| www.nueducation.xyz/p/nu-suggestions.html?m=1 |  142.250.74.147 | 200 OK | 43 kB |
URL User Request GET HTTP/2www.nueducation.xyz/p/nu-suggestions.html?m=1 IP142.250.74.147:443
CertificateIssuerGoogle Trust Services Subjectwww.nueducation.xyz Fingerprint07:8F:50:2C:DD:7E:D7:7D:95:85:F4:12:06:CC:D9:5B:45:3C:DF:B1 ValidityMon, 04 Nov 2024 09:38:17 GMT - Sun, 02 Feb 2025 10:29:30 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1528) Hash410804e48c98c791fddcde14a5c91f76 642f94b89a28fcca3ebd9cd0cd9dfec908ff489e ff100137dc734cd409042f89e38d0c50f896148ba166fb2d2d2ef4b6eb7c17e6
GET /p/nu-suggestions.html?m=1 HTTP/1.1
Host: www.nueducation.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Mon, 23 Dec 2024 11:36:49 GMT
date: Mon, 23 Dec 2024 11:36:49 GMT
cache-control: private, max-age=0
last-modified: Mon, 23 Dec 2024 02:14:10 GMT
etag: W/"d3b0a358e1bc66e49116497315f3bb3c4b32bb250a7397df46952ef7ddb153af"
x-robots-tag: all,noodp
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 42870
server: GSE
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/fontawesome.min.css |  104.17.25.14 | 200 OK | 10 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/fontawesome.min.css IP104.17.25.14:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint64:3F:50:40:E0:BD:89:CB:A9:C8:BE:E5:74:F6:9E:D6:2E:1A:32:02 ValidityTue, 26 Nov 2024 07:25:18 GMT - Mon, 24 Feb 2025 07:25:17 GMT
File typeASCII text, with very long lines (57726) Hasheeb705d0bdccfd645d3bbd46dd1fbab3 066def290f42ed8c00860e573cc880bd46e9ced4 d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9
GET /ajax/libs/font-awesome/5.15.3/css/fontawesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:49 GMT
content-type: text/css; charset=utf-8
content-length: 10255
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6599bda7-280f"
last-modified: Sat, 06 Jan 2024 21:52:55 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 408491
expires: Sat, 13 Dec 2025 11:36:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7d5lWBnOE8vWwN53y6CulPSGzmrQB7jAzjYJc%2BdiBuhoNhfVj1ejad2jwBxwYo4Uaj1codFNx6h17dljnzP4k%2B6ok8beG%2F6AU4uA7IrTCrqYrhil6DMRZbW9ZpZfngQQOLAAuY6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8f680e5eefd95695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.nueducation.xyz/js/cookienotice.js | 142.250.74.147 | 200 OK | 2.0 kB |
URL GET HTTP/2www.nueducation.xyz/js/cookienotice.js IP142.250.74.147:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectwww.nueducation.xyz Fingerprint07:8F:50:2C:DD:7E:D7:7D:95:85:F4:12:06:CC:D9:5B:45:3C:DF:B1 ValidityMon, 04 Nov 2024 09:38:17 GMT - Sun, 02 Feb 2025 10:29:30 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: www.nueducation.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/p/nu-suggestions.html?m=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Mon, 23 Dec 2024 11:36:49 GMT
expires: Mon, 30 Dec 2024 11:36:49 GMT
cache-control: public, max-age=604800
last-modified: Mon, 23 Dec 2024 08:53:15 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js | 104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP104.17.25.14:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint64:3F:50:40:E0:BD:89:CB:A9:C8:BE:E5:74:F6:9E:D6:2E:1A:32:02 ValidityTue, 26 Nov 2024 07:25:18 GMT - Mon, 24 Feb 2025 07:25:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 294588
expires: Sat, 13 Dec 2025 11:36:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iUzW4jpeFP6ow9tvBhWiO1grcbmL%2B2jTnNtWlttPbCU86RbTXTabT9wO4xX244brqWJ%2FnhMFNtywAg8P%2BuuhlPbyJCcV753nWP3Qg1MgKBeunHJIrKrDRcbD%2F9hI3g5lOI4nJn2s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8f680e5f0ffd5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/745881458-widgets.js | 142.250.74.105 | 200 OK | 52 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/745881458-widgets.js IP142.250.74.105:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint8A:84:60:EE:5D:E0:EB:62:4D:DC:5B:51:04:04:56:4D:76:91:61:DF ValidityMon, 02 Dec 2024 08:35:43 GMT - Mon, 24 Feb 2025 08:35:42 GMT
File typeJavaScript source, ASCII text, with very long lines (4137) Hash21afe8dd5d43471eab3ba7986549e8fe 18fc609af5487bd533d39a4f108104f8a3c1d6dc 2ba46c41d654590985b65a31fbc5f594e6accac3f2811d987f4e12f79fd59213
GET /static/v1/widgets/745881458-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51983
