instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
301 Moved Permanently 167 B URL HTTP/1.1 instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
Analyzer Verdict Alert quad9 Sinkholed
GET /Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 03 Feb 2023 19:45:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
X-Cache: Redirect from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BLXDeagIKCJDYnlCsoNr0am90JI01Csnm3mFRH-WMBBZth_cFDOuLw==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11335
Expires: Fri, 03 Feb 2023 22:54:54 GMT
Date: Fri, 03 Feb 2023 19:45:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17813
Expires: Sat, 04 Feb 2023 00:42:52 GMT
Date: Fri, 03 Feb 2023 19:45:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 19:36:11 GMT
content-type: application/json
age: 588
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5271
Expires: Fri, 03 Feb 2023 21:13:50 GMT
Date: Fri, 03 Feb 2023 19:45:59 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YMFBHYBnUN/Z49PHil+rmfUaqTefEB7JhAVBYKiGW26qZ1kHy+0uC9LZ8KOda2GVgl0sGPtLza8=
x-amz-request-id: T5B2NQJ3NXGEEHT9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 19:23:40 GMT
age: 1339
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 19:45:59 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 56db492903de155e73c9b4d9d4659ee3
e93064bc7aa4cd3c92cd51a6edf66b3efff17dc4
fa91d63080cee44deb5d7bffc63428c1933bab1dd86fc4b3a68ccc6a8a74135d
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=98456
Date: Fri, 03 Feb 2023 19:45:59 GMT
Etag: "63dc420f-1d7"
Expires: Sat, 04 Feb 2023 23:06:55 GMT
Last-Modified: Thu, 02 Feb 2023 23:06:55 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i_uLYPMMuNpv4x9XjIPR06d0AZQlj9czGWJZJDi93FHhGd7pypCoKA==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 19:07:19 GMT
age: 2321
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4836
Expires: Fri, 03 Feb 2023 21:06:36 GMT
Date: Fri, 03 Feb 2023 19:46:00 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TZKwhOc6+PaVIRKJqJqWHQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Iru7rHazEmEt7c4y1pvzrRdYP+Y=
instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
200 OK 62 kB URL HTTP/2 instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1102)
Hash 8a46d2409fceefa9c3e837296b350fc6
846f8dbe510b7c0b419793e6f9967047756f681f
186cbe259ea99b810b5d4cee0c17e64a1c547f0908b7900ac7d339af0137e685
Analyzer Verdict Alert quad9 Sinkholed
GET /Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 62283
date: Fri, 03 Feb 2023 19:46:00 GMT
x-amzn-requestid: 1183942f-6dd8-4d7d-9b17-3a84a282faa4
referrer-policy: same-origin
x-amzn-remapped-content-length: 62283
x-frame-options: DENY
set-cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; expires=Fri, 02 Feb 2024 19:46:00 GMT; Max-Age=31449600; Path=/; SameSite=Lax; Secure
sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg; expires=Fri, 17 Feb 2023 19:46:00 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure
x-amz-apigw-id: fxyi1HW5IAMFsDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd6478-5dfd851a28b0ad7624a386ee;Sampled=0
vary: Accept-Encoding,Cookie
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VvaFjpRyn1UF8RB0dDtRnvkJH5jpBUFt9tVt-rT7DOSbYHWLsbGFuw==
X-Firefox-Spdy: h2
instructorsclub.com/static/images/logo-instructorsclub.com.png
200 OK 16 kB URL HTTP/2 instructorsclub.com/static/images/logo-instructorsclub.com.png
IP
File type PNG image data, 814 x 167, 8-bit/color RGBA, non-interlaced\012- data
Hash 06f70cf2369450ff80194fe4a76e1c29
c34aed6391e8d077c231df9681b86b8459179f31
9b82661c62e010dbd968d798ac894f3ff63f7d696e2670651aa185c51e16fdbb
Analyzer Verdict Alert quad9 Sinkholed
GET /static/images/logo-instructorsclub.com.png HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 16227
date: Fri, 03 Feb 2023 08:33:54 GMT
last-modified: Wed, 28 Dec 2022 05:00:55 GMT
etag: "06f70cf2369450ff80194fe4a76e1c29"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SvgUq8UTDCVotnG3pYljzuNYHdcQEk1Y8mj2uTOeskIXfPLpf1gsTA==
age: 40327
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:00 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 22654
expires: Wed, 24 Jan 2024 19:46:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A8vZVfwbyvHFPIVTZf2ndv8YoHVTBwOhCpp%2Fj3yYVX6YANAyVIGzEAROhLhq6LrBKcj7o7MciPwN6V%2FaXbcIHYd%2FZSPrUSXuVd%2BRS4LnPkB2jCmm1w4yvuxwBDRHQJp2cQazCWXc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 793dab935a64b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
instructorsclub.com/static/css/owl.theme.default.min.css
200 OK 979 B URL HTTP/2 instructorsclub.com/static/css/owl.theme.default.min.css
IP
File type ASCII text, with CRLF line terminators
Hash d02971c9896ee812787fbcd57d05f039
136833df29235717403da2269b0779e7ec99a634
b1db265f889182687e648b3299d136b200c7c76511c511997843fd2db5e59b8e
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/owl.theme.default.min.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 979
last-modified: Fri, 19 Mar 2021 11:08:23 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 15:41:13 GMT
etag: "d02971c9896ee812787fbcd57d05f039"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lpSGF1rYL7P5Z9q-4c-DfbhI5Z4VrSP6A3ONL68xUfP5giwninymCg==
age: 14688
X-Firefox-Spdy: h2
instructorsclub.com/Speaker_Pics/BobmcKenzie.jpg
200 OK 20 kB URL HTTP/2 instructorsclub.com/Speaker_Pics/BobmcKenzie.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 299x373, components 3\012- data
Hash d634a75e71028f57bac3d664ffbf8777
6e380ff82e31905742c63413964f90de60cac326
a0890f75cd4c4fc0c4759af6f12bd973540f8c041676cba96f57a7d5a87a4271
Analyzer Verdict Alert quad9 Sinkholed
GET /Speaker_Pics/BobmcKenzie.jpg HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 19462
last-modified: Fri, 19 Mar 2021 10:23:14 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 19:46:00 GMT
etag: "d634a75e71028f57bac3d664ffbf8777"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Iw8aOLvMnpCUWhplwcH9VK8tSKVzeH31L5tu7Fi7hfi-ky_yUot28A==
age: 17646
X-Firefox-Spdy: h2
instructorsclub.com/static/js/custom.js
200 OK 116 B URL HTTP/2 instructorsclub.com/static/js/custom.js
IP
File type ASCII text, with CRLF line terminators
Hash 3c96635dff0892717357570c4652484f
