lp/Shared/FormElements/Citizenship/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1676
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:38 GMT
etag: "866cb05270b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae686d0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Phone/index.js
104.22.11.246200 OK 1.6 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Phone/index.js
IP 104.22.11.246:0
Hash 4a1a31796d721b16f604f423bcef7eaa
71dd9a027248dfbbafdda9a26fa690299fcec243
6fa5d3e8de96fdc78adb896dd0e40f6b5c1fb9fe3f97c619b09a36561f9f1701
GET /lp/Shared/FormElements/Phone/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1626
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:06:20 GMT
etag: "2d142b9447f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae686a0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Education/index.js
104.22.11.246200 OK 1.7 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Education/index.js
IP 104.22.11.246:0
Hash f5763bc7f76de2af30ed8c8212cb5abd
9b508d7beef67420f99d4a64f7daa44a65c596e1
a33c80813d6e6669a17d97a19c66f3419aa8a51336bbce21688077a32b1efc36
GET /lp/Shared/FormElements/Education/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1713
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:06:20 GMT
etag: "7d61fb9347f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae787d0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Qualified/index.js
104.22.11.246200 OK 1.6 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Qualified/index.js
IP 104.22.11.246:0
Hash 903fd7052c3ebe9dbe5922bb8c39bf2b
f67ce12b3f8128a15d8dc1b0f288ae84410ff844
c75b8267344f5defc4a1e8b5638c5e8f4004637dcedd73daafe37bf9399d7105
GET /lp/Shared/FormElements/Qualified/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1621
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:14 GMT
etag: "7a9d2b4470b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae989a0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/HighSchoolCheckBox/index.js
104.22.11.246200 OK 765 B URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/HighSchoolCheckBox/index.js
IP 104.22.11.246:0
File type HTML document, ASCII text
Hash 72f335ec3c159620c29f7c59c4328dab
c981ac93ec715ad679dc867761cfe5e79606948c
3b869fa4534f1616d29be7c633e029d7af4acfe823d78c2ccfdfb83fe3aed814
GET /lp/Shared/FormElements/HighSchoolCheckBox/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 765
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:14 GMT
etag: "401f04370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae989c0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Occupation/index.js
104.22.11.246200 OK 1.6 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Occupation/index.js
IP 104.22.11.246:0
Hash bac5ee06a191fffe25323801bf3fe15b
8bab8f46c670dbc7d37e2815b3ed3c5d740e4b25
a5c07015cf6e16d8297432827f667906182b26613820540d8a79b778958a5980
GET /lp/Shared/FormElements/Occupation/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1630
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:14 GMT
etag: "a5cd74470b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae888f0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Marital_status_select/index.js
104.22.11.246200 OK 1.6 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Marital_status_select/index.js
IP 104.22.11.246:0
Hash a917e80684097ad0407bb822ed416ddf
ea71cd425e135e0ca421577c9f00d4a466090934
e229b9119979c8f3731e5bfaacb5c6a47c3d6035e3b604514ee397a5b0c42721
GET /lp/Shared/FormElements/Marital_status_select/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1574
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:07:06 GMT
etag: "b6f37aaf47f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae888c0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Checkbox_job/index.js
104.22.11.246200 OK 1.4 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Checkbox_job/index.js
IP 104.22.11.246:0
File type HTML document, Unicode text, UTF-8 text
Hash 25c84c3b30a1196f13dc52e8387041c1
c7d071875f811c1c5f7825e424fb9222e40648af
8e7b03c2ed10890b6205f464858546db67d53dc951226dc6c87392c395e3ea21
GET /lp/Shared/FormElements/Checkbox_job/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1396
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:38 GMT
etag: "8fa6ab5270b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae98a20b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Ispeak/index.js
104.22.11.246200 OK 1.9 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Ispeak/index.js
IP 104.22.11.246:0
Hash daf66da48360c8aeaf1fc87821bea54a
06228c0b6bcc55124f0d61c3d82bd436e22db95b
f231ef9f552603e5445538364b7a6fc955a83881eb05dbe79cbaa14edbf9a3cb
GET /lp/Shared/FormElements/Ispeak/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1858
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:06:20 GMT
etag: "4934139447f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae98980b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/QualifiedCheckBoxImg/index.js
104.22.11.246200 OK 1.9 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/QualifiedCheckBoxImg/index.js
IP 104.22.11.246:0
File type HTML document, Unicode text, UTF-8 text
Hash df0c457ad38a53617ba5428c5fc2466a
ba5108df21a23fa835cc31bc89cbda47299cca0c
7335f23f7b2dc13f6a375f03b2fdb1ae8837446511b1dea641ba3ee840fcd99f
GET /lp/Shared/FormElements/QualifiedCheckBoxImg/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1923
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:14 GMT
etag: "ccb5324470b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae989b0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/GDPR_New/index.js
104.22.11.246200 OK 3.8 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/GDPR_New/index.js
IP 104.22.11.246:0
File type Unicode text, UTF-8 text, with very long lines (416)
Hash 3cbc976c6c8f7966d0b1fbf19bbc7f2c
4c6de122d663023d7f35c0952bd309bca81d3b56
2ab10152ef656bfae17d515f0f3a4e07f84b65dc029eab48e9a9ad438020e8a5
GET /lp/Shared/FormElements/GDPR_New/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 3824
cache-control: max-age=604800
content-encoding: gzip
last-modified: Mon, 14 Nov 2022 08:36:15 GMT
etag: "fec4e8284f8d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aea8b30b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Level_Of_English/index.js
104.22.11.246200 OK 1.3 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Level_Of_English/index.js