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Dec 2024 01:50:44 GMT
expires: Fri, 19 Dec 2025 01:50:44 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 19 Dec 2024 00:55:39 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 380765
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| resources.blogblog.com/img/blank.gif | 216.58.207.233 | 200 OK | 43 B |
URL GET HTTP/2resources.blogblog.com/img/blank.gif IP216.58.207.233:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint8A:84:60:EE:5D:E0:EB:62:4D:DC:5B:51:04:04:56:4D:76:91:61:DF ValidityMon, 02 Dec 2024 08:35:43 GMT - Mon, 24 Feb 2025 08:35:42 GMT
File typeGIF image data, version 89a, 1 x 1 Hash325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /img/blank.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 43
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Dec 2024 04:13:31 GMT
expires: Sat, 28 Dec 2024 04:13:31 GMT
cache-control: public, max-age=604800
last-modified: Fri, 20 Dec 2024 13:52:17 GMT
content-type: image/gif
age: 199398
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-MD79V4BN | 142.250.74.40 | 200 OK | 74 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-MD79V4BN IP142.250.74.40:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (2530) Hashef09ab6883d0cc4178c8fc940d72c11a 5f060e1c4330839f8ff16fd7f4a9b1a7d7a6dcf9 f5cdf47e92a258f9ae8322c6b607f131c56e851f27cc91a840e7a9cb81bc90a8
GET /gtm.js?id=GTM-MD79V4BN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Dec 2024 11:36:49 GMT
expires: Mon, 23 Dec 2024 11:36:49 GMT
cache-control: private, max-age=900
last-modified: Mon, 23 Dec 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1080:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1080:0"}],}
server: Google Tag Manager
content-length: 74456
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-Z5E74LKPBX | 142.250.74.40 | 200 OK | 110 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-Z5E74LKPBX IP142.250.74.40:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size110 kB (109739 bytes) Hash72aeafe9ee28816ec1eae2e3598a409b 1e64ea999bc35ba2b41f15ceef3aea3a71f5e990 836ceda9028d248ce6df0c6bc9ddec5ab25d610cf34a5784a29a890c9cdec5e6
GET /gtag/js?id=G-Z5E74LKPBX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Dec 2024 11:36:49 GMT
expires: Mon, 23 Dec 2024 11:36:49 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 109739
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-Z5E74LKPBX | 142.250.74.40 | 200 OK | 110 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-Z5E74LKPBX IP142.250.74.40:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size110 kB (109739 bytes) Hash72aeafe9ee28816ec1eae2e3598a409b 1e64ea999bc35ba2b41f15ceef3aea3a71f5e990 836ceda9028d248ce6df0c6bc9ddec5ab25d610cf34a5784a29a890c9cdec5e6
GET /gtag/js?id=G-Z5E74LKPBX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Dec 2024 11:36:49 GMT
expires: Mon, 23 Dec 2024 11:36:49 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 109739
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/raleway/v19/1Ptug8zYS_SKggPNyC0ITw.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/raleway/v19/1Ptug8zYS_SKggPNyC0ITw.woff2 IP216.58.207.227:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 47272, version 1.0 Hash7bc6cb4378557439b87b4460024fb904 db93b7b93bdaccf4e96ee3162e50d1b1b9286bdc 1824e38c8fe9b23fb54ed5deafd63f31fcceed673d89111bebc8f05d1aa7b126
GET /s/raleway/v19/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47272
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Dec 2024 19:06:58 GMT
expires: Sat, 20 Dec 2025 19:06:58 GMT
cache-control: public, max-age=31536000
age: 232192
last-modified: Thu, 28 Jan 2021 22:37:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css | 104.18.10.207 | 200 OK | 52 kB |
URL GET HTTP/2netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css IP104.18.10.207:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectbootstrapcdn.com Fingerprint4C:46:68:E4:35:94:CF:F1:17:E4:0B:28:EF:F8:44:64:A1:01:5A:ED ValidityMon, 18 Nov 2024 00:43:34 GMT - Sun, 16 Feb 2025 00:43:33 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (305) Hash1f9e9d1a5a1d347d945ef4b7727f2ea0 2a8eccf4ac288eb99979b62dcc1cc1036d8ff8fa 3083e8d3b21ddc3f0e6d65ec3580aa6edfaadca5d9737d9caa27e6a233e1ccf3