b478e18da9a02075aba07fbacf89fdee73d8e738
bef30e48f3e3e40a7f347e6a63f775569a76950fe22bd8cb7bc782ac95d86738
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/custom.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 116
last-modified: Fri, 19 Mar 2021 11:09:00 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 15:13:12 GMT
etag: "3c96635dff0892717357570c4652484f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a07B8CP05FAs8P8VmIx8juBw0V58uSdUHtEfBMAkvOzh-wUTX1urGA==
age: 16369
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 907398d5fb78588b0c610c0d649899e0
dfc0840362757a0f70c5cfc54b76c994912c39be
de8325abe2d1aef1555a0b54a5a4d73d05ef0e14600a0c91136510c46705de20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6547
Cache-Control: max-age=118336
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:00 GMT
Etag: "63dc7625-116"
Expires: Sun, 05 Feb 2023 04:38:16 GMT
Last-Modified: Fri, 03 Feb 2023 02:49:09 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
instructorsclub.com/static/js/jquery.stellar.min.js
200 OK 3.5 kB URL HTTP/2 instructorsclub.com/static/js/jquery.stellar.min.js
IP
File type ASCII text, with very long lines (12453), with CRLF line terminators
Hash eed9af56abfa72ba2269cd2f34c3fc08
4f89ecd0fa023071b72ea6933048c702fffb3691
aba3f56ba637cfee0e68c420751447e756b0b5753707e385a5caca643a978a46
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/jquery.stellar.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:08 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:45 GMT
etag: W/"59ddcbcfee26de19386f1d7e30577ac4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HzcG6VpekymUy8f5KLRsBs-hxo6NNF7sRy0eHKtqE0pHMflvDF7-_Q==
age: 18676
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.4.0/jquery.min.js
200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.4.0/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 2acb91a52609d98e033b92e973500257
4ebcc3ee25749444de6454ee2009fb26a602f6fb
9fdd3f844aa3d86042f0b2f8ef839240ace6d14334b464b77847a5c329272da2
GET /ajax/libs/jquery/3.4.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30768
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 02:06:03 GMT
expires: Sat, 03 Feb 2024 02:06:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 63597
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.4.0/js/bootstrap.min.js
200 OK 11 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.4.0/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (37481)
Hash 309e6fe7a7f0b8ebbed6ee48ea72156d
8ae3e74acc7ad805df47a66f3272e30f0abfdd8c
5f9462e176b875c589e7831cd121bdc34eeb3ece6f5a0bf6da3028b469de46d4
GET /bootstrap/3.4.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:00 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 565, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 2021-06-08 12:48:40
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e0b05ba095a9707b13cc8d7175621831
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 1379312
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 793dab93ebc1b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/js?key=AIzaSyBVWaKrjvy3MaE7SQ74_uJiULgl1JY0H2s&sensor=false
200 OK 53 kB URL HTTP/2 maps.googleapis.com/maps/api/js?key=AIzaSyBVWaKrjvy3MaE7SQ74_uJiULgl1JY0H2s&sensor=false
IP
File type ASCII text, with very long lines (2452)
Hash 370dfca767d7914f1ff721eed386418d
8c9215a6f29be006b782775e00c3329c4ee3c753
5a51da724cf63fbc3d64a2feffd8594111562edb71b7c99d9627e8d894cfe0c5
GET /maps/api/js?key=AIzaSyBVWaKrjvy3MaE7SQ74_uJiULgl1JY0H2s&sensor=false HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Fri, 03 Feb 2023 19:46:00 GMT
expires: Fri, 03 Feb 2023 20:16:00 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53190
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=32
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bbeb609cbf32a8842bf96a124588e65e
40c0f548bcb714731f62df5a27cad21adef0463d
502c60a18a13b84598933731d182aafd4b83576bfc56451b36f9238c621a571d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
instructorsclub.com/static/js/popper.min.js
200 OK 8.0 kB URL HTTP/2 instructorsclub.com/static/js/popper.min.js
IP
File type ASCII text, with very long lines (18860), with CRLF line terminators
Hash e59425ae9d21668571948385ee4bce62
85d3b8de37f81b15150ff2f7fe3fd834f317e0be
10f458a32a7a6c08cb4a300171b690847615e8f2e99cd322780851f8d1ccee46
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/popper.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 03 Feb 2023 12:17:31 GMT
last-modified: Fri, 19 Mar 2021 11:09:15 GMT
etag: W/"b18556921e79d50bc26a3f42f33f1c16"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VjSbFXI9gLM8o4eQB98iEwsMOE3P-Ol_m71srdCQM6JAQ9JHZe1D7w==
age: 26910
X-Firefox-Spdy: h2
instructorsclub.com/static/js/bootstrap-datepicker.js
200 OK 889 kB URL HTTP/2 instructorsclub.com/static/js/bootstrap-datepicker.js
IP
File type ASCII text, with CRLF line terminators
Size 889 kB (888736 bytes)
Hash a7cc0ffe30ae8efa01b607ffb4dd5989
9c9df4631dfa63ea24b92d1df519b624ada7f1f9
5c713dc0899858d2f81912ba322b01161e68c4a42de8f475e91534da76b20d5c
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/bootstrap-datepicker.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 03 Feb 2023 12:17:31 GMT
last-modified: Fri, 19 Mar 2021 11:08:59 GMT
etag: W/"e62d20dac1dea28d15a1b99759b70d43"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Tt8Rkt2eBe_UJ_5-nmqDHRva_Y_vR6lXphcYwwMUuUhjFwHCXnSnKQ==
age: 26910
X-Firefox-Spdy: h2
instructorsclub.com/static/js/jquery.min.js
200 OK 394 kB URL HTTP/2 instructorsclub.com/static/js/jquery.min.js
IP
File type ASCII text, with CRLF line terminators
Size 394 kB (393733 bytes)
Hash 0beaf58f73cb45d15cb7e677cd897594
f012577f6f289a555baebced84656932f855d435
ec78fd5680df7606b143f9670796c21831dce086f8b8478c4f7924742435cf1d
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/jquery.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:07 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:44 GMT
etag: W/"46f163f9a1b8e6eab34a353aecc7225c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zlxnGJuobRu9a46prTbtaw9vUHAiMpCr7raCM36E1qFkJUWe03U0SA==
age: 18677
X-Firefox-Spdy: h2
instructorsclub.com/static/js/jquery.magnific-popup.min.js