IP 104.22.11.246:0
Hash 4ad218858eace484361a03a95885193c
a4ecfdf46d16f61de7afd368ff2feb641038f172
0a150fc25a7823d3ac1f74cb2a59d68d5664f10873f43ccf06451ee78237c567
GET /lp/Shared/FormElements/Level_Of_English/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1315
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:14 GMT
etag: "761fd84370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aea8ab0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/hr_also_speaks/index.js
104.22.11.246200 OK 1.5 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/hr_also_speaks/index.js
IP 104.22.11.246:0
Hash 1204c3bd30a80e7c041a1a058c7d61f6
e60c07177cc413d811598ab99ac1324940077516
3528608273240039f639bb7fada423401b1fe651c94fd9c7d0769c78484bd881
GET /lp/Shared/FormElements/hr_also_speaks/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1511
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 10 Jan 2023 09:26:47 GMT
etag: "f3c14ea9d524d91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8d20b06-OSL
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/www-embed-player.vflset/www-embed-player.js
172.217.21.174200 OK 1.5 kB URL HTTP/2 www.youtube.com/s/player/4248d311/www-embed-player.vflset/www-embed-player.js
IP 172.217.21.174:0
Hash aaca5db9216b00c75f24db406bcf1ea9
952b9163c87dc279db3c9d36fb8f3ca88f65d5b3
67f2f1c91ce3f76f64ff60c7742b73ca53fae38f265f296e5b375b4dd2e4dcf4
GET /s/player/4248d311/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/MtV2OdpT3jE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 109432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 16:38:02 GMT
expires: Thu, 25 Jan 2024 16:38:02 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 59876
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Insurance/index.js
104.22.11.246200 OK 1.0 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Insurance/index.js
IP 104.22.11.246:0
File type HTML document, ASCII text
Hash e8dc1a7a258634ae7c0533d852338128
09a821465796ff76e48fcd967b0e0172e5bef2ee
9b0d25d7a5c7a7bddcd3b495b91f38aea0e4049c2ff5605160a33d98734637b5
GET /lp/Shared/FormElements/Insurance/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1012
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:13 GMT
etag: "e779c74370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8c20b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/NewsLetterImg/index.js
104.22.11.246200 OK 1.5 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/NewsLetterImg/index.js
IP 104.22.11.246:0
File type HTML document, Unicode text, UTF-8 text
Hash c46b934d9bc3eec5aa40dab5c49a9ef4
046e56cbc57846653831d11ccf5a0552d1ac7a86
313884ddcb5522920d0859575bbeeafe3522e31f2330a0ce143f62baab4333dd
GET /lp/Shared/FormElements/NewsLetterImg/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1459
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:14 GMT
etag: "7340fe4370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8cd0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/GDPR_PrivacyPolicy/index.js
104.22.11.246200 OK 2.2 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/GDPR_PrivacyPolicy/index.js
IP 104.22.11.246:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (320)
Hash bf14ae4cd632e13d8ef4072d3dc886bb
cc5a646b7ac3da5fb42b17024758d3cfa6b35a7c
5a6997a3dac21a4fbcfcb996e799401a80994a0f13d9b7cd12d141fd12475b22
GET /lp/Shared/FormElements/GDPR_PrivacyPolicy/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 2239
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:13 GMT
etag: "ab2d9a4370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aea8b50b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Ab_Test/index.js
104.22.11.246200 OK 2.3 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Ab_Test/index.js
IP 104.22.11.246:0
File type HTML document, ASCII text
Hash 0dfb8b3b591621b4474b143c30352f96
d6f729e6537091e36f5c88c317b22dda08e2b545
b0740fb53fb433f94ab0517b0c53d23b2b17520f7e770e601af07d16a4580dee
GET /lp/Shared/FormElements/Ab_Test/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 2331
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:13 GMT
etag: "3a55634370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8ce0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Passport_radio/index.js
104.22.11.246200 OK 1.9 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Passport_radio/index.js
IP 104.22.11.246:0
File type HTML document, Unicode text, UTF-8 text
Hash 156d3e8c6a4c5cd567937fa76303cc10
63df33934ac567d5f82d92d32a9cfdcae8322440
7538f1ceffe6d75f7b3f08bd5cd805a3590cdb5a1ebedb2e1a7220e8bb4cd0f2
GET /lp/Shared/FormElements/Passport_radio/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1918
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:07:06 GMT
etag: "73e386af47f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae98950b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Marital_status_radio/index.js
104.22.11.246200 OK 802 B URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Marital_status_radio/index.js
IP 104.22.11.246:0
Hash 14821aff9fcc0d295ea0171aaf561edc
1a4140d99eae045e62ab5e3366293cbc20e9dd73
9e1ea0b414835b634981b39637d33d15338a297973fb1473724c328001587cc5
GET /lp/Shared/FormElements/Marital_status_radio/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 802
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:07:06 GMT
etag: "222d76af47f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae98920b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Passport_select/index.js
104.22.11.246200 OK 1.7 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Passport_select/index.js
IP 104.22.11.246:0
Hash f8ef7d470513741eaa43ba886cb98d04
0004755bf362aa6ba7e44139e3db5326eafef96b
4b5d5558be0fbf723d693548cbc352cdd24faa721839116e4ae586115959720f
GET /lp/Shared/FormElements/Passport_select/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1719
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:39 GMT
etag: "8c8495370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae88900b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/hr_cv_file_button/index.js
104.22.11.246200 OK 957 B URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/hr_cv_file_button/index.js
IP 104.22.11.246:0
Hash 8696f1e0dfefab8cee4e44274a7daed9
c46bdfb8f05f03598e1b80ea32dc747537347781
4cf243df1bd82dc5a37eba0493c4c5b921c8ad146d75bb77bfb1ad4dc1f2bc6a