GET /font-awesome/4.0.3/css/font-awesome.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:49 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "1f9e9d1a5a1d347d945ef4b7727f2ea0"
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 09/26/2024 10:42:03
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 953
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 426e29bc56d424eb844e0eac2cf69706
cdn-cache: HIT
cf-cache-status: HIT
age: 281881
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8f680e5eedd7b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/materialiconsround/v65/LDItaoyNOAY6Uewc665JcIzCKsKc_M9flwmP.woff2 | 216.58.207.227 | 200 OK | 146 kB |
URL GET HTTP/2fonts.gstatic.com/s/materialiconsround/v65/LDItaoyNOAY6Uewc665JcIzCKsKc_M9flwmP.woff2 IP216.58.207.227:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File typeWeb Open Font Format (Version 2), CFF, length 146348, version 1.0 Size146 kB (146348 bytes) Hash712b3ae81bdb1fd53e306da7c397e9f4 02b97dd4616dc82827f1ed1f4622f202fe1abf82 7f517e0a99c99691719d80e7f803c0385a2eebd0fa9069642cbdc7cd4f98667e
GET /s/materialiconsround/v65/LDItaoyNOAY6Uewc665JcIzCKsKc_M9flwmP.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 146348
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Dec 2024 04:19:13 GMT
expires: Sun, 21 Dec 2025 04:19:13 GMT
cache-control: public, max-age=31536000
age: 199057
last-modified: Tue, 22 Jun 2021 22:48:26 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.topcreativeformat.com/d447eb3f0b17b2013e1eb94040c8cf3d/invoke.js | 172.240.253.132 | 200 OK | 11 kB |
URL GET HTTP/1.1www.topcreativeformat.com/d447eb3f0b17b2013e1eb94040c8cf3d/invoke.js IP172.240.253.132:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjecttopcreativeformat.com Fingerprint1B:ED:25:3B:96:14:5B:7E:75:4A:7F:9A:8A:E1:F2:53:E8:28:74:B1 ValiditySat, 16 Nov 2024 01:37:02 GMT - Fri, 14 Feb 2025 01:37:01 GMT
File typeJavaScript source, ASCII text, with very long lines (25181), with no line terminators Hash09a380142a2186dbf3152f1de0d2cc00 6638611ec88a80f953a8ae01db798d656b859a85 7e1ceea26e419f731e7e816210e7f8fc864b58778a192239e2f656f8bc308fb4
GET /d447eb3f0b17b2013e1eb94040c8cf3d/invoke.js HTTP/1.1
Host: www.topcreativeformat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: www.topcreativeformat.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 117d8169939d38d5215caf29718019da
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.googletagmanager.com/gtag/js?id=G-Z5E74LKPBX&l=dataLayer&cx=c>m=45He4cc1v9200328678za200 | 142.250.74.40 | 200 OK | 110 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-Z5E74LKPBX&l=dataLayer&cx=c>m=45He4cc1v9200328678za200 IP142.250.74.40:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size110 kB (109764 bytes) Hash16c0ce4ef629405b47e9cd8da240a1bb 52a59d433aba8aa5b800c0938ea16f952513589d 291b0342345a0e4452c436e30761e655093e09d5c09fe3e6a258db2cf9a12f12
GET /gtag/js?id=G-Z5E74LKPBX&l=dataLayer&cx=c>m=45He4cc1v9200328678za200 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 23 Dec 2024 11:36:50 GMT
expires: Mon, 23 Dec 2024 11:36:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 109764
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pl24303346.cpmrevenuegate.com/e4/14/85/e4148511633ea108d44e0ab53550ee45.js | 192.243.59.12 | 200 OK | 17 kB |
URL GET HTTP/1.1pl24303346.cpmrevenuegate.com/e4/14/85/e4148511633ea108d44e0ab53550ee45.js IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectcpmrevenuegate.com Fingerprint49:C6:8D:32:55:91:F7:EE:CA:87:5C:F9:20:07:A0:1C:40:03:1C:82 ValidityFri, 20 Dec 2024 20:44:48 GMT - Thu, 20 Mar 2025 20:44:47 GMT
File typeJavaScript source, ASCII text, with very long lines (46152), with no line terminators Hash967dea7aa937a12553af76004a4c9337 e92ce31c5205f646f82631230e1bd7356273e615 4cc050a7ac202abf62e65b0974138b2b4e0ae0f38957d79be94f72f7808c2c2e
GET /e4/14/85/e4148511633ea108d44e0ab53550ee45.js HTTP/1.1
Host: pl24303346.cpmrevenuegate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 23 Dec 2024 11:36:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: pl24303346.cpmrevenuegate.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2b577236bb79b85961df8b01475407eb