200 OK 84 kB URL HTTP/2 instructorsclub.com/static/js/jquery.magnific-popup.min.js
IP
File type ASCII text, with very long lines (20087), with CRLF line terminators
Hash bcc8f7deaa8b6db3f0c0ce8bc0e70a50
d534a2faa86b77d299f6cb2403b86b5712b4b87b
a9b9fb5b8acd64485b95d14b50eeb9f8908e3c9075ea0fb71788eb9a0b2eaff9
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/jquery.magnific-popup.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:06 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 19:46:00 GMT
etag: W/"b37d7edf99565d3858eaa1ad80df3cff"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zrdW-bLv4bPdTbk5QIKqbA9BPdl7jL6SAwHbp8RBJ-8fcFRYPs4QOw==
age: 18676
X-Firefox-Spdy: h2
instructorsclub.com/static/fonts/icomoon/icomoon.ttf?6tt51o
200 OK 307 kB URL HTTP/2 instructorsclub.com/static/fonts/icomoon/icomoon.ttf?6tt51o
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Size 307 kB (307168 bytes)
Hash b774c581ad4d77651ba7e18b16bd248b
a52649ef6c3af5a626e778c501f82ecb79da41ba
ef32dd19b8c1199d54ec6e516c20cddde149424bee616901733c253ec0219719
Analyzer Verdict Alert quad9 Sinkholed
GET /static/fonts/icomoon/icomoon.ttf?6tt51o HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://instructorsclub.com/static/css/icomoon.css
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 307168
date: Fri, 03 Feb 2023 12:17:35 GMT
last-modified: Fri, 19 Mar 2021 11:33:56 GMT
etag: "b774c581ad4d77651ba7e18b16bd248b"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1emMaODSpn1SOwIcfY0zDX9xQBvSqyI027ihfQGCnbL55Ieh6eLDTw==
age: 26907
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Poppins:300,400,500,600,700,800,900
200 OK 1.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Poppins:300,400,500,600,700,800,900
IP
Hash f40c1fe6b5f8d5dee6ed33e58ca67c34
4ed3b3e860467113ef29bf188b8f604f4cb86ddf
5ac264efd53b30893e0e4c206c9d2720debfda0bc37563abb96a13666f6f7085
GET /css?family=Poppins:300,400,500,600,700,800,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 Feb 2023 19:46:00 GMT
date: Fri, 03 Feb 2023 19:46:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
instructorsclub.com/static/js/jquery.animateNumber.min.js
200 OK 1.1 kB URL HTTP/2 instructorsclub.com/static/js/jquery.animateNumber.min.js
IP
File type ASCII text, with very long lines (527), with CRLF line terminators
Hash 91bf7ecae8c0ab2bc47be4f720569b50
3bf281b2a32f5913ba8e7b25cf5d0f4ccf5aebdf
cdccc97763b5ac4130e6f674314e18c61b4f21ee75559a9333428c8f62e83039
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/jquery.animateNumber.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:04 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:45 GMT
etag: W/"82930c1a47267864e1ac9cd5b2772ce7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vE04PrAIM4r8yc5nR8MbGYp42RoV-LkYgqxNWcDX128NAyDvlrbPtQ==
age: 18676
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2
200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35660, version 1.0\012- data
Hash 0d0d3e5824e5e67a9e993960df2b67a9
328d67bb1d5899a7809df9f4385181863fd035f1
38da98e06ba18c4204f547d30572cd81a2dd3fd5438d306856d2617480ee8639
GET /s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://instructorsclub.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 10:14:36 GMT
expires: Thu, 01 Feb 2024 10:14:36 GMT
cache-control: public, max-age=31536000
age: 207085
last-modified: Mon, 15 Aug 2022 18:07:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=a5321db9-241a-4344-b2c0-164de41656a0
200 OK 14 kB URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=a5321db9-241a-4344-b2c0-164de41656a0
IP
File type ASCII text, with very long lines (23416), with no line terminators
Hash b6c9132efccf1f00dde15bfff1e94a73
2efcb21114a2d8260ccbd45d7b6942e5c1297e26
be4f2261249287cc6305c4481ab2f68c4d7686e433f8b76b24c5b549eb128a8a
GET /ekr/snippet.js?key=a5321db9-241a-4344-b2c0-164de41656a0 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:00 GMT
content-type: application/javascript
x-amz-id-2: VYKORFZEK8ncQjbBiiAK6oiTYdRdkzwPfaxRM/jinB20cI8N0LqXAF6x6uRMZJVhRKA1YH5Ltb2qBhbqYLdq5g==
x-amz-request-id: EBZ4ZRD66V3TGNXR
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 46
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ADVm%2Bu2naSueQO%2FAik21AZqPhawW6KQC8ST7jPV2SXUqREd%2BNudzytJP81UQ42mMLRjgWc8w3CUVQebgl3doKFc5hUWpOtzyHuurOon%2FRk1UbhnWL8jX60To1tbwGQrTjfqd1Z0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 793dab93fac3b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://instructorsclub.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 04:05:29 GMT
expires: Tue, 30 Jan 2024 04:05:29 GMT
cache-control: public, max-age=31536000
age: 402032
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
200 OK 7.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://instructorsclub.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 14:34:21 GMT
expires: Fri, 02 Feb 2024 14:34:21 GMT
cache-control: public, max-age=31536000
age: 105100
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
instructorsclub.com/static/js/init.js
200 OK 9.5 kB URL HTTP/2 instructorsclub.com/static/js/init.js
IP
File type ASCII text, with CRLF line terminators
Hash 095f4bf563432815668d727e766c2744
fbf07b4e6a6cb1ca14a34e042a63ae319ed2777b
8b4dfc67a261d184032a960eca0b58d8994d7e686c5bbc575b9380d3b05e5f56
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/init.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:03 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:45 GMT
etag: W/"3a800670f0588410842a4d61148f164a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QamRHU3TE8YvRibzB8y7TujH8eNKOM_MLpoYV0nmHyMwASmuyxYsWA==
age: 18676
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0c24f5c681ace1caa6660d40ba545b35
ff72147d9c39cfcfbd69f85fcf8782c5490eaf23
282fa45a79ea3322cde6ad994ab38fbae47cb6a7aceff3b741a80e482169523f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=162911
Date: Fri, 03 Feb 2023 19:46:01 GMT
Etag: "63dd3dd8-1d7"
Expires: Sun, 05 Feb 2023 17:01:12 GMT
Last-Modified: Fri, 03 Feb 2023 17:01:12 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: X6n1YdHA1sUcGrZpzkIs6Bkbg-Xp5ZUHoyDXedb3dd7uKk1GF9wQ-w==
instructorsclub.com/static/js/jquery-migrate-3.0.1.min.js
200 OK 584 kB URL HTTP/2 instructorsclub.com/static/js/jquery-migrate-3.0.1.min.js