GET /lp/Shared/FormElements/hr_cv_file_button/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 957
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 10 Jan 2023 09:26:47 GMT
etag: "548853a9d524d91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aec8d90b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/GenderRadio/index.js
104.22.11.246200 OK 1.1 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/GenderRadio/index.js
IP 104.22.11.246:0
File type HTML document, ASCII text
Hash 2f5c89974dd9cecc5d6639f77122dfc3
377608b0a553cf931b1296c67ee2444196e14238
9cf5bc81f221880d31416747aecf00a24ae30497600f91646b9c0f226026c9e2
GET /lp/Shared/FormElements/GenderRadio/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1054
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:39 GMT
etag: "d478e25270b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8bf0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Text_Area/index.js
104.22.11.246200 OK 1.0 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Text_Area/index.js
IP 104.22.11.246:0
File type HTML document, ASCII text
Hash e8c09a48170016f83c96d654b829a211
aa51d3edf7ddf365b993cbd0076319bbd6617793
8f993276de1eec660a80ac6ec2b7902d9150040b637226080ad916ff819fbc15
GET /lp/Shared/FormElements/Text_Area/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1036
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:14 GMT
etag: "3df394470b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8c60b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Over18CheckBox/index.js
104.22.11.246200 OK 1.0 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Over18CheckBox/index.js
IP 104.22.11.246:0
File type HTML document, ASCII text
Hash 4786dbf6382027791fa213c115004e50
aefad3ded2d6f2b44a757334b2c498952cfbae66
9327140597baf1924251af945e775989afe327072bb4b14df1d8b3bf2800257f
GET /lp/Shared/FormElements/Over18CheckBox/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1023
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:39 GMT
etag: "9b63a5370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825ae98a00b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/reffer_lead/index.js
104.22.11.246200 OK 1.3 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/reffer_lead/index.js
IP 104.22.11.246:0
Hash 153cdc7c0b1983e5d731376bfafe889c
49199ad7407952e983a6fee95547a5fd2834dd26
0cb3264dfed5d079e97f6fc61cf7668cf126849546001577a6a2288726926caa
GET /lp/Shared/FormElements/reffer_lead/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1315
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 18 Dec 2022 12:10:08 GMT
etag: "27d3c0abd912d91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8d10b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Passport_toggle/index.js
104.22.11.246200 OK 1.0 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Passport_toggle/index.js
IP 104.22.11.246:0
File type HTML document, ASCII text
Hash 439b51b4757e3b115d4f82b5f607bcfb
171891cba3fd4cc04466878db478936f22e0288c
ffaabdd567e203ebaacb8168cf0c1bb62ad483d84caaa897482629be834eeee6
GET /lp/Shared/FormElements/Passport_toggle/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1012
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:39 GMT
etag: "7aa5465370b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8c50b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/GDPR/index.js
104.22.11.246200 OK 2.8 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/GDPR/index.js
IP 104.22.11.246:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (320)
Hash eaef1188b7b192db7c36c4d94d5bddcc
c54f4e2f461cb6173b0f8c775840d420fc03c823
cde48f9af1e6362a90561ef2d51bb14c7d90ccc003160ceada07e84ea93f17a3
GET /lp/Shared/FormElements/GDPR/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 2755
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:07:06 GMT
etag: "17a16caf47f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aea8b00b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Utmparams/index.js
104.22.11.246200 OK 1.7 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Utmparams/index.js
IP 104.22.11.246:0
File type ASCII text, with CRLF line terminators
Hash 06a7808c5143399ad6f82fd69b20ca6c
fc790658804daeabfcce9c5d0b067b47507398d5
44fdf05747459a7856a98600a339824741479ab7ca1ed1688d6afa0f47e45bc8
GET /lp/Shared/FormElements/Utmparams/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1717
cache-control: max-age=604800
content-encoding: gzip
last-modified: Wed, 28 Dec 2022 12:35:32 GMT
etag: "973b69e0b81ad91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aea8b70b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/location_of_resident/index.js
104.22.11.246200 OK 1.4 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/location_of_resident/index.js
IP 104.22.11.246:0
Hash 54c57b4758754be1f05539e01c1a1217
985b1a1ca765eea9a49bc630177e1e080a32c759
c0e6944e00de5e88c7debffa72f0ca93670bdba3b02eb3d88cc5e4875441cfd4
GET /lp/Shared/FormElements/location_of_resident/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1412
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 18 Dec 2022 12:07:37 GMT
etag: "97c6d751d912d91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aec8d70b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/AverageMonthlyIncome/index.js
104.22.11.246200 OK 1.4 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/AverageMonthlyIncome/index.js
IP 104.22.11.246:0
File type HTML document, Unicode text, UTF-8 text
Hash be39507c2dee34417f8c9b04f268b208
f33479a46c59ccf1045de8aa4ecc099caf9b10a0
5250b700ef6bd597d63adeb33a64ec95d3e1f0fc2ea4b9220465fc27ccf677b9
GET /lp/Shared/FormElements/AverageMonthlyIncome/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1364
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:38 GMT
etag: "5af19a5270b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8d00b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Gender/index.js
104.22.11.246200 OK 989 B URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Gender/index.js
IP 104.22.11.246:0
File type HTML document, ASCII text
Hash c7e9b885e966fd766cc8c57114a24193
c2d1ed2557591e47aa68e1f566c0026b60cf2fc1
885a7f776c327ec4c01197a9f818ab1533355b71448aacb62ac6ebec47d2d12b
GET /lp/Shared/FormElements/Gender/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 989
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 16 Aug 2022 13:01:39 GMT
etag: "a54fdb5270b1d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8bd0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/hr_level_of_english/index.js
104.22.11.246200 OK 1.5 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/hr_level_of_english/index.js
IP 104.22.11.246:0
Hash b761e60dc3424543e12000ff1d045881
8a8916337d05e05f5f27c585386c647911dc95f3
674dd0d67a6cc75b67c404746c2d83be72f1ab724607f9c5916714d850dbbdda
GET /lp/Shared/FormElements/hr_level_of_english/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1507
cache-control: max-age=604800
content-encoding: gzip
last-modified: Tue, 10 Jan 2023 09:27:09 GMT
etag: "96195db6d524d91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aec8d40b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/NewsLetter/index.js
104.22.11.246200 OK 1.4 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/NewsLetter/index.js
IP 104.22.11.246:0
File type HTML document, Unicode text, UTF-8 text
Hash 3fd3884038ca26ba8bdccba04ed801dc
72ddecf4541635793474077703d168cc76173eb3
074c0f185150a3007dd25c4f040ea50b6ade7a414baad89ebeda08c62e05925d
GET /lp/Shared/FormElements/NewsLetter/index.js HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/Shared/FormElements/form.js
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: application/x-javascript
content-length: 1405
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:07:06 GMT
etag: "b0567daf47f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825aeb8cc0b06-OSL
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-P6TNM23XEC>m=2oe1p0&_p=613870256&cid=263786973.1674724557&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674724556&sct=1&seg=0&dl=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den&dt=Register&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-P6TNM23XEC>m=2oe1p0&_p=613870256&cid=263786973.1674724557&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674724556&sct=1&seg=0&dl=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den&dt=Register&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-P6TNM23XEC>m=2oe1p0&_p=613870256&cid=263786973.1674724557&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674724556&sct=1&seg=0&dl=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den&dt=Register&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lp.canadianvisaexpert.com
date: Thu, 26 Jan 2023 09:15:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/Passport_radio/style.css
104.22.11.246200 OK 246 B URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/Passport_radio/style.css
IP 104.22.11.246:0
Hash 211a8fecf4be5351189ad0c6d426e365
8c89df12927ab5340199ea67cfe9a4d4365564ca
a0562d75b704fb14672b0c9eeca2c368bf091659efecf288f675e4e162ca2d76
GET /lp/Shared/FormElements/Passport_radio/style.css HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557; _tt_enable_cookie=1; _ttp=nVj0-f9_hAAfdBlt3JNiDx0gxIV; _ga_8JM9Q2BN4Z=GS1.1.1674724557.1.0.1674724557.0.0.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: text/css
content-length: 246
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:07:06 GMT
etag: "608084af47f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 150808
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825b29c2a0b06-OSL
X-Firefox-Spdy: h2
lp.canadianvisaexpert.com/lp/Shared/FormElements/NewsLetter/style.css
104.22.11.246200 OK 218 B URL HTTP/2 lp.canadianvisaexpert.com/lp/Shared/FormElements/NewsLetter/style.css
IP 104.22.11.246:0
Hash b000943106fda69fcfeab204e794d7dd
3dc9fc0d0badb4ce7c7e5310b99fc92b1e39e6a0
d9e41bdf534cbb57a13f1c3d796c96de9727fce73865b3f26e7caf0329231097
GET /lp/Shared/FormElements/NewsLetter/style.css HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e&utm_lang=en
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557; _tt_enable_cookie=1; _ttp=nVj0-f9_hAAfdBlt3JNiDx0gxIV; _ga_8JM9Q2BN4Z=GS1.1.1674724557.1.0.1674724557.0.0.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: text/css
content-length: 218
cache-control: max-age=604800
content-encoding: gzip
last-modified: Sun, 13 Nov 2022 10:06:20 GMT
etag: "8887219447f7d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99590
accept-ranges: bytes
server: cloudflare
cf-ray: 78f825b29c2e0b06-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e42c4bc3eb1dde3e47013119de155096
ee735e961b5844018da0625bfd2476ab70500926
689f2b20a0cac8f0b3ad9fcc34ffb152ab8e935a0fb322d8e9fcb21f1a0ae151
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/posted_on_google.png
104.22.11.246200 OK 6.0 kB URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/posted_on_google.png
IP 104.22.11.246:0
File type PNG image data, 152 x 87, 8-bit/color RGBA, non-interlaced\012- data
Hash da0c2acaf085db352ab29c94be7c20d4
b50ea1efe5f30e62c45e5120477404cf5332c685
6afaa64b6f2c5c768a6296cdebe7583d90b784906cfeeee1b602585aa0c87ca9
GET /lp/cve/register_sub0/Style/posted_on_google.png HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557; _tt_enable_cookie=1; _ttp=nVj0-f9_hAAfdBlt3JNiDx0gxIV; _ga_8JM9Q2BN4Z=GS1.1.1674724557.1.0.1674724557.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: image/png
content-length: 5979
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: "6312e1132ed91:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99578
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825b2cc4e0b06-OSL
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
142.250.74.134200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP 142.250.74.134:0
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 09:12:52 GMT
expires: Thu, 26 Jan 2023 09:27:52 GMT
cache-control: public, max-age=900
age: 187
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash dda854cb90cda40c6a6dbc19eb186eca
0d23775c5af739aac0a41844d09c704ab850a1bd
7c432d209fcf9dde0ca59bf93f76526d98aab474041f19b2d6fe79942ed3a7e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/id
172.217.21.162302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 172.217.21.162:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Thu, 26 Jan 2023 09:15:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e42c4bc3eb1dde3e47013119de155096
ee735e961b5844018da0625bfd2476ab70500926
689f2b20a0cac8f0b3ad9fcc34ffb152ab8e935a0fb322d8e9fcb21f1a0ae151
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/star.svg
104.22.11.246200 OK 668 B URL HTTP/2 lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/star.svg
IP 104.22.11.246:0
Hash b81a9f6be0b3f1d8c8099397a25f9f27
9b19c0a02a5c911ede60d329dc261c10eef2af37
9b931407ef898b110a1a28711f5dac0414044cfbca44277f99ef32e008b1ea61
GET /lp/cve/register_sub0/Style/star.svg HTTP/1.1
Host: lp.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/lp/cve/register_sub0/Style/style.css
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557; _tt_enable_cookie=1; _ttp=nVj0-f9_hAAfdBlt3JNiDx0gxIV; _ga_8JM9Q2BN4Z=GS1.1.1674724557.1.0.1674724557.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: image/svg+xml
cache-control: max-age=604800
last-modified: Mon, 12 Dec 2022 14:00:18 GMT
etag: W/"3c3b151132ed91:0"
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 99578
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825b2cc4c0b06-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.138200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.138:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 26 Jan 2023 09:15:59 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.138200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.138:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash bb88dc7d6de25882753f26f737a62d7f
4212aa3c7314d10beca029cdf12724f7b768a3e0
493452e72a857b93950638ca65171f89b2ad59b15940719ddfaf7514894d362b
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 26 Jan 2023 09:15:59 GMT
server: ESF
cache-control: private
content-length: 30801
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 9c35630fa25552054cf1d2de01cc541b
bdaa6a2516fbfe4cea8fe6586543fd3a8c22bd9f
61f22fd2b109ca59797532225c4d4cd1ac4d74a1d44a304d0625bb1b499b1ea6
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 09:16:00 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 30 Jan 2023 07:35:01 GMT
ETag: "bdaa6a2516fbfe4cea8fe6586543fd3a8c22bd9f"
Last-Modified: Thu, 26 Jan 2023 07:35:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2411
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78f825b41974b521-OSL
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash e53b1d8b1f244c97e073382328e5c650
d1933a186c3b5351a8539f18e3f4f74237aefccc
2b3e14ffcd8e42c946fc8a66a44a97e543849ac1fd3fdefd85f774c86839716e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 9c35630fa25552054cf1d2de01cc541b
bdaa6a2516fbfe4cea8fe6586543fd3a8c22bd9f
61f22fd2b109ca59797532225c4d4cd1ac4d74a1d44a304d0625bb1b499b1ea6
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 09:16:00 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 30 Jan 2023 07:35:01 GMT
ETag: "bdaa6a2516fbfe4cea8fe6586543fd3a8c22bd9f"
Last-Modified: Thu, 26 Jan 2023 07:35:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2411
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78f825b43994b521-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 9c35630fa25552054cf1d2de01cc541b
bdaa6a2516fbfe4cea8fe6586543fd3a8c22bd9f
61f22fd2b109ca59797532225c4d4cd1ac4d74a1d44a304d0625bb1b499b1ea6
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 09:16:00 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 30 Jan 2023 07:35:01 GMT
ETag: "bdaa6a2516fbfe4cea8fe6586543fd3a8c22bd9f"
Last-Modified: Thu, 26 Jan 2023 07:35:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2411
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78f825b43eaeb4ee-OSL
www.google.com/js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js
142.250.74.164200 OK 14 kB URL HTTP/2 www.google.com/js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js
IP 142.250.74.164:0
File type ASCII text, with very long lines (36171)
Hash a13a76dd17af226d4a24bd16ef702377
c364171cd0f66eb4a1a8dde04e1e083154d81dbd
1dd3352cbdb7561b142954006a2bb94008486c22760c3d5ebb1b6fffeb325173
GET /js/th/x4UJj8gT6CtT5_PZSB2sMkWT7oT3ONYvYheI_Vl_kb0.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14250
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Jan 2023 18:38:28 GMT
expires: Sat, 20 Jan 2024 18:38:28 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 03 Jan 2023 15:00:00 GMT
content-type: text/javascript
age: 484652
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 79d95041062c0f1c908513d13dabe3f0
5c9955e0b9d57935138747ce738cceed54330ca6
2ec6fe4866f7ef1a580494d0341e94128a71f8347b8ea18995d5dc0f994ac4bd
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 26 Jan 2023 09:15:59 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 24 Jan 2023 21:38:20 GMT
Expires: Thu, 26 Jan 2023 09:16:00 GMT
ETag: "5c9955e0b9d57935138747ce738cceed54330ca6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 126e9ccbe4e6508bc0a881d69e0c9521
1909837ca688bdf3f91df41f5194cf248fb17812
b3143a6cce962235dd70bf5673ba4c1482d825e83ba6c01f4047fbc6ccc67874
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nodejs.shopping-basket.biz/lp/users?id=reasons
163.171.140.79200 OK 12 B URL HTTP/2 nodejs.shopping-basket.biz/lp/users?id=reasons
IP 163.171.140.79:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash ee74dfb0aa7d26f0ce9b7380c5276547
77479a2216c2a58e54055f96af4e9e1aa70d5580
cff3bec015ebc805868a037fa4ac83ae03e86d6a36b03b8c825ac33c6e2619a0
GET /lp/users?id=reasons HTTP/1.1
Host: nodejs.shopping-basket.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lp.canadianvisaexpert.com/
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:16:00 GMT
content-type: application/json; charset=utf-8
content-length: 12
server: PWS/8.3.1.0.8
x-powered-by: Express
access-control-allow-origin: *
etag: W/"c-d0eaIhbCpY5UBV+Wr06eGqcNVYA"
age: 348
via: 1.1 PShlamstdAMS1wt94:7 (W)
x-px: ht PShlamstdAMS1wt94AMS
x-ws-request-id: 63d244d0_PShlamstdAMS1cc96_17571-29900
X-Firefox-Spdy: h2
i.ytimg.com/vi/MtV2OdpT3jE/maxresdefault.jpg
142.250.74.86200 OK 79 kB URL HTTP/2 i.ytimg.com/vi/MtV2OdpT3jE/maxresdefault.jpg
IP 142.250.74.86:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 0cae69af516a866dbedb12e97c4b62df
5e7482c91fe52e7903a931adb95ee42ceba198bc
407e2510b6f885997b435461598153748f7536f7c76e0468a0ceb5cccd548b88
GET /vi/MtV2OdpT3jE/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 78556
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 07:21:43 GMT
expires: Thu, 26 Jan 2023 09:21:43 GMT
cache-control: public, max-age=7200
age: 6857
etag: "1661950138"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 215f16014778a0ef8fe0ae045469592c
8eb2bb842d2cbe49b94309d7297309a61c837ccb
df25507f0dd6bcb47ee79846962171e9a0660f6a356f941b8cb7a5cd3bdf2762
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 93af086c11908f25c43c0bd730ca1fd1
75f2cbb9c6d8aeb54145293cafa5404cc3489389
7169b0c49ea8e410f5ec7fb0fd01d0df35251e52057612bfcdff4b88e81b12f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c-r.cc/727SHV?siteid=4&online=false&utm_af=
163.171.138.116302 Found 0 B URL HTTP/2 c-r.cc/727SHV?siteid=4&online=false&utm_af=
IP 163.171.138.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /727SHV?siteid=4&online=false&utm_af= HTTP/1.1
Host: c-r.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lp.canadianvisaexpert.com/
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 26 Jan 2023 09:16:00 GMT
content-length: 0
server: PWS/8.3.1.0.8
location: https://www.c-r.cc/727SHV?siteid=4&online=false&utm_af=
via: 1.0 PSydlmlMIL1ju62:10 (W)
x-px: -
x-ws-request-id: 63d244d0_PSydlmlMIL1ev61_34898-49843
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/AL5GRJX1I62WosVmqUxW9XrZha2b181Bg-cIA49Kkol7=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 1.3 kB URL HTTP/2 yt3.ggpht.com/ytc/AL5GRJX1I62WosVmqUxW9XrZha2b181Bg-cIA49Kkol7=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 31e038ad21019f4178d7484f98d6130c
4fe12b0bd86ffcacb6587fab63eaab34dec12b66
452c9ce5a9f3a9e176fe61cc043f0b28684319f7711212c2b669f04b21d9d262
GET /ytc/AL5GRJX1I62WosVmqUxW9XrZha2b181Bg-cIA49Kkol7=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1332
x-xss-protection: 0
date: Thu, 26 Jan 2023 06:26:32 GMT
expires: Thu, 26 Jan 2023 05:43:44 GMT
cache-control: public, max-age=86400, no-transform
age: 10168
etag: "v3b"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lp-api.lpactivityexperts.com/api/LpPublic/GetCountries
163.171.140.79200 OK 18 kB URL HTTP/2 lp-api.lpactivityexperts.com/api/LpPublic/GetCountries
IP 163.171.140.79:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with very long lines (17767), with no line terminators
Hash b71f47bd32f289bd077765f971ed17ed
1c0380e45dea0ea34ec384e91b580d84677ce04f
306f7065affa53e9c3296c55df077b5b30c3d2910a2259cb8d37548918a3701c
GET /api/LpPublic/GetCountries HTTP/1.1
Host: lp-api.lpactivityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lp.canadianvisaexpert.com/
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:16:00 GMT
content-type: application/json; charset=utf-8
content-length: 17767
server: PWS/8.3.1.0.8
cache-control: no-cache
pragma: no-cache
expires: -1
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
via: 1.1 kf29:5 (W), 1.1 PShlamstdAMS1vj92:11 (W)
x-px: ms PShlamstdAMS1vj92AMS,ms kf29FRA(origin)
x-ws-request-id: 63d244d0_PShlamstdAMS1cc96_17571-29894
X-Firefox-Spdy: h2
lp-api.lpactivityexperts.com/api/LpPublic/GetEducationLevels
163.171.140.79200 OK 846 B URL HTTP/2 lp-api.lpactivityexperts.com/api/LpPublic/GetEducationLevels
IP 163.171.140.79:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with very long lines (846), with no line terminators
Hash 647fc56085f7035b4da1c0701b6ed91d
eb4d0454e674501b845cfd9032fe5bc98e503118
b3b8b9386b3ed69049bd0df605f9e155bf41ecda816d74956f48aa10b0886532
GET /api/LpPublic/GetEducationLevels HTTP/1.1
Host: lp-api.lpactivityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lp.canadianvisaexpert.com/
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:16:00 GMT
content-type: application/json; charset=utf-8
content-length: 846
server: PWS/8.3.1.0.8
cache-control: no-cache
pragma: no-cache
expires: -1
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
via: 1.1 kf29:4 (W), 1.1 PShlamstdAMS1vj92:0 (W)
x-px: ms PShlamstdAMS1vj92AMS,ms kf29FRA(origin)
x-ws-request-id: 63d244d0_PShlamstdAMS1cc96_17571-29895
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3f3ebba38babe4484f955dedf12d71e2
4fc3d61579aa2e035bf84b9439cc1933fe564ca8
b34dc34d61bb90a46615c1f99dd079bb05f662da984beb44233a85f7d3546a47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lp-api.lpactivityexperts.com/api/LpPublic/getDetails?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e
163.171.140.79200 OK 867 B URL HTTP/2 lp-api.lpactivityexperts.com/api/LpPublic/getDetails?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e
IP 163.171.140.79:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with very long lines (867), with no line terminators
Hash 994be2b8f23ea462504cc28096414923
57014a83c995efd37d2b8419c5a04e53b4c39667
367355c971e9ad58a52e7328c705c16525dca25cd1989c9dc5e1bb1dc25ad63e
GET /api/LpPublic/getDetails?gid=d3b2d5a5-edf0-4237-b1fc-26404030ee2e HTTP/1.1
Host: lp-api.lpactivityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lp.canadianvisaexpert.com/
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:16:00 GMT
content-type: application/json; charset=utf-8
content-length: 867
server: PWS/8.3.1.0.8
cache-control: no-cache
pragma: no-cache
expires: -1
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
via: 1.1 kf29:6 (W), 1.1 PShlamstdAMS1cc96:3 (W)
x-px: ms PShlamstdAMS1cc96AMS,ms kf29FRA(origin)
x-ws-request-id: 63d244d0_PShlamstdAMS1cc96_17571-29896
X-Firefox-Spdy: h2
lp-api.lpactivityexperts.com/api/LpPublic/GetOccuaptionsOptions
163.171.140.79200 OK 55 kB URL HTTP/2 lp-api.lpactivityexperts.com/api/LpPublic/GetOccuaptionsOptions
IP 163.171.140.79:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with very long lines (55436), with no line terminators
Hash 96c8adaad3c85e3826d570591125cd5d
b0688b8c692acf5f443bda6bdbe8b148440efb17
f2585302ba5b7219d83c569619f72feb54918c84e920200d2650e02a153f0377
GET /api/LpPublic/GetOccuaptionsOptions HTTP/1.1
Host: lp-api.lpactivityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lp.canadianvisaexpert.com/
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:16:00 GMT
content-type: application/json; charset=utf-8
content-length: 55436
server: PWS/8.3.1.0.8
cache-control: no-cache
pragma: no-cache
expires: -1
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
via: 1.1 kf29:6 (W), 1.1 PShlamstdAMS1vj92:17 (W)
x-px: ms PShlamstdAMS1vj92AMS,ms kf29FRA(origin)
x-ws-request-id: 63d244d0_PShlamstdAMS1cc96_17571-29893
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1119492/tfa.js
151.101.193.44200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1119492/tfa.js
IP 151.101.193.44:0
File type ASCII text, with very long lines (59652)
Hash c9696593d9ed9e279ac56b577aa8efdf
fcea88c96a689ab3a18f0112919b0865926fa568
35bbf187b6c7de3212945292d2c5fe4827b2a81ac91695ade00b71bb58f97967
GET /libtrc/unip/1119492/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nFiK3/oM3Ou0+649agDum7juW++r2U3ISEnOxWtn6iou8/J/qZTtYiQj3GZEzonVYRYbCuxeZgQ=
x-amz-request-id: 2BAGQERX6ARAAQ4V
x-amz-replication-status: COMPLETED
last-modified: Wed, 25 Jan 2023 10:36:04 GMT
etag: "166b924c1d9421118e930a9f789ea6de"
x-amz-version-id: UL2GzQ51kmLiuA4wHC7l.uI8P5zeBw6p
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 09:16:00 GMT
via: 1.1 varnish
age: 66
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674724560.365331,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 17
content-length: 18339
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8127133a6d1c10ce4e3cbf6028b3e555
ce62fc282eee1a28e8bff5bd677cb0a63edea598
a411d44ecbe5c57bc81fca6c3c80a8de98cf82594bdb84dbef6e541e4df8d347
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3139
Cache-Control: max-age=137618
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Etag: "63d1af1f-1d7"
Expires: Fri, 27 Jan 2023 23:29:38 GMT
Last-Modified: Wed, 25 Jan 2023 22:37:19 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
lh3.googleusercontent.com/a-/AFdZucp3kFpsyzDrSpjvvZPJGjhr99sUaKsMNKCtL5KH=s120-c-c0x00000000-cc-rp-mo-br100
142.250.74.97200 OK 18 kB URL HTTP/2 lh3.googleusercontent.com/a-/AFdZucp3kFpsyzDrSpjvvZPJGjhr99sUaKsMNKCtL5KH=s120-c-c0x00000000-cc-rp-mo-br100
IP 142.250.74.97:0
File type PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash cce24673b1e596ec7c7406aa037ebafc
b85d5744559a6366625d4d7bed9da5f1cac34dbf
3d923799e8939544719d59dbc59b982e90c4c5f9e73ec09b90da9c8f938207d8
GET /a-/AFdZucp3kFpsyzDrSpjvvZPJGjhr99sUaKsMNKCtL5KH=s120-c-c0x00000000-cc-rp-mo-br100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7"
expires: Fri, 27 Jan 2023 09:16:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 26 Jan 2023 09:16:00 GMT
server: fife
content-length: 18326
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 9ba458c0d3060a442f3094daf58ec05d
fc35d487d0dd81e6855f1b02367b755609d9608d
17087257ea25c2232c025f338b9f3153d35c3d953cb382b7b6e01728a643bc0b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: /6fFshfiOD+39ATLwJZGGxgSjP8N7m5UTM631efOvtw/yB/irJEsupqJy84KQ+4x+dwFcfhkdrVtycJmGz1lDA==
priority: u=3,i
content-length: 27859
x-fb-trip-id: 1904183273
date: Thu, 26 Jan 2023 09:16:00 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8127133a6d1c10ce4e3cbf6028b3e555
ce62fc282eee1a28e8bff5bd677cb0a63edea598
a411d44ecbe5c57bc81fca6c3c80a8de98cf82594bdb84dbef6e541e4df8d347
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3139
Cache-Control: max-age=137618
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Etag: "63d1af1f-1d7"
Expires: Fri, 27 Jan 2023 23:29:38 GMT
Last-Modified: Wed, 25 Jan 2023 22:37:19 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.138200 OK 110 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.138:0
File type gzip compressed data, from Unix\012- data
Size 110 kB (110164 bytes)
Hash 517192ba95eb088eeea31dd39614d1dd
7d4cbdb50e9d6a9f0ef2acbbbd1acd63a1889898
42e7a0f51f46a7d728f9f90c174f86e3e18a33507bb5d869ffd6de91459f5f7d
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 26 Jan 2023 09:16:00 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.138200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.138:0
File type JSON data\012- , ASCII text, with no line terminators
Hash e3dd61d05b47fa2e3b4e0810293900af
1af2b54233c2787d013828fe1e28bddac5dffea9
16adb50227f30867d9bb103702f857877db97a07e3509684f079d5b525c45198
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1184
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 26 Jan 2023 09:16:00 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lp-api.lpactivityexperts.com/api/LpPublic/GetIsoByIp
163.171.140.79200 OK 39 B URL HTTP/2 lp-api.lpactivityexperts.com/api/LpPublic/GetIsoByIp
IP 163.171.140.79:0
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash 3727f0605ed8cc7d398cd80ebedc93ef
cc0f48484c00bad5f2fbda0167e2a9f5085a1f41
9caee24d0e651f9beeff06e0e2911d2d46973b8ecff4636b432120bef9772973
GET /api/LpPublic/GetIsoByIp HTTP/1.1
Host: lp-api.lpactivityexperts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lp.canadianvisaexpert.com/
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:16:00 GMT
content-type: application/json; charset=utf-8
content-length: 39
server: PWS/8.3.1.0.8
cache-control: no-cache
pragma: no-cache
expires: -1
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS
via: 1.1 kf29:2 (W), 1.1 PShlamstdAMS1cc96:4 (W)
x-px: ms PShlamstdAMS1cc96AMS,ms kf29FRA(origin)
x-ws-request-id: 63d244d0_PShlamstdAMS1cc96_17571-29921
X-Firefox-Spdy: h2
www.canadianvisaexpert.com/wp-content/uploads/2016/09/cropped-CVE-32x32.png
104.22.11.246200 OK 799 B URL HTTP/2 www.canadianvisaexpert.com/wp-content/uploads/2016/09/cropped-CVE-32x32.png
IP 104.22.11.246:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash b8e19b321eb01877ba73bab4e8a045c0
abfafc84aab8580b219d821173146c3c3dd1788b
f4466b3f679e3182f52351e1c3a0cfe557dc371ca729a52ea31a6df09d139d5e
GET /wp-content/uploads/2016/09/cropped-CVE-32x32.png HTTP/1.1
Host: www.canadianvisaexpert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Cookie: _ga_P6TNM23XEC=GS1.1.1674724556.1.0.1674724556.0.0.0; _ga=GA1.1.263786973.1674724557; _tt_enable_cookie=1; _ttp=nVj0-f9_hAAfdBlt3JNiDx0gxIV; _ga_8JM9Q2BN4Z=GS1.1.1674724557.1.0.1674724557.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:16:00 GMT
content-type: image/png
content-length: 799
last-modified: Mon, 18 Oct 2021 09:01:14 GMT
etag: "31f-5ce9cc97a2a80"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825b6c8380b06-OSL
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1435411566691683&ev=PageView&dl=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den&rl=&if=false&ts=1674724558594&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1674724558592.1791557394&it=1674724558353&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1435411566691683&ev=PageView&dl=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den&rl=&if=false&ts=1674724558594&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1674724558592.1791557394&it=1674724558353&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1435411566691683&ev=PageView&dl=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den&rl=&if=false&ts=1674724558594&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1674724558592.1791557394&it=1674724558353&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 26 Jan 2023 09:16:00 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 810bf2bf9f302d0a65b1e0b447b549ef