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2 | 104.17.25.14 | 200 OK | 77 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2 IP104.17.25.14:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint64:3F:50:40:E0:BD:89:CB:A9:C8:BE:E5:74:F6:9E:D6:2E:1A:32:02 ValidityTue, 26 Nov 2024 07:25:18 GMT - Mon, 24 Feb 2025 07:25:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 76764, version 331.-31261 Hashf7307680c7fe85959f3ecf122493ea7d fce0da592a3e536d6d5df5b50cb513398d8c5161 43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 23 Dec 2024 11:36:50 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 76764
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "6599bdbd-12bdc"
last-modified: Sat, 06 Jan 2024 21:53:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 202056
expires: Sat, 13 Dec 2025 11:36:50 GMT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tvnJWh5D0gykDBIK5wNukra8EiTZF35fUUxTQvh69x5pGtZISfeRbjVdOkj%2BXOBN6MuosOc7%2FILckXGtbqGCNb%2B0lnBvwMtio5i%2FBQJBbyNC9AnUJDX7Vae5QMgypvsA%2BgJsq0Su"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8f680e64eeb056bd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| recordedthereby.com/sfp.js |  185.196.197.71 | 200 OK | 85 kB |
URL GET HTTP/1.1recordedthereby.com/sfp.js IP185.196.197.71:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectrecordedthereby.com FingerprintE0:09:99:E3:0E:A5:83:8D:96:1B:26:8A:2E:AC:12:98:C6:D3:E1:76 ValidityWed, 06 Nov 2024 14:09:18 GMT - Tue, 04 Feb 2025 14:09:17 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hash7e3e44049654b6e244c1777e68ffb8e7 8f2a8298666d607afd92a0baa362ef4dc9ccd039 4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:50 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 85378
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Host: recordedthereby.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 04ab426b49b802edfb80b6fc9b98f53a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| fonts.gstatic.com/s/raleway/v19/1Ptsg8zYS_SKggPNyCg4TYFq.woff2 | 216.58.207.227 | 200 OK | 49 kB |
URL GET HTTP/2fonts.gstatic.com/s/raleway/v19/1Ptsg8zYS_SKggPNyCg4TYFq.woff2 IP216.58.207.227:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 49400, version 1.0 Hash7d2e7cb95d9ce610b0aad210a7c8b7a8 167abde6b677f283c8b16426a6e806c67fb59815 71867ca10f1cd0c8ff620addb9fc27494f1681f0359a9e3fc8a0e26b7f93a102
GET /s/raleway/v19/1Ptsg8zYS_SKggPNyCg4TYFq.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 49400
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 21 Dec 2024 04:05:18 GMT
expires: Sun, 21 Dec 2025 04:05:18 GMT
cache-control: public, max-age=31536000
age: 199892
last-modified: Thu, 28 Jan 2021 22:22:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats |  3.121.166.192 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP3.121.166.192:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerAmazon Subjectproftrafficcounter.com Fingerprint40:FD:DA:57:15:28:B1:29:02:3E:E6:2F:38:E5:11:E5:7F:DB:6B:40 ValidityMon, 21 Oct 2024 00:00:00 GMT - Thu, 20 Nov 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash2c4fd80207ac3a5dc2352474b86c6015 f8591f0488d4246e2c44c67a7867ed2634013f54 c2343f1b5eea5917019fe294056f1e160bb6f69079d2d82f96682592c118f5db
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.nueducation.xyz
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=a25aaf93-2bed-4c97-af6a-23145d5907b7:2:1; expires=Thu, 21 Dec 2034 11:36:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 3.121.166.192 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP3.121.166.192:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerAmazon Subjectproftrafficcounter.com Fingerprint40:FD:DA:57:15:28:B1:29:02:3E:E6:2F:38:E5:11:E5:7F:DB:6B:40 ValidityMon, 21 Oct 2024 00:00:00 GMT - Thu, 20 Nov 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash26362a7b6a50629c7fa9711bc5f65815 6cf5f42bfbcce2678b1d8e5ba01a45e2bf3d3968 2bc6ed18348c8f37456730fdc65fc4135cc07920707396bd5623deaa3f137bfa
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.nueducation.xyz
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce:3:1; expires=Thu, 21 Dec 2034 11:36:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-QN2lgvtYZco/YN3mUSryAVI/AAAAAAAAADs/KrR-etCcvUMcPl06jopTs9pzq59IAXhMQCLcBGAsYHQ/s39/avatar.jpg | 142.250.74.129 | 200 OK | 660 B |
URL GET HTTP/21.bp.blogspot.com/-QN2lgvtYZco/YN3mUSryAVI/AAAAAAAAADs/KrR-etCcvUMcPl06jopTs9pzq59IAXhMQCLcBGAsYHQ/s39/avatar.jpg IP142.250.74.129:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com Fingerprