Report - illinoisstateuniversity3.my.salesforce.com/a3q8c000003aBXlAAM

Report Overview

Submitted URL
illinoisstateuniversity3.my.salesforce.com/a3q8c000003aBXlAAM
IP
13.110.66.226
ASN
#14340 SALESFORCE
Submitted
2022-11-28 17:17:43
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
sso.illinoisstate.edu	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4.9 kB	51 kB	138.87.246.115
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	59 kB	34.120.237.76
cdn.illinoisstate.edu	407461	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.8 kB	191 kB	138.87.50.5
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
illinoisstateuniversity3.my.salesforce.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	2.7 kB	13.110.41.226
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.41.201.177
ocsp.usertrust.com	899	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	342 B	1.0 kB	172.64.155.188
account.illinoisstate.edu	793269	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	510 B	468 B	138.87.246.115
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	2.4 kB	93.184.220.29
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1	718 B	2023-03-07	2023-03-29
Pretty URL sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1 IP 138.87.246.115 ASN #7386 ILLINOIS-STATE-UNIV Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:39 Last Seen2023-03-29 23:52:24 Times Seen3 Hash 6e2859292e7eeead0d83e68bbef8f845 bba8cc9a4947ea44fd28865eb04ea97259a84063 7f0cdea9ac4a2c94cabbba83820932cff39267ba43939a5ddfd0aede987a9944 Loading...

	sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1	338 B	2023-03-07	2023-03-29
Pretty URL sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1 IP 138.87.246.115 ASN #7386 ILLINOIS-STATE-UNIV Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:39 Last Seen2023-03-29 23:52:24 Times Seen3 Hash c15207aa2e05a65230d0339ebd5675af 4ae1bb295ae02c1e27386d21178fd95eab43ef3e b3481b9b39b811b207f4af7d77347796189ef3fda4ba70902ee0bcf8648c6aa9 Loading...

	illinoisstateuniversity3.my.salesforce.com/a3q8c000003aBXlAAM	861 B	2023-03-11	2023-03-11
Pretty URL illinoisstateuniversity3.my.salesforce.com/a3q8c000003aBXlAAM IP 13.110.41.226 ASN #14340 SALESFORCE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:59:23 Last Seen2023-03-11 21:59:23 Times Seen1 Hash 50897e36346862944bceffdb4f05bba8 c9a5efef389ef5e5a7ba77bd928716b3e0d68ea8 cf4985f04b7bb60e1898336dbebc660717f415106425bdf14525d9504063bcbb Loading...

HTTP Transactions (35)

	URL	IP	Response	Size
	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 9408cc0694fcbea57966c3a3ba906092 fddcee1fdcf3209298e41a4b1b5560357fa165f0 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5083 Cache-Control: max-age=153512 Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 17:17:32 GMT Etag: "63848df9-1d7" Expires: Wed, 30 Nov 2022 11:56:04 GMT Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT Server: ECS (ska/F709) X-Cache: HIT Content-Length: 471`

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash bd912da2bcd9a3c44b9741fa31be4bd6 4851720052a8ff8da0b4a54791cef862c067edf3 59954d2ceabd28bbfea3b6f2e296ebe74623c66bfa1ef5e3ec836b6b5fc1629c HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 6443 Cache-Control: max-age=118853 Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 17:17:32 GMT Etag: "63840146-1d7" Expires: Wed, 30 Nov 2022 02:18:25 GMT Last-Modified: Mon, 28 Nov 2022 00:31:02 GMT Server: ECS (ska/F714) X-Cache: HIT Content-Length: 471`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 150792cfc458af013998f4ef6bdf5f74 d5179b2dcb11d06f82606bf6eb6648319998d63e 72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6454 Expires: Mon, 28 Nov 2022 19:05:06 GMT Date: Mon, 28 Nov 2022 17:17:32 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	34.102.187.140	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 34.102.187.140:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash 4d7e4eed097b9c4e5d509419f1cfc85a 290bb3d428a7c6330e2e3d73a952b16f820896c8 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 28 Nov 2022 16:19:32 GMT cache-control: public,max-age=3600 content-type: application/json age: 3480 alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 71f9c681a82440fd55e76c780a20e55d 3147768cfbcdd06e0c6e69684292e68e99917a80 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786" Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8585 Expires: Mon, 28 Nov 2022 19:40:37 GMT Date: Mon, 28 Nov 2022 17:17:32 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: w+93YNLgddg1s/nzIXjr64d6jJQc95JgxOMzBfkYtp/R2VxGMWYzLHje9KSfbDv6MiWT3JqDzKU= x-amz-request-id: HSAR3Y9KCYXK8G2Q content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 28 Nov 2022 16:42:08 GMT age: 2124 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Mon, 28 Nov 2022 17:17:32 GMT content-type: application/json content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	34.102.187.140	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 34.102.187.140:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 28 Nov 2022 17:08:55 GMT cache-control: public,max-age=3600 age: 517 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json alt-svc: clear X-Firefox-Spdy: h2

	illinoisstateuniversity3.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAYVPcIVwMDAwMDAwMDAwMDAwMDAwAAAA8HF9I4DfMDfwf0xLj-xLlZ8zd9es4P0AMvI_9IhwaXkqxGDSTKOClyijRo8hMcm-piVafXvzfTY6GOoKmwWw4Uze4OecUoyt_YGt6P9UOBCEoYgO07458WGPlqnRHYVq0MxEmXwQO5cphaQCAVy9Fwy_A29Ay4pxiN41vspk1wyTpU8laDTopTDdh0pfcQ_IViDSrF6WHIqGH0QbDCoJQzFUj14C7VHvFNgO-GH-dLaafVum946Iv-X5-dxBkB48LQ&saml_acs=https%3A%2F%2Fillinoisstateuniversity3.my.salesforce.com&saml_binding_type=HttpRedirect&Issuer=https%3A%2F%2Fillinoisstateuniversity3.my.salesforce.com&samlSsoConfig=0LE8c000006UNPJ&RelayState=%2Fa3q8c000003aBXlAAM	13.110.41.226	302 Found	0 B
URL HTTP/1.1 illinoisstateuniversity3.my.salesforce.com/saml/authn-request.jsp?saml_request_id=_2CAAAAYVPcIVwMDAwMDAwMDAwMDAwMDAwAAAA8HF9I4DfMDfwf0xLj-xLlZ8zd9es4P0AMvI_9IhwaXkqxGDSTKOClyijRo8hMcm-piVafXvzfTY6GOoKmwWw4Uze4OecUoyt_YGt6P9UOBCEoYgO07458WGPlqnRHYVq0MxEmXwQO5cphaQCAVy9Fwy_A29Ay4pxiN41vspk1wyTpU8laDTopTDdh0pfcQ_IViDSrF6WHIqGH0QbDCoJQzFUj14C7VHvFNgO-GH-dLaafVum946Iv-X5-dxBkB48LQ&saml_acs=https%3A%2F%2Fillinoisstateuniversity3.my.salesforce.com&saml_binding_type=HttpRedirect&Issuer=https%3A%2F%2Fillinoisstateuniversity3.my.salesforce.com&samlSsoConfig=0LE8c000006UNPJ&RelayState=%2Fa3q8c000003aBXlAAM IP 13.110.41.226:0 ASN #14340 SALESFORCE File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /saml/authn-request.jsp?saml_request_id=_2CAAAAYVPcIVwMDAwMDAwMDAwMDAwMDAwAAAA8HF9I4DfMDfwf0xLj-xLlZ8zd9es4P0AMvI_9IhwaXkqxGDSTKOClyijRo8hMcm-piVafXvzfTY6GOoKmwWw4Uze4OecUoyt_YGt6P9UOBCEoYgO07458WGPlqnRHYVq0MxEmXwQO5cphaQCAVy9Fwy_A29Ay4pxiN41vspk1wyTpU8laDTopTDdh0pfcQ_IViDSrF6WHIqGH0QbDCoJQzFUj14C7VHvFNgO-GH-dLaafVum946Iv-X5-dxBkB48LQ&saml_acs=https%3A%2F%2Fillinoisstateuniversity3.my.salesforce.com&saml_binding_type=HttpRedirect&Issuer=https%3A%2F%2Fillinoisstateuniversity3.my.salesforce.com&samlSsoConfig=0LE8c000006UNPJ&RelayState=%2Fa3q8c000003aBXlAAM HTTP/1.1 Host: illinoisstateuniversity3.my.salesforce.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://illinoisstateuniversity3.my.salesforce.com/a3q8c000003aBXlAAM Connection: keep-alive Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=i0tIQ29AEe2Rbwt5C-8YtQ; BrowserId_sec=i0tIQ29AEe2Rbwt5C-8YtQ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin HTTP/1.1 302 Found Date: Mon, 28 Nov 2022 17:17:32 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: upgrade-insecure-requests X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Content-Type: text/html;charset=UTF-8 Pragma: no-cache Location: https://sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=lZPbbqMwEIZfBfmeY2kCqElFoEnYTQoJhya9iSiYxi3YBJtTnn5pspVarVRpLftiNON%2Ffo0%2F3913Rc41sKKI4AmQBQlwECckRfh1AsJgzmvgfnpH4yIvDbNmR7yFpxpSxg33MDUuiQmoK2yQmCJq4LiA1GCJ4ZvrlaEIklFWhJGE5IAzKYUVGxpZBNO6gJUPqwYlMNyuJuDIWEkNUUR5jjBBlLKYwRqjizfW3whFL9A4hzQjVQKFhBSAswcjCMfs4v1TgFIifBMRYFqLKC3FwUmGcih%2BWFPELUxRBRMm%2Br4LOMeegINimcPaR17iRO3aNv85H2ltOdcd1c7WdtZmUrd647tV%2FqydUx1S1ZPMdeMcdOfYxrv3U7ew%2FeC3a%2BU9etsS7bhOCr5EUZztmnMW7EcLl%2Fwu2qdWDc9QdWESkp4d9gs28vTQnVkPZP%2FqSmP1VntaePkJb5f76CStu4di127c26Q8xhvLjHp93vYHU9HNXi079KjKDS3f5bYPylDLYzsgZWCnR6nMks3BiZDtV%2FPR09I5LZbS5sW2yK%2FNeR6%2Byao1jpbN%2FPHV5RdLPl3FcRbVha6OnIbf3fJpN3ufqdpqM0yL0ho6eBgvZhOgSIrCyzKvaIE8NoZ9owj6WH4GnPf37WcIX4n6CZSXaxE1lkHg8Z7rB4CLPskcCsCVQ%2BPSvPoC4M%2By8Sd1YPr%2FjN2JX1pOr9H3jzD9Aw%3D%3D&RelayState=%2Fa3q8c000003aBXlAAM&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=d00VTZlQvFx%2BW%2BmPDLhJkCmaDPAlrmsNN8kVoAYFhE%2BZsKtA8clgrXWBkY5x8Rtj2vGGt2baBAFiqQfCHAYp10W1mRTYXe2cpR9LPHPeyB0BqTDsKlPB6geReFjtP9Pzl%2F9Zet7e%2Bwz909v9hRhqWGPoq%2F4kD4g1UnXFpvR3kfMXGjTJ%2F5pqWV9EdYJVoPDZBWtuubiGMr%2ByRoOty%2BOpKh%2FIrDXcMEvYl%2Fd9MMz01h1td9Z7HE3GmqVOtspJWPLvZCrvNP5CWJtAFZLYVvwKd98C0Lk0qkr0l6I%2Fww%2FyG18k0jiD7FPGqQ0d8RSzzsjv7xieJOQh2eMu4efG9%2FZE%2Fw%3D%3D Content-Length: 0

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 7ab2ef968cb6a3078f4b9cb2dda813d4 e669116047ca058a2c1b2999ff0ea8682719162c 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 4518 Cache-Control: max-age=147880 Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 17:17:33 GMT Etag: "63847a2f-1d7" Expires: Wed, 30 Nov 2022 10:22:13 GMT Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT Server: ECS (ska/F709) X-Cache: HIT Content-Length: 471`

	push.services.mozilla.com/	52.41.201.177	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 52.41.201.177:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: RYUpCt5gU6kRnAp4R/frKg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: YF8oiymJrUUhbPzLi8w8ZdRzmEU=`

	ocsp.usertrust.com/	172.64.155.188	200 OK	472 B
URL HTTP/1.1 ocsp.usertrust.com/ IP 172.64.155.188:0 ASN #13335 CLOUDFLARENET File type data Size 472 B (472 bytes) Hash 6db8095c5158eab166ccdf0c7ab6b76e 00a75c1cc2c082eba9c60a29de41de687247bfb6 9ab6c0a61c9ee7e8a267c915400eee468f720758a2c1474ce8d352c4e7e03b61 HTTP Headers `POST / HTTP/1.1 Host: ocsp.usertrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Mon, 28 Nov 2022 17:17:33 GMT Content-Type: application/ocsp-response Content-Length: 472 Connection: keep-alive Last-Modified: Fri, 25 Nov 2022 08:55:11 GMT Expires: Fri, 02 Dec 2022 08:55:10 GMT Etag: "00a75c1cc2c082eba9c60a29de41de687247bfb6" Cache-Control: max-age=498093,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 990 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7714c1fcafc60b65-OSL

	sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=lZPbbqMwEIZfBfmeY2kCqElFoEnYTQoJhya9iSiYxi3YBJtTnn5pspVarVRpLftiNON%2Ffo0%2F3913Rc41sKKI4AmQBQlwECckRfh1AsJgzmvgfnpH4yIvDbNmR7yFpxpSxg33MDUuiQmoK2yQmCJq4LiA1GCJ4ZvrlaEIklFWhJGE5IAzKYUVGxpZBNO6gJUPqwYlMNyuJuDIWEkNUUR5jjBBlLKYwRqjizfW3whFL9A4hzQjVQKFhBSAswcjCMfs4v1TgFIifBMRYFqLKC3FwUmGcih%2BWFPELUxRBRMm%2Br4LOMeegINimcPaR17iRO3aNv85H2ltOdcd1c7WdtZmUrd647tV%2FqydUx1S1ZPMdeMcdOfYxrv3U7ew%2FeC3a%2BU9etsS7bhOCr5EUZztmnMW7EcLl%2Fwu2qdWDc9QdWESkp4d9gs28vTQnVkPZP%2FqSmP1VntaePkJb5f76CStu4di127c26Q8xhvLjHp93vYHU9HNXi079KjKDS3f5bYPylDLYzsgZWCnR6nMks3BiZDtV%2FPR09I5LZbS5sW2yK%2FNeR6%2Byao1jpbN%2FPHV5RdLPl3FcRbVha6OnIbf3fJpN3ufqdpqM0yL0ho6eBgvZhOgSIrCyzKvaIE8NoZ9owj6WH4GnPf37WcIX4n6CZSXaxE1lkHg8Z7rB4CLPskcCsCVQ%2BPSvPoC4M%2By8Sd1YPr%2FjN2JX1pOr9H3jzD9Aw%3D%3D&RelayState=%2Fa3q8c000003aBXlAAM&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=d00VTZlQvFx%2BW%2BmPDLhJkCmaDPAlrmsNN8kVoAYFhE%2BZsKtA8clgrXWBkY5x8Rtj2vGGt2baBAFiqQfCHAYp10W1mRTYXe2cpR9LPHPeyB0BqTDsKlPB6geReFjtP9Pzl%2F9Zet7e%2Bwz909v9hRhqWGPoq%2F4kD4g1UnXFpvR3kfMXGjTJ%2F5pqWV9EdYJVoPDZBWtuubiGMr%2ByRoOty%2BOpKh%2FIrDXcMEvYl%2Fd9MMz01h1td9Z7HE3GmqVOtspJWPLvZCrvNP5CWJtAFZLYVvwKd98C0Lk0qkr0l6I%2Fww%2FyG18k0jiD7FPGqQ0d8RSzzsjv7xieJOQh2eMu4efG9%2FZE%2Fw%3D%3D	138.87.246.115	302	0 B
URL HTTP/1.1 sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=lZPbbqMwEIZfBfmeY2kCqElFoEnYTQoJhya9iSiYxi3YBJtTnn5pspVarVRpLftiNON%2Ffo0%2F3913Rc41sKKI4AmQBQlwECckRfh1AsJgzmvgfnpH4yIvDbNmR7yFpxpSxg33MDUuiQmoK2yQmCJq4LiA1GCJ4ZvrlaEIklFWhJGE5IAzKYUVGxpZBNO6gJUPqwYlMNyuJuDIWEkNUUR5jjBBlLKYwRqjizfW3whFL9A4hzQjVQKFhBSAswcjCMfs4v1TgFIifBMRYFqLKC3FwUmGcih%2BWFPELUxRBRMm%2Br4LOMeegINimcPaR17iRO3aNv85H2ltOdcd1c7WdtZmUrd647tV%2FqydUx1S1ZPMdeMcdOfYxrv3U7ew%2FeC3a%2BU9etsS7bhOCr5EUZztmnMW7EcLl%2Fwu2qdWDc9QdWESkp4d9gs28vTQnVkPZP%2FqSmP1VntaePkJb5f76CStu4di127c26Q8xhvLjHp93vYHU9HNXi079KjKDS3f5bYPylDLYzsgZWCnR6nMks3BiZDtV%2FPR09I5LZbS5sW2yK%2FNeR6%2Byao1jpbN%2FPHV5RdLPl3FcRbVha6OnIbf3fJpN3ufqdpqM0yL0ho6eBgvZhOgSIrCyzKvaIE8NoZ9owj6WH4GnPf37WcIX4n6CZSXaxE1lkHg8Z7rB4CLPskcCsCVQ%2BPSvPoC4M%2By8Sd1YPr%2FjN2JX1pOr9H3jzD9Aw%3D%3D&RelayState=%2Fa3q8c000003aBXlAAM&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=d00VTZlQvFx%2BW%2BmPDLhJkCmaDPAlrmsNN8kVoAYFhE%2BZsKtA8clgrXWBkY5x8Rtj2vGGt2baBAFiqQfCHAYp10W1mRTYXe2cpR9LPHPeyB0BqTDsKlPB6geReFjtP9Pzl%2F9Zet7e%2Bwz909v9hRhqWGPoq%2F4kD4g1UnXFpvR3kfMXGjTJ%2F5pqWV9EdYJVoPDZBWtuubiGMr%2ByRoOty%2BOpKh%2FIrDXcMEvYl%2Fd9MMz01h1td9Z7HE3GmqVOtspJWPLvZCrvNP5CWJtAFZLYVvwKd98C0Lk0qkr0l6I%2Fww%2FyG18k0jiD7FPGqQ0d8RSzzsjv7xieJOQh2eMu4efG9%2FZE%2Fw%3D%3D IP 138.87.246.115:0 ASN #7386 ILLINOIS-STATE-UNIV File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /idp/profile/SAML2/Redirect/SSO?SAMLRequest=lZPbbqMwEIZfBfmeY2kCqElFoEnYTQoJhya9iSiYxi3YBJtTnn5pspVarVRpLftiNON%2Ffo0%2F3913Rc41sKKI4AmQBQlwECckRfh1AsJgzmvgfnpH4yIvDbNmR7yFpxpSxg33MDUuiQmoK2yQmCJq4LiA1GCJ4ZvrlaEIklFWhJGE5IAzKYUVGxpZBNO6gJUPqwYlMNyuJuDIWEkNUUR5jjBBlLKYwRqjizfW3whFL9A4hzQjVQKFhBSAswcjCMfs4v1TgFIifBMRYFqLKC3FwUmGcih%2BWFPELUxRBRMm%2Br4LOMeegINimcPaR17iRO3aNv85H2ltOdcd1c7WdtZmUrd647tV%2FqydUx1S1ZPMdeMcdOfYxrv3U7ew%2FeC3a%2BU9etsS7bhOCr5EUZztmnMW7EcLl%2Fwu2qdWDc9QdWESkp4d9gs28vTQnVkPZP%2FqSmP1VntaePkJb5f76CStu4di127c26Q8xhvLjHp93vYHU9HNXi079KjKDS3f5bYPylDLYzsgZWCnR6nMks3BiZDtV%2FPR09I5LZbS5sW2yK%2FNeR6%2Byao1jpbN%2FPHV5RdLPl3FcRbVha6OnIbf3fJpN3ufqdpqM0yL0ho6eBgvZhOgSIrCyzKvaIE8NoZ9owj6WH4GnPf37WcIX4n6CZSXaxE1lkHg8Z7rB4CLPskcCsCVQ%2BPSvPoC4M%2By8Sd1YPr%2FjN2JX1pOr9H3jzD9Aw%3D%3D&RelayState=%2Fa3q8c000003aBXlAAM&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=d00VTZlQvFx%2BW%2BmPDLhJkCmaDPAlrmsNN8kVoAYFhE%2BZsKtA8clgrXWBkY5x8Rtj2vGGt2baBAFiqQfCHAYp10W1mRTYXe2cpR9LPHPeyB0BqTDsKlPB6geReFjtP9Pzl%2F9Zet7e%2Bwz909v9hRhqWGPoq%2F4kD4g1UnXFpvR3kfMXGjTJ%2F5pqWV9EdYJVoPDZBWtuubiGMr%2ByRoOty%2BOpKh%2FIrDXcMEvYl%2Fd9MMz01h1td9Z7HE3GmqVOtspJWPLvZCrvNP5CWJtAFZLYVvwKd98C0Lk0qkr0l6I%2Fww%2FyG18k0jiD7FPGqQ0d8RSzzsjv7xieJOQh2eMu4efG9%2FZE%2Fw%3D%3D HTTP/1.1 Host: sso.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://illinoisstateuniversity3.my.salesforce.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site `HTTP/1.1 302 cache-control: no-store strict-transport-security: max-age=0 location: /idp/profile/SAML2/Redirect/SSO?execution=e1s1 content-length: 0 date: Mon, 28 Nov 2022 17:17:33 GMT set-cookie: JSESSIONID=FCB61177351E34B0288DD2807C0666E1; Path=/idp; Secure; HttpOnly prod_cookie=3e0a213eb2167f37abd16b0067cbb2e4; path=/; HttpOnly; Secure; SameSite=None`

	sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1	138.87.246.115	200	6.2 kB
URL HTTP/1.1 sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1 IP 138.87.246.115:0 ASN #7386 ILLINOIS-STATE-UNIV File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text Size 6.2 kB (6200 bytes) Hash ff6a45b439e8217a1816fec58315d962 04d79227343b6b708349d74db5c96780401a83d2 ce5034c078d3dae3bd8741b396a0c0bc70be690c5b31bef580fe6e7e5f410f87 HTTP Headers GET /idp/profile/SAML2/Redirect/SSO?execution=e1s1 HTTP/1.1 Host: sso.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://illinoisstateuniversity3.my.salesforce.com/ Connection: keep-alive Cookie: JSESSIONID=FCB61177351E34B0288DD2807C0666E1; prod_cookie=3e0a213eb2167f37abd16b0067cbb2e4 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site `HTTP/1.1 200 cache-control: no-store strict-transport-security: max-age=0 content-type: text/html;charset=utf-8 content-length: 6200 date: Mon, 28 Nov 2022 17:17:33 GMT`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 8bb181e3f5ca898c6e31a8efc2e28291 eda3a91f8e2cbc5467da08ad85e6f6a30702b66c 0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0" Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4594 Expires: Mon, 28 Nov 2022 18:34:08 GMT Date: Mon, 28 Nov 2022 17:17:34 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 8bb181e3f5ca898c6e31a8efc2e28291 eda3a91f8e2cbc5467da08ad85e6f6a30702b66c 0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0" Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4594 Expires: Mon, 28 Nov 2022 18:34:08 GMT Date: Mon, 28 Nov 2022 17:17:34 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 8bb181e3f5ca898c6e31a8efc2e28291 eda3a91f8e2cbc5467da08ad85e6f6a30702b66c 0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0" Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4594 Expires: Mon, 28 Nov 2022 18:34:08 GMT Date: Mon, 28 Nov 2022 17:17:34 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg	34.120.237.76	200 OK	9.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.4 kB (9430 bytes) Hash 1f434933b5bd6377d299ada22d1ae7ef 075531f525e625b117b2497f31139c9824d0e9c5 b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9430 x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR7wyGCIIAMFhgw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:01:46 GMT age: 69348 etag: "075531f525e625b117b2497f31139c9824d0e9c5" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg	34.120.237.76	200 OK	8.8 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 8.8 kB (8771 bytes) Hash b0bd385532089b45a14e461abbecc1af 3da359b1ba09138a425094715b9f3a2f8d0257fe 803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8771 x-amzn-requestid: 995d3904-9be1-4b40-9813-ff47e60639ec x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_MEAPoAMF0xw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d861-3fdb7958064e0c4b1aed2136;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: vrBB4JkuL3nbZnDWitQ4dvTruO9M6hSt8mw9NuJliCmcNOw8xvfWhw== via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:16:08 GMT age: 68486 etag: "3da359b1ba09138a425094715b9f3a2f8d0257fe" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg	34.120.237.76	200 OK	8.9 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 8.9 kB (8885 bytes) Hash 3a1a4e00f1f15827cf651f373863c379 70c2a238f06ca7e56ef80c83738e081bf0de3330 3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8885 x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cGDTEFSeIAMF3rg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 10:13:33 GMT age: 25441 etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg	34.120.237.76	200 OK	8.8 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 8.8 kB (8817 bytes) Hash 741ddfb19764ac9a77509e7e87cfbfb2 308c08784ce4a0757cbd112807555b83e17a1d56 e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8817 x-amzn-requestid: 31bd21c7-1d75-4159-af51-52035da16da4 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b-krGE6AIAMF2Kg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637c1b13-32a7b9c6642592c70783a0cf;Sampled=0 x-amzn-remapped-date: Tue, 22 Nov 2022 00:42:59 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: I6egDH0h7D08HhaoQHQ0vgghBhPfje2lGIbnWD-t7p4txzHsFxmZfg== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 10:31:22 GMT age: 24372 etag: "308c08784ce4a0757cbd112807555b83e17a1d56" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg	34.120.237.76	200 OK	6.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.4 kB (6376 bytes) Hash 78b1389f425425d0450c94d900404dc4 53b12a8702f7c5b7cc697e2a24da824d9434be65 0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6376 x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_KGeaoAMFb_Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q== via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:01:46 GMT age: 69348 etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg	34.120.237.76	200 OK	10 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10 kB (10199 bytes) Hash 2cd887044e91d7ed0f1a8d7119ff7dd0 ae8aa4ce6ddaccba771fe65446926b60fc5628da bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10199 x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iF1VIAMF09g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:42:14 GMT age: 70520 etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	cdn.illinoisstate.edu/css/sites/illinois-state-v4/style.css	138.87.50.5	200 OK	100 kB
URL HTTP/1.1 cdn.illinoisstate.edu/css/sites/illinois-state-v4/style.css IP 138.87.50.5:0 ASN #7386 ILLINOIS-STATE-UNIV File type ASCII text, with very long lines (65536), with no line terminators Size 100 kB (100081 bytes) Hash fc588532407ad1640483ac6b1e41e9f7 acfb1816ecad5f90ed90d2ec98b3e3453d80f7ec 5ba595e364093aa78b2e3bb3134b4c30a519b838d301c55138ff615a9a0f18a7 HTTP Headers `GET /css/sites/illinois-state-v4/style.css HTTP/1.1 Host: cdn.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sso.illinoisstate.edu/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site` HTTP/1.1 200 OK Date: Mon, 28 Nov 2022 17:17:34 GMT Server: Apache Last-Modified: Thu, 10 Nov 2022 23:16:00 GMT ETag: "ec578-5ed25f4c9ec00-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: max-age=2592000 Expires: Wed, 28 Dec 2022 17:17:34 GMT X-Server-Env: prod Access-Control-Allow-Origin: * Access-Control-Allow-Headers: origin, x-requested-with, content-type Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Keep-Alive: timeout=5, max=33 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/css Strict-Transport-Security: max-age=157680000 Set-Cookie: nsprod_webinfa_lb=ffffffff09661ccd45525d5f4f58455e445a4a42378b;path=/;secure;httponly

	sso.illinoisstate.edu/idp/images/ISU.png	138.87.246.115	200	37 kB
URL HTTP/1.1 sso.illinoisstate.edu/idp/images/ISU.png IP 138.87.246.115:0 ASN #7386 ILLINOIS-STATE-UNIV File type PNG image data, 400 x 107, 8-bit/color RGBA, non-interlaced\012- data Size 37 kB (36907 bytes) Hash f9e955fcf1bdc443beb2e66689e5344c e9e5c3e0016adaab3545088ec30ab64378a379ca 1656d758f1c4c6daa03c095ec2222e2907b401f0c4f5a12dc5c850800b4890ac HTTP Headers GET /idp/images/ISU.png HTTP/1.1 Host: sso.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1 Cookie: JSESSIONID=FCB61177351E34B0288DD2807C0666E1; prod_cookie=3e0a213eb2167f37abd16b0067cbb2e4 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin `HTTP/1.1 200 cache-control: private accept-ranges: bytes etag: W/"36907-1669153168000" last-modified: Tue, 22 Nov 2022 21:39:28 GMT content-type: image/png;charset=UTF-8 content-length: 36907 date: Mon, 28 Nov 2022 17:17:35 GMT Strict-Transport-Security: max-age=157680000`

	cdn.illinoisstate.edu/fonts/pt-serif/pt-serif-bold.woff2	138.87.50.5	200 OK	13 kB
URL HTTP/1.1 cdn.illinoisstate.edu/fonts/pt-serif/pt-serif-bold.woff2 IP 138.87.50.5:0 ASN #7386 ILLINOIS-STATE-UNIV File type Web Open Font Format (Version 2), TrueType, length 13372, version 1.0\012- data Size 13 kB (13372 bytes) Hash 54d7a410ffa196542021cf1535afb7b2 1e52c446228facdbcacec1070e3473df9a8587de a75a7bf10f415b7c91f0b959177f3f1779e78cbf735601e41fb982c2b1cf4be2 HTTP Headers `GET /fonts/pt-serif/pt-serif-bold.woff2 HTTP/1.1 Host: cdn.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://sso.illinoisstate.edu Connection: keep-alive Referer: https://cdn.illinoisstate.edu/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site` HTTP/1.1 200 OK Date: Mon, 28 Nov 2022 17:17:35 GMT Server: Apache Last-Modified: Mon, 26 Aug 2019 20:08:28 GMT ETag: "343c-5910ab81a8700" Accept-Ranges: bytes Content-Length: 13372 Cache-Control: max-age=2592000 Expires: Wed, 28 Dec 2022 17:17:35 GMT X-UA-Compatible: IE=Edge,chrome=1 X-Server-Env: prod Access-Control-Allow-Origin: * Access-Control-Allow-Headers: origin, x-requested-with, content-type Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Keep-Alive: timeout=5, max=58 Connection: Keep-Alive Strict-Transport-Security: max-age=157680000 Set-Cookie: nsprod_webinfa_lb=ffffffff09661ccc45525d5f4f58455e445a4a42378b;path=/;secure;httponly

	cdn.illinoisstate.edu/fonts/open-sans/open-sans-condensed-bold.woff2	138.87.50.5	200 OK	10 kB
URL HTTP/1.1 cdn.illinoisstate.edu/fonts/open-sans/open-sans-condensed-bold.woff2 IP 138.87.50.5:0 ASN #7386 ILLINOIS-STATE-UNIV File type Web Open Font Format (Version 2), TrueType, length 10228, version 1.0\012- data Size 10 kB (10228 bytes) Hash 8aa3d15943d3fcde2c483a392ab043e8 54c79d0cd783742f0bd2abc74b2efe4d900e5ed3 dbe1042b7290f4f6d73d1e0ebe0b7f8dd9e9d3f8bdde4e749c151f36ac7c42c2 HTTP Headers `GET /fonts/open-sans/open-sans-condensed-bold.woff2 HTTP/1.1 Host: cdn.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://sso.illinoisstate.edu Connection: keep-alive Referer: https://cdn.illinoisstate.edu/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site` HTTP/1.1 200 OK Date: Mon, 28 Nov 2022 17:17:35 GMT Server: Apache Last-Modified: Mon, 26 Aug 2019 20:07:47 GMT ETag: "27f4-5910ab5a8eac0" Accept-Ranges: bytes Content-Length: 10228 Cache-Control: max-age=2592000 Expires: Wed, 28 Dec 2022 17:17:35 GMT X-UA-Compatible: IE=Edge,chrome=1 X-Server-Env: prod Access-Control-Allow-Origin: * Access-Control-Allow-Headers: origin, x-requested-with, content-type Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Keep-Alive: timeout=5, max=31 Connection: Keep-Alive Strict-Transport-Security: max-age=157680000 Set-Cookie: nsprod_webinfa_lb=ffffffff09661ccd45525d5f4f58455e445a4a42378b;path=/;secure;httponly

	sso.illinoisstate.edu/favicon.ico	138.87.246.115	200	1.4 kB
URL HTTP/1.1 sso.illinoisstate.edu/favicon.ico IP 138.87.246.115:0 ASN #7386 ILLINOIS-STATE-UNIV File type GIF image data, version 89a, 32 x 32\012- data Size 1.4 kB (1396 bytes) Hash 5a60eff5d0f9fd12504806b70e8c437b d07fbc809030f8772945c6c2010eacfe6daab439 54f5a6a5470ef2917f4c95cfef65e5fa30eb1aec92ed338ce61d23d7717c9d3a HTTP Headers `GET /favicon.ico HTTP/1.1 Host: sso.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1 Cookie: prod_cookie=3e0a213eb2167f37abd16b0067cbb2e4 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 accept-ranges: bytes etag: W/"1396-1669153167000" last-modified: Tue, 22 Nov 2022 21:39:27 GMT content-type: image/x-icon content-length: 1396 date: Mon, 28 Nov 2022 17:17:35 GMT Strict-Transport-Security: max-age=157680000`

	cdn.illinoisstate.edu/fonts/open-sans/open-sans.woff2	138.87.50.5	200 OK	9.1 kB
URL HTTP/1.1 cdn.illinoisstate.edu/fonts/open-sans/open-sans.woff2 IP 138.87.50.5:0 ASN #7386 ILLINOIS-STATE-UNIV File type Web Open Font Format (Version 2), TrueType, length 9132, version 1.0\012- data Size 9.1 kB (9132 bytes) Hash 358d3070946a90b4960cd111154fdc12 a0ba0bf47a7f905f9aa1a3ce15a39cdac62466ee 54c64f3c66372027154f01fc9f24b4e25fdfe405b70d1994c79abbc2576ff775 HTTP Headers `GET /fonts/open-sans/open-sans.woff2 HTTP/1.1 Host: cdn.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://sso.illinoisstate.edu Connection: keep-alive Referer: https://cdn.illinoisstate.edu/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site` HTTP/1.1 200 OK Date: Mon, 28 Nov 2022 17:17:35 GMT Server: Apache Last-Modified: Mon, 26 Aug 2019 20:07:48 GMT ETag: "23ac-5910ab5b82d00" Accept-Ranges: bytes Content-Length: 9132 Cache-Control: max-age=2592000 Expires: Wed, 28 Dec 2022 17:17:35 GMT X-UA-Compatible: IE=Edge,chrome=1 X-Server-Env: prod Access-Control-Allow-Origin: * Access-Control-Allow-Headers: origin, x-requested-with, content-type Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Strict-Transport-Security: max-age=157680000 Set-Cookie: nsprod_webinfa_lb=ffffffff09661ccc45525d5f4f58455e445a4a42378b;path=/;secure;httponly

	sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1	138.87.246.115	302	0 B
URL HTTP/1.1 sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1 IP 138.87.246.115:0 ASN #7386 ILLINOIS-STATE-UNIV File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /idp/profile/SAML2/Redirect/SSO?execution=e1s1 HTTP/1.1 Host: sso.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 360 Origin: https://sso.illinoisstate.edu Connection: keep-alive Referer: https://sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1 Cookie: JSESSIONID=FCB61177351E34B0288DD2807C0666E1; prod_cookie=3e0a213eb2167f37abd16b0067cbb2e4 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin `HTTP/1.1 302 cache-control: no-store strict-transport-security: max-age=0 location: /idp/profile/SAML2/Redirect/SSO?execution=e1s2 content-length: 0 date: Mon, 28 Nov 2022 17:17:35 GMT`

	sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s2	138.87.246.115	200	5.2 kB
URL HTTP/1.1 sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s2 IP 138.87.246.115:0 ASN #7386 ILLINOIS-STATE-UNIV File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 5.2 kB (5180 bytes) Hash da5baab160deb7322ffe5204e0852025 b863f105bf81d9730cc3143d05a528a0b9ed8f19 8e2ce297fd15a91b36d7acb12c4c8acf5d08ed4bd9fdb71c0fb14c7685ba8f57 HTTP Headers GET /idp/profile/SAML2/Redirect/SSO?execution=e1s2 HTTP/1.1 Host: sso.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://sso.illinoisstate.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1 Connection: keep-alive Cookie: JSESSIONID=FCB61177351E34B0288DD2807C0666E1; prod_cookie=3e0a213eb2167f37abd16b0067cbb2e4 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin `HTTP/1.1 200 cache-control: no-store strict-transport-security: max-age=0 content-type: text/html;charset=utf-8 content-length: 5180 date: Mon, 28 Nov 2022 17:17:35 GMT`

	cdn.illinoisstate.edu/fonts/open-sans/open-sans-bold.woff2	138.87.50.5	200 OK	9.1 kB
URL HTTP/1.1 cdn.illinoisstate.edu/fonts/open-sans/open-sans-bold.woff2 IP 138.87.50.5:0 ASN #7386 ILLINOIS-STATE-UNIV File type Web Open Font Format (Version 2), TrueType, length 9080, version 1.0\012- data Size 9.1 kB (9080 bytes) Hash 927f45f0c98e115c1f661f17d185771e a4d63590c8393ae66bd712a0acd5105788c1a5b8 a48a6e4b14fe55f750c0a3dfb5a6f4941bdc06af0aa542b90de25c30c2b4625c HTTP Headers `GET /fonts/open-sans/open-sans-bold.woff2 HTTP/1.1 Host: cdn.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://sso.illinoisstate.edu Connection: keep-alive Referer: https://cdn.illinoisstate.edu/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site` HTTP/1.1 200 OK Date: Mon, 28 Nov 2022 17:17:36 GMT Server: Apache Last-Modified: Mon, 26 Aug 2019 20:07:47 GMT ETag: "2378-5910ab5a8eac0" Accept-Ranges: bytes Content-Length: 9080 Cache-Control: max-age=2592000 Expires: Wed, 28 Dec 2022 17:17:36 GMT X-UA-Compatible: IE=Edge,chrome=1 X-Server-Env: prod Access-Control-Allow-Origin: * Access-Control-Allow-Headers: origin, x-requested-with, content-type Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Keep-Alive: timeout=5, max=29 Connection: Keep-Alive Strict-Transport-Security: max-age=157680000 Set-Cookie: nsprod_webinfa_lb=ffffffff09661ccd45525d5f4f58455e445a4a42378b;path=/;secure;httponly

	cdn.illinoisstate.edu/fonts/icons/isu-icons-new.ttf	138.87.50.5	200 OK	45 kB
URL HTTP/1.1 cdn.illinoisstate.edu/fonts/icons/isu-icons-new.ttf IP 138.87.50.5:0 ASN #7386 ILLINOIS-STATE-UNIV File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, standard-031521\012- data Size 45 kB (44780 bytes) Hash d94b5badfcaf8ee260a7b58cc106686d 07cd159628fbdb96df2291c8ea888b752d751e1e dadc2a2d9584f62a6e4e61fc379f0fb69f56ab61742b1ee73905e28d2e69ef33 HTTP Headers `GET /fonts/icons/isu-icons-new.ttf HTTP/1.1 Host: cdn.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://sso.illinoisstate.edu Connection: keep-alive Referer: https://cdn.illinoisstate.edu/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site` HTTP/1.1 200 OK Date: Mon, 28 Nov 2022 17:17:36 GMT Server: Apache Last-Modified: Mon, 15 Mar 2021 21:01:04 GMT ETag: "aeec-5bd998c3ec4f4" Accept-Ranges: bytes Content-Length: 44780 Cache-Control: max-age=2592000 Expires: Wed, 28 Dec 2022 17:17:36 GMT X-Server-Env: prod Access-Control-Allow-Origin: * Access-Control-Allow-Headers: origin, x-requested-with, content-type Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Keep-Alive: timeout=5, max=57 Connection: Keep-Alive Content-Type: application/font-sfnt Strict-Transport-Security: max-age=157680000 Set-Cookie: nsprod_webinfa_lb=ffffffff09661ccc45525d5f4f58455e445a4a42378b;path=/;secure;httponly

	account.illinoisstate.edu/centrallogin/oam_fed_logout.php	138.87.246.115	200 OK	48 B
URL HTTP/1.1 account.illinoisstate.edu/centrallogin/oam_fed_logout.php IP 138.87.246.115:0 ASN #7386 ILLINOIS-STATE-UNIV File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 48 B (48 bytes) Hash 8d7cceda1aa3c55812504abea065ac86 1b477e6bcd36e84959111c4d8529b60223be5752 41207931212efc845a1d48d0462c34c26b9a323406c248223aee15d4ab8f20a3 HTTP Headers `GET /centrallogin/oam_fed_logout.php HTTP/1.1 Host: account.illinoisstate.edu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sso.illinoisstate.edu/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-site` `HTTP/1.1 200 OK Date: Mon, 28 Nov 2022 17:17:36 GMT Server: Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 48 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=157680000 Set-Cookie: nsdev_lb_oamprod=ffffffffaf1678d445525d5f4f58455e445a4a42378b;path=/;secure;httponly`

	illinoisstateuniversity3.my.salesforce.com/a3q8c000003aBXlAAM	13.110.41.226	200 OK	0 B
URL HTTP/1.1 illinoisstateuniversity3.my.salesforce.com/a3q8c000003aBXlAAM IP 13.110.41.226:0 ASN #14340 SALESFORCE File type Size 0 B (0 bytes) Hash HTTP Headers `GET /a3q8c000003aBXlAAM HTTP/1.1 Host: illinoisstateuniversity3.my.salesforce.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1` HTTP/1.1 200 OK Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Tue, 28-Nov-2023 17:17:32 GMT; Max-Age=31536000 LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Tue, 28-Nov-2023 17:17:32 GMT; Max-Age=31536000 BrowserId=i0tIQ29AEe2Rbwt5C-8YtQ; domain=.salesforce.com; path=/; expires=Tue, 28-Nov-2023 17:17:32 GMT; Max-Age=31536000 BrowserId_sec=i0tIQ29AEe2Rbwt5C-8YtQ; domain=.salesforce.com; path=/; expires=Tue, 28-Nov-2023 17:17:32 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: upgrade-insecure-requests X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: must-revalidate,no-cache,no-store Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Content-Encoding: gzip Connection: close

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (35)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size