IP
File type ASCII text, with CRLF line terminators
Size 584 kB (584393 bytes)
Hash de764bf65de1549b5dba00df3406ab7e
f2d45b03d7c45312b036a70182242fe3f6996572
b4e7bc544bfceecb31bfe5c02185f5f642ac95c9afdb1ce5108482f1dba9af1b
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/jquery-migrate-3.0.1.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:11 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:44 GMT
etag: W/"474307d4a053c7311a45b7cf2deff74d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IGqRfFV6KuUzahhjicQiZzFD3g9yv1SI1uv330kSQT51RrhPKQGHPw==
age: 18676
X-Firefox-Spdy: h2
instructorsclub.com/static/js/jquery.timepicker.min.js
403 Forbidden 970 B URL HTTP/2 instructorsclub.com/static/js/jquery.timepicker.min.js
IP
Hash ca7b2632233ff171dbad50a303dc424c
f97193525fd780c06171685175d9dd480144f15f
d6f5c936b959ba105faea13e7b18185175e51c70645d126b06e964dde33c5e17
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/jquery.timepicker.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 03 Feb 2023 19:46:00 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZNKTRtzMHFyKXWbmJ6E_2p-nGDCBNUEoeMhZO_hnnEc2RD-wdUEW9Q==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10647
Expires: Fri, 03 Feb 2023 22:43:28 GMT
Date: Fri, 03 Feb 2023 19:46:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10647
Expires: Fri, 03 Feb 2023 22:43:28 GMT
Date: Fri, 03 Feb 2023 19:46:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7652
Expires: Fri, 03 Feb 2023 21:53:33 GMT
Date: Fri, 03 Feb 2023 19:46:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10647
Expires: Fri, 03 Feb 2023 22:43:28 GMT
Date: Fri, 03 Feb 2023 19:46:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf80667db0c35c9c6139eca4ba5d12fd
4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590
d63e69f4b6ea16333d242bf33d4f02a4a6c96a739ca018d86afc5741d85b774d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13065
x-amzn-requestid: 20c6f462-0f1f-44d1-9b6b-6afbc4e79e8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpYpcELtIAMFvFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da07d5-44cd803c0feba28919b0a9ec;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 06:33:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T3PhGRcHX1X2hn8K_4587fXBrEyuY5Em-b9Jg41uH4uyQXeFoRBIYg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:56 GMT
age: 79145
etag: "4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:48:01 GMT
age: 79080
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3490571dd2de0a747987b9a0e18cccc8
18e9f8f160d3515f1cb31fc7538ac762a6cab344
1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XTZJAn0LMAfFtaQ2bN8z58cCsUT5GzxDMnHVB_iw9E_NskHQ-BgbRQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:19:26 GMT
age: 84437
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 114e345e134986d7451148fcea31b29d
541e878afee68c8802bb52b0cbbe5a5a0a185392
5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: 6a1fd567-b34d-4787-aa05-5b7db3fc51c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fflRBHU4IAMFnsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61c06-2d1ec3206d2ebeb4780a84b4;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:11:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUloQ6xaRWpnvMRh7kFvFIWhFotmILLZHfD_YK01RmrQ2vmYKVh46w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 03:08:32 GMT
age: 59849
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d4041f3b5316bc84c9e6d88ddbc85b89
4978a4a20836b6f5d863d331bcedad782b7b4ac6
549b62d2c4ec965b8bec62010c0ce338dfea7992ee83eb7af61ff1a30d21f8b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5641
x-amzn-requestid: b53b54b1-3b00-47cf-a25c-e93910c2ebfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzpHsXoAMFsuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce3-0c4fc8154763febb44460ac2;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x4-BZdG4JGRKCSdKynnuweZfo9l0XZtDB-MiANy7C2Yz1URYMHP4sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:57:49 GMT
age: 78492
etag: "4978a4a20836b6f5d863d331bcedad782b7b4ac6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a6aaf87a867f93dc9268a8b27973b97
f52ccbe6cbced1994acb13a00b05436553b6813e
3fbd7441712035f4d53c17eec93bc278e6c072043f3b5a721cac349fc0dabe77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fedd456a0-d42f-4b40-ad63-ea1dcfaf69eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10166
x-amzn-requestid: 54fe0d12-360f-4d97-bcf3-b24747d956aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_4zHEcoAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379d1-4ba89e44005f616a0ed3ed24;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:14:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hSyEfSDToqgfnFIW68Krz-ANYUNQoUPWhyb-8xDUarI6mnVLXriHDQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:59:54 GMT
age: 78367
etag: "f52ccbe6cbced1994acb13a00b05436553b6813e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
instructorsclub.com/Speaker_Pics/favicon-instructorsclub.com.png
200 OK 1.0 kB URL HTTP/2 instructorsclub.com/Speaker_Pics/favicon-instructorsclub.com.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash dcb379d4a33821a3392fb83ee4dcbfc2
bbb704fce7ce405421bba9ed0f1429f94ed6fddf
a5d043f153c1372943121c72d288d1aeb81b71e6ca7e2abecd70bf5c2f53759d
Analyzer Verdict Alert quad9 Sinkholed
GET /Speaker_Pics/favicon-instructorsclub.com.png HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1007
last-modified: Tue, 20 Dec 2022 11:45:02 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 15:21:40 GMT
etag: "dcb379d4a33821a3392fb83ee4dcbfc2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M2hV_S6nTtDdwGn2P-QZAV51-VGJvO8HFSZ90ED4i1ouJNzrcLHDjQ==
age: 15862
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
200 OK 23 B URL HTTP/2 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
File type JSON data\012- , ASCII text
Hash e3981ca10169a319d5aa062bf43a5fa1
2c6ed584767b65688ce99b1ebe1a3b7448a67421
8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://instructorsclub.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 03 Feb 2023 19:46:01 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://instructorsclub.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 1ae1f434a333e55f1e2956ab5c0483ca
8038b024d646748511a212dbac57d1f072f81576
49c3f6462d2858b0e77cf17670f03fa0a0104c33d52cb8cef72daf6238b037dc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 03 Feb 2023 19:46:02 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 05:57:17 GMT
Expires: Wed, 08 Feb 2023 05:57:16 GMT
Etag: "8038b024d646748511a212dbac57d1f072f81576"
Cache-Control: max-age=381673,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793dab9bbe820b49-OSL
instructorsclub.com/static/fonts/ionicons/fonts/ionicons.woff2?v=4.0.0-19
403 Forbidden 533 B URL HTTP/2 instructorsclub.com/static/fonts/ionicons/fonts/ionicons.woff2?v=4.0.0-19
IP
Hash cab4c6efe41e57990c6cfbb8cedb741f
3c977673b67a58690e41630fca2bfc8327a5e1b2
1c89ba8c1a7555f9f1271959c8d9319bb38ad3b8ae2ef297dd77767b65f4a8c1
Analyzer Verdict Alert quad9 Sinkholed
GET /static/fonts/ionicons/fonts/ionicons.woff2?v=4.0.0-19 HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://instructorsclub.com/static/css/ionicons.min.css
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 03 Feb 2023 19:46:01 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sr7LAPAllW7LnpHqqOasTU-c6nl6mhoVKw-0C6C9g1znr-wsycvrzw==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 72b0a8069a25c93e3ddc6fb1f4fa9d97
434912ecc784d7f53c98a4fb3b58d1ed1c748293
7f5aa1e3b19bb7015fc7c6d17783bc4af377ab98bfffaf24949e2911a0aac276
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 19:46:02 GMT
Etag: "63dc8596-116"
Server: ECS (amb/6B88)
Content-Length: 278
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ed31425d6e6bede1e7d316b969c7186a
00518d869c33322c1d262bc6300a4b731848ff0b
ab29a92e76ed593c517f657148cdd106bfdbea7b167486df0dd4ad00981a9fdb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167313
Date: Fri, 03 Feb 2023 19:46:03 GMT
Etag: "63dd4216-1d7"
Expires: Sun, 05 Feb 2023 18:14:36 GMT
Last-Modified: Fri, 03 Feb 2023 17:19:18 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wxtUzaHiOsy4Q_mdnu1Ga4skM7w1oJL98LvJSxoonSEtk3O0URj22g==
Age: 3318
widget-mediator.zopim.com/s/W/ws/P6oVZgnkt8bYgxpD/c/1675453595498
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/P6oVZgnkt8bYgxpD/c/1675453595498
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/P6oVZgnkt8bYgxpD/c/1675453595498 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://instructorsclub.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vHenBFAn6feNzaBNIITP+Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 03 Feb 2023 19:46:03 GMT
Connection: upgrade
Set-Cookie: AWSALB=MHdFlU372Yt3VdlKw2NegZTLhKrPuMd6umS1xvuuMQgvDEHsjU3mhbxP+WV8XpgvUrDS+sYqtGYJQPX876PyODb6IUm55InsMfUmrdYdAHxAK0BDaz+rP8g+Flvc; Expires=Fri, 10 Feb 2023 19:46:03 GMT; Path=/
AWSALBCORS=MHdFlU372Yt3VdlKw2NegZTLhKrPuMd6umS1xvuuMQgvDEHsjU3mhbxP+WV8XpgvUrDS+sYqtGYJQPX876PyODb6IUm55InsMfUmrdYdAHxAK0BDaz+rP8g+Flvc; Expires=Fri, 10 Feb 2023 19:46:03 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: hn8T0QR0qPpbfEqiiPnkU5jJgcw=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
instructorsclub.com/static/js/main.js
200 OK 22 kB URL HTTP/2 instructorsclub.com/static/js/main.js
IP
File type ASCII text, with CRLF line terminators
Hash f3131ddb7c7b60f2b4f091e9859eb057
e8dab119c6a71c1306ac6ad0065472313bf82462
a639e6fba4c93fd56b0b7a803504695c2e2e36979ea84e994b337fbc0bcc0fed
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/main.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:11 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 19:46:00 GMT
etag: W/"13f95a8158089505b135d4c3460002a1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l58dIyvf8gIm1T_jTwQDbrHIW4hGFyIAHnN2B_onKfBwx05s27s3wQ==
age: 18676
X-Firefox-Spdy: h2
247kompliance.zendesk.com/embeddable_blip?type=userAction&data=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
200 OK 0 B URL HTTP/2 247kompliance.zendesk.com/embeddable_blip?type=userAction&data=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embeddable_blip?type=userAction&data=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 HTTP/1.1
Host: 247kompliance.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/
Origin: https://instructorsclub.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:04 GMT
content-length: 0
access-control-allow-origin: *
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
x-request-id: 793daba76c881c0a-ARN
last-modified: Fri, 03 Feb 2023 19:46:04 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n5X%2BcyEyR7crPuO9VJpDTAHbBg8SrqeCqJk%2FKqfe3guCR%2FrkQsT7QPChXEK0%2FnZtgf72RkEUxz9xEXu9hpbG%2FkHoiDwe4Hiu%2FQoq4w3WhOrLc1TIcCWJefWJaZuJqEQDcx6JMDMVNrrvXFw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=81ec3be850fdc1535ad6201a49b25171680df3d2-1675453564; path=/; domain=.247kompliance.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 793daba76c881c0a-OSL
X-Firefox-Spdy: h2
instructorsclub.com/static/js/plugins.js
200 OK 106 kB URL HTTP/2 instructorsclub.com/static/js/plugins.js
IP
File type HTML document, ASCII text, with very long lines (15714), with CRLF line terminators
Size 106 kB (105747 bytes)
Hash 5f7276bc62626231199efacce8bb40c5
4c154c4ad1ea9c3871fc763d4e736806476a6483
1b41169590fc8652c96b6bb5870b50fbc6ff593a99f9a802642d431d5215dcf8
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/plugins.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:14 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:45 GMT
etag: W/"9f5b2324efdd2e2a0d81004db2b69d4f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iuWIaAbyDjjgwi4xJJIY4QhsQ_CePoXYpcqfH2yFdfTw7Q9xKs4J8Q==
age: 18676
X-Firefox-Spdy: h2
instructorsclub.com/static/css/flaticon.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/flaticon.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/flaticon.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:15 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"6703677c9c54449eb4a7b798a3b1885e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6CXrdR2IF_ZjoSa7ofKVFNmUjpX0yiz-JLbyPyvhzBYHH1EarQqWSQ==
age: 18678
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lora:400,400i,700,700i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lora:400,400i,700,700i
IP
GET /css?family=Lora:400,400i,700,700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 03 Feb 2023 19:46:00 GMT
date: Fri, 03 Feb 2023 19:46:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js
IP
GET /web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:01 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: ndff87uIS/sesGzUKeSADcGds13tZiq25CUrjWZEdXa2jMUAkmL2pmb5JKzj+ohOz6faFpkS9ww=
x-amz-request-id: MJRJ9ZGS34G4N411
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:09:01 GMT
etag: W/"5c97db2a2d29c595e26430d1c8358d6a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:09:00 GMT
x-amz-version-id: 1cCOlxhNqu17ys_QySYbf1YbpGnPAUXV
cf-cache-status: HIT
age: 223389
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y22JylrMSa574HmpfE6%2BsPlTlCp%2BJ3DgYEVxLoxhpNBRpz30Q8eGEDHVoZSgz5cYLhnPSVPVr0TJuGHktWL6UhH%2Bb66o%2BNPzimrYMioge7PVqq28DPbSlxlpbSmyc2ZAaRnwHzo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 793dab9a3c10b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
instructorsclub.com/static/css/ionicons.min.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/ionicons.min.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/ionicons.min.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:18 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 03 Feb 2023 15:41:13 GMT
etag: W/"8671f019bd4546c5885504db8407eae0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I09YSI_NFJvX0bTlq-yhoQWUdqoikHzeFLItk_dFZMMoI4U_Leps3g==
age: 14688
X-Firefox-Spdy: h2
instructorsclub.com/static/css/bootstrap-datepicker.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/bootstrap-datepicker.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/bootstrap-datepicker.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:12 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"0ea6fe2ea4b0292d60df07ae8dd06069"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hCQvefjXhb6kamlZGd-uPIcllP3foQxV76f1qSx3JP1PrgrXNx0qfw==
age: 18678
X-Firefox-Spdy: h2
instructorsclub.com/static/css/owl.carousel.min.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/owl.carousel.min.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/owl.carousel.min.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:22 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"77c7d9d8cdcc39524de140cc8d8a682b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wRz28bfc1EdpfdgvzbK_tpcEINCo2RnjgGXUA7-xPNZB6usDcfx-HQ==
age: 18678
X-Firefox-Spdy: h2
instructorsclub.com/static/css/style.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/style.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/style.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:27 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"19896fdfaf53c1c60be175c35589a329"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AmLaauCrUpPUTQpv30ekB-EsWI20TgmXtm7Q9bCGX1gmECjbbrA68w==
age: 18677
X-Firefox-Spdy: h2
instructorsclub.com/static/js/jquery.easing.1.3.js
200 OK 0 B URL HTTP/2 instructorsclub.com/static/js/jquery.easing.1.3.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/jquery.easing.1.3.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:05 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 03 Feb 2023 19:46:00 GMT
etag: W/"58e2e6f6637b632b908313d74ba26147"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1cHKvYTafMejqWwFR0Eg-Yd2IffEP_pc52wbG0fP7bRsfAeXTkRbig==
age: 18676
X-Firefox-Spdy: h2
instructorsclub.com/static/js/google-map.js
200 OK 0 B URL HTTP/2 instructorsclub.com/static/js/google-map.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/google-map.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:01 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 03 Feb 2023 19:46:00 GMT
etag: W/"2c91fb616597430d6df76de1f36fc592"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rkSuBVgTxCbnREFY_ge3EI8esjXCsJOS9hVyDzWfTBoOgkZBHrAzZQ==
age: 26910
X-Firefox-Spdy: h2
instructorsclub.com/static/fonts/ionicons/fonts/ionicons.ttf?v=4.0.0-19
403 Forbidden 0 B URL HTTP/2 instructorsclub.com/static/fonts/ionicons/fonts/ionicons.ttf?v=4.0.0-19
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/fonts/ionicons/fonts/ionicons.ttf?v=4.0.0-19 HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://instructorsclub.com/static/css/ionicons.min.css
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg; _gauges_cookie=1; _gauges_unique_hour=1; _gauges_unique_day=1; _gauges_unique_month=1; _gauges_unique_year=1; _gauges_unique=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 03 Feb 2023 19:46:01 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: W54iE_5za-pru4FQH5TiNQI5WneJO-gFhosTljHvejI2cpN3Ydnk-A==
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-34c91d3.js
IP
GET /web_widget/latest/classic/web-widget-chat-sdk-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:03 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 5Q2KsWrkmrWTiYVRLyXyCI/rMs3+B9hjg0s80kwkbyjooUCh5ERMvYHuuJOp3Lj7ZZLHDIYGSG0=
x-amz-request-id: 8SCA84J1BTNRMEF1
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"d366c0776c2bacba354d40e564c3d3e6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: 7IG5ZMdUlemQ4ejtzcD59BhvR7ULO8qs
cf-cache-status: HIT
age: 223389
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4EAwLZl7L6WGXoUBjOwnrG%2BiaM0HufkKDkj5Q5YQsK%2BDIwhxxRvdjrdXMXN94dKsx3xsVDUZbgZb6ujrb5a7R72D2qNjE3H311B4ln5N9cS33eZMHqAoDbuGQ0lnTKGZI9opsc4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 793daba1be23b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
instructorsclub.com/static/css/magnific-popup.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/magnific-popup.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/magnific-popup.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:20 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"ad910fc01ceb1e494a5cbebf142128be"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Zfd9ulXDamGWrTf6I3Dv_MitsIfNcHpEEfZvAolnRHLTnReS86QFxA==
age: 18678
X-Firefox-Spdy: h2
instructorsclub.com/static/css/icomoon.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/icomoon.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/icomoon.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:17 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"df4328d5e19727846242fac4e4167890"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rzkmf_EUn8zrj0MJxnsRMySC2HZKgnXXi-9mI0KL3krcBQHwt090nw==