d6ddcc1e64a1392f5942c0fc45864a282a93854e
f61096b63e6f62872d6d30aac7671c72403bba82f4f5c555add8e0997675f712
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-28213132-20&cid=263786973.1674724557&jid=1142296569&gjid=449545156&_gid=1616632463.1674724558&_u=YADAAUAAAAAAACAAI~&z=1520199102
173.194.221.155200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-28213132-20&cid=263786973.1674724557&jid=1142296569&gjid=449545156&_gid=1616632463.1674724558&_u=YADAAUAAAAAAACAAI~&z=1520199102
IP 173.194.221.155:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-28213132-20&cid=263786973.1674724557&jid=1142296569&gjid=449545156&_gid=1616632463.1674724558&_u=YADAAUAAAAAAACAAI~&z=1520199102 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://lp.canadianvisaexpert.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 26 Jan 2023 09:16:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 190a3bc280ae77bcdd9d5404a4827845
7a87ca451b0fa21d44faace1c2ddbb4dede06133
95988c13b98d7164f7bf530e59b411a3ba26eab34bfb0898191e96ee29704ab0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash fdded3d5e68d5358634880be3d3f2d04
6a02176ed7735b46393d51bd142e0deace6a5007
7077e5a7a6aeee95ad600ca2a943f7062f593e12fa61e74bbb860f6019bf67b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-28213132-20&cid=263786973.1674724557&jid=1142296569&_u=YADAAUAAAAAAACAAI~&z=552517088
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-28213132-20&cid=263786973.1674724557&jid=1142296569&_u=YADAAUAAAAAAACAAI~&z=552517088
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-28213132-20&cid=263786973.1674724557&jid=1142296569&_u=YADAAUAAAAAAACAAI~&z=552517088 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 26 Jan 2023 09:16:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 6535ae9529ced8e4fe9cab67dbfbcd06
cd8a01acf3cc5ba2797073d284f5d2f03965ea23
ac898dcf507ac6aea5bed267e6b94e2e187b3255d12f13b6dc7a983547727518
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 09:16:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trc-events.taboola.com/1119492/log/3/unip?en=pre_d_eng_tb&tos=1566&scd=0&ssd=1&est=1674724558313&ver=36&isls=true&src=i&invt=1500&msa=3132&rv=1&tim=1674724559882&vi=1674724558297&ri=8b8db817ab0f0269b021aab3cbaf4df7&ref=null&cv=20230125-5-RELEASE&item-url=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1119492/log/3/unip?en=pre_d_eng_tb&tos=1566&scd=0&ssd=1&est=1674724558313&ver=36&isls=true&src=i&invt=1500&msa=3132&rv=1&tim=1674724559882&vi=1674724558297&ri=8b8db817ab0f0269b021aab3cbaf4df7&ref=null&cv=20230125-5-RELEASE&item-url=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1119492/log/3/unip?en=pre_d_eng_tb&tos=1566&scd=0&ssd=1&est=1674724558313&ver=36&isls=true&src=i&invt=1500&msa=3132&rv=1&tim=1674724559882&vi=1674724558297&ri=8b8db817ab0f0269b021aab3cbaf4df7&ref=null&cv=20230125-5-RELEASE&item-url=https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lp.canadianvisaexpert.com
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 26 Jan 2023 09:16:02 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://lp.canadianvisaexpert.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
a.quora.com/qevents.js
162.159.153.247200 OK 0 B IP 162.159.153.247:0
GET /qevents.js HTTP/1.1
Host: a.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 09:15:58 GMT
content-type: text/plain
x-amz-id-2: Lo6V6sS9dollZm991E+r9QS5ilIWlcul705lMiga2oQnz8bnT95jaa4X7qyu2MPUU2YNcD20ek4=
x-amz-request-id: ABWFWAK2P6Z86ST7
last-modified: Fri, 18 Mar 2022 00:16:52 GMT
etag: W/"47078e63380c6b0cbbfb6d8508b25ee7"
x-amz-meta-s3cmd-attrs: atime:1647562609/ctime:1647562609/gid:150037/gname:ezhang/md5:47078e63380c6b0cbbfb6d8508b25ee7/mode:33204/mtime:1647562609/uid:150037/uname:ezhang
cache-control: public, max-age=14400
x-amz-version-id: vyBstMTGyA6m5sV66zq8xsypUg.tAOk.
cf-cache-status: HIT
age: 627996
expires: Thu, 26 Jan 2023 13:15:58 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 78f825ac5dbeb500-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/embed/MtV2OdpT3jE
172.217.21.174200 OK 0 B URL HTTP/2 www.youtube.com/embed/MtV2OdpT3jE
IP 172.217.21.174:0
GET /embed/MtV2OdpT3jE HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 26 Jan 2023 09:15:58 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=m35nGPomx94; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=vLJYsKRRZB4; Domain=.youtube.com; Expires=Tue, 25-Jul-2023 09:15:58 GMT; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TWpnNE56SXdOalE0TVRVeU16UXdOUT09EM6JyZ4GGM6JyZ4G; Domain=.youtube.com; Expires=Tue, 25-Jul-2023 09:15:58 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+654; expires=Sat, 25-Jan-2025 09:15:58 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
trc.taboola.com/1119492/trc/3/json?tim=1674724558317&data=%7B%22id%22%3A247%2C%22ii%22%3A%22%2Flp%2Fcve%2Fregister_sub0%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1674724558297%2C%22cv%22%3A%2220230125-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dmemoglobal-cve-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1674724558317%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.193.44200 OK 0 B URL HTTP/2 trc.taboola.com/1119492/trc/3/json?tim=1674724558317&data=%7B%22id%22%3A247%2C%22ii%22%3A%22%2Flp%2Fcve%2Fregister_sub0%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1674724558297%2C%22cv%22%3A%2220230125-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dmemoglobal-cve-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1674724558317%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.193.44:0
GET /1119492/trc/3/json?tim=1674724558317&data=%7B%22id%22%3A247%2C%22ii%22%3A%22%2Flp%2Fcve%2Fregister_sub0%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1674724558297%2C%22cv%22%3A%2220230125-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dmemoglobal-cve-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1674724558317%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Flp.canadianvisaexpert.com%2Flp%2Fcve%2Fregister_sub0%2F%3Fgid%3Dd3b2d5a5-edf0-4237-b1fc-26404030ee2e%26utm_lang%3Den%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lp.canadianvisaexpert.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 09:16:00 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1674724560.470319,VS0,VE110
vary: Accept-Encoding
x-vcl-time-ms: 110
X-Firefox-Spdy: h2