age: 18678
X-Firefox-Spdy: h2
d2fuc4clr7gvcn.cloudfront.net/track.js
200 OK 0 B URL HTTP/2 d2fuc4clr7gvcn.cloudfront.net/track.js
IP
GET /track.js HTTP/1.1
Host: d2fuc4clr7gvcn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 16 Aug 2022 10:33:40 GMT
server: nginx/1.10.3 (Ubuntu)
content-encoding: gzip
date: Fri, 03 Feb 2023 14:07:34 GMT
etag: W/"62fb7284-ef5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PwOTaf4FEzlw9jrtZ4CgEwLcPCUHlu8wQgCZR5HMmtHKno3J4t1zYA==
age: 20354
X-Firefox-Spdy: h2
instructorsclub.com/static/js/jquery.waypoints.min.js
200 OK 0 B URL HTTP/2 instructorsclub.com/static/js/jquery.waypoints.min.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/jquery.waypoints.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:09 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 03 Feb 2023 19:46:00 GMT
etag: W/"c95f2ff58abef8c93bc54945a2f71b79"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MEyfY5LPwhg3QWof5jqBoxE6Z3AeSpHRr3Iwa11y0pFBwzkn-SWPLg==
age: 26910
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-5324-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-5324-34c91d3.js
IP
GET /web_widget/latest/classic/web-widget-5324-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:02 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: kNKtAh5j74VCRQUuSSi1H7gGWEBas+ZMho2E/NRakx2x+qN+2EvUVBkNbiaB2bdjibN4Eb3GEbg=
x-amz-request-id: 8SC131HFWH6HSGCE
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"e40ffe6686756f7ae653217693dadaac"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: 6AuBmSIJ32qDXiB1mw4Drv9aAUt8ZDjH
cf-cache-status: HIT
age: 223389
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VzkOf4Pi%2FQmFHcN06juZ0xoih40HO40jvq4xsg9Fm72lwh03gVE%2BTnDuaYvlc5Lb9EWlFPuPhDQjyCnBfzUWf3S41nWOUFY7i9i4JdMgc6RH%2BvzpxZM8noqknPt7%2Fa%2BxzJah03o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 793dab9ffba8b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-34c91d3.js
IP
GET /web_widget/latest/classic/web-widget-chat-incoming-message-notification-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:03 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: cJPl58f1Z/0sqIdUecCLv4quM2PK+wq3pTKGh7joMMBk9lLWnDUnJx2V9E5xs0ZBmxG5+X67qmQiDkGQA6Ym8Q==
x-amz-request-id: 8SC6VZS6VZW7TZQH
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"659635f5ad1b6653645380f46aa42236"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: xcNPO7Jko.vSxuLt0DB2ypeRYH_2idj5
cf-cache-status: HIT
age: 223388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8WXdE3tJPUJTMX44yp%2Fh3MobXfBOHt3ngZVj62QUFXAuNFbl8i%2BauS306BY7mFZQb1v5brtIKg8nVBZNVHkNh%2B9WJlBkFa%2F9Qw%2FPx96Za9fKVXvoYqLx04TLazSBKo8eMP5phQE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 793daba6ed3cb4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
instructorsclub.com/static/css/animate.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/animate.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/animate.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:06 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"007e77187af13590474929adffa3891e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LM4ll7LHHD8DW-g7nOWNySY98djFNOimyT_kT0OAm3DPC8di8SC2Kw==
age: 18678
X-Firefox-Spdy: h2
instructorsclub.com/static/css/open-iconic-bootstrap.min.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/open-iconic-bootstrap.min.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/open-iconic-bootstrap.min.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Fri, 03 Feb 2023 12:17:31 GMT
last-modified: Fri, 19 Mar 2021 11:08:21 GMT
etag: W/"65185bcf7f0ffb9505da7d345285f3b5"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -xFMI-gGMn4atmtE71i4OfavomiRUolEiII-jznRxC9Ex3crysWaAw==
age: 26910
X-Firefox-Spdy: h2
instructorsclub.com/static/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 instructorsclub.com/static/js/bootstrap.min.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/bootstrap.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:08:58 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 19:46:00 GMT
etag: W/"0ccfdfcd224206675f95abd9fdd3fd20"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZSFOKT3Dkasu0X7K_3gxhpf2fd0RwgMyfPoDQbtXHGHfCP665Aa4ig==
age: 16369
X-Firefox-Spdy: h2
instructorsclub.com/static/css/carousel.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/carousel.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/carousel.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:14 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:44 GMT
etag: W/"9f16aad9731dd87a1f544bc5c7455be2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P2VSXigLr42tVBFmKz3yPjWAH8BPeiM4m2yCG6RwoO-iaaxVaXu_Iw==
age: 18677
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-8165-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-8165-34c91d3.js
IP
GET /web_widget/latest/classic/web-widget-8165-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:02 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: fchTH8ZKP5XzJ9X5tMP8Gb0FrLmWduzX+toUb4CYjGPL2cSNUiJ5dwSXuHr879IrNtt8Or/pLvv3dgxnRitbqg==
x-amz-request-id: 8SCCQPT6TR1YFJ84
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"d519ea27f763cb6ec80aeec5b45213a7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: tYOSfzpt5WjSOWaRj9efQMLiLa0r_8B0
cf-cache-status: HIT
age: 223389
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Emb5hOm6dE4EeGmGTyWjJVjaRSNf0jf0%2FUJmFIbeVIGGwuWrECbmux72uPcoTal0xDO5rQIWpZ%2BHK3eXtFaFOvLbhFLc14jNZG%2FFBsIKU8cXWfhszW0ITsBmxj9L4TIPAdhrJxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 793dab9feba3b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
instructorsclub.com/static/css/custom.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/custom.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/custom.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 20 Jan 2022 09:19:50 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:44 GMT
etag: W/"b7ac500d2017f0e40aa310ffb593338d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: guQ-3lZqzqqBkJwxSHCCirUBiAMO2j1rnhSMNHg-DzNeMVCSkN3ECg==
age: 18677
X-Firefox-Spdy: h2
instructorsclub.com/static/css/jquery.timepicker.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/jquery.timepicker.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/jquery.timepicker.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:19 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"54dacb37db829edfd9aba4e9f43bee43"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Mu8rVvmpe3FLTx4sLELBlgvURh-HTxfSNynDvJSzd0N4BUEZ4sXQ5w==
age: 18678
X-Firefox-Spdy: h2
instructorsclub.com/static/js/aos.js
200 OK 0 B URL HTTP/2 instructorsclub.com/static/js/aos.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/aos.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:08:57 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:45 GMT
etag: W/"8da7cc78ec19577fcc43175a53325cc0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wOCnT_M3IKKkaVZwpthiMUqVnaj3zICld2y16ua_sxpLbZ0aVv9MyA==
age: 18676
X-Firefox-Spdy: h2
instructorsclub.com/static/js/scrollax.min.js
200 OK 0 B URL HTTP/2 instructorsclub.com/static/js/scrollax.min.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/scrollax.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:17 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:45 GMT
etag: W/"b130d601e057acb4a4554f9db56e37a6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CDK3Ibw5-lsErEgBAB42KJ1TyWQAGF0fXH32qsb5okG8MijsArm1rA==
age: 18676
X-Firefox-Spdy: h2
instructorsclub.com/static/css/aos.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/aos.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/aos.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:08 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"43a2192a6a0b176abd7421cef8f4d908"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yFRfL5_EANbg7ZK7qdjF6shEWjnb5vzEzZ3UTsI6a_a2cWKO-jfu_Q==
age: 18678
X-Firefox-Spdy: h2
instructorsclub.com/static/js/owl.carousel.min.js
200 OK 0 B URL HTTP/2 instructorsclub.com/static/js/owl.carousel.min.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/owl.carousel.min.js HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 19 Mar 2021 11:09:14 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 19:46:00 GMT
etag: W/"ee1ebaca259acec33c3502071ee2f04b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BqCGV58xsli8iar7URy18iAfQteCP5tkxxQ5UyHHUlEwSAN0PSNE_w==
age: 18676
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-classic-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-classic-34c91d3.js
IP
GET /web_widget/latest/classic/web-widget-classic-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:02 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: kwxnrMDAE2r6YquTGTlAdKfKtQG/7dWE5cJPvgDhHS+XGag1ZsHCTbZEZXicdYtLe6lTJ9avRzo=
x-amz-request-id: 8SCAGBA7V7VV612T
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:11:44 GMT
etag: W/"9f439f16bdd7a42b3da820fde4e96890"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:11:43 GMT
x-amz-version-id: XHJDUaBKxE89UxJh6.a92Af8FUc8mhAA
cf-cache-status: HIT
age: 223389
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jc437ju23nXNKtq7yTGwLJhYs23fXLakM0uszoCUux4TD7ORH9U8NrDspmVcSqcPxguvLUvE%2F8g9QgwmSu9e9w%2F4fjGPwg75RXK4VZUq4IXW774KaAKgpHJBzJ5S9l8uSwVJwZU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 793dab9fdb7fb4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
instructorsclub.com/static/css/home.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/home.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/home.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:16 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 14:34:43 GMT
etag: W/"512f5378e2a2b8894028ae5ac4f2bd6e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KN-d8V9YtZ9GO2JPlu0Y3QW5O1_WqMVSrrDgDi1HQVmu-Yg7ydEl2w==
age: 18677
X-Firefox-Spdy: h2
instructorsclub.com/static/css/responsive.css
200 OK 0 B URL HTTP/2 instructorsclub.com/static/css/responsive.css
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/responsive.css HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/Triple-Whammy-Dealing-FMLA-ADAAA-Workers-Compensation/894?through=Albert03rdFebS
Connection: keep-alive
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 19 Mar 2021 11:08:25 GMT
server: AmazonS3
content-encoding: br
date: Fri, 03 Feb 2023 19:46:00 GMT
etag: W/"e36935a308faa0f3037416dc2f931cc9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -4EhyjC3yBVH_s92TGU0-5d9b-hpq9uBFU1-pXwcijbaYTQ6xjZOyw==
age: 18677
X-Firefox-Spdy: h2
247kompliance.zendesk.com/embeddable/config
200 OK 0 B URL HTTP/2 247kompliance.zendesk.com/embeddable/config
IP
GET /embeddable/config HTTP/1.1
Host: 247kompliance.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instructorsclub.com/
Origin: https://instructorsclub.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 19:46:02 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-56d68c947b-hwtf5
x-request-id: 793dab9e2cea1c0a-ARN
x-runtime: 0.001755
vary: Origin, Accept-Encoding
x-cached: MISS
last-modified: Fri, 03 Feb 2023 17:49:38 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kV5a8Yqob7N%2FT4t67G2gqPLH2Id3rvc8SUeGD5VqoB6TCdeE3DNzxCrE7oTDehp86yqAwRxL9L7M9v%2FtX8Wvjemp2lOs2z%2FZY1TGZESdgHuOwdwg6w0hPHA81VfBBG3rMz6xA37I7%2BE2Wlk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=8614b717f1e24951a6a72c85b957af318142ffe6-1675453562; path=/; domain=.247kompliance.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 793dab9e2cea1c0a-OSL
content-encoding: br
X-Firefox-Spdy: h2
instructorsclub.com/static/images/bg5.jpg
200 OK 0 B URL HTTP/2 instructorsclub.com/static/images/bg5.jpg
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /static/images/bg5.jpg HTTP/1.1
Host: instructorsclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://instructorsclub.com/static/css/style.css
Cookie: csrftoken=YQX83QMVyURvagkTBW0oSFk9w1CrABIFqmhueX4W9tpsfRdfytcgjdOlCaXtfxu0; sessionid=uqvmwbyvzrpkixd710zj78kjepjnazjg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 215434
date: Thu, 02 Feb 2023 22:36:32 GMT
last-modified: Fri, 19 Mar 2021 11:10:34 GMT
etag: "3ea030df656e0fde795a2ef369a1448a"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Evla8Jp0gTNIJ0M9wMsxvu1TCtFtMAed_TYKllm23bo2i2Mu-n9F7g==
age: 76170
X-Firefox-Spdy: h2
54.230.111.36
104.18.10.207
93.184.220.29
23.36.77.32
18.196.171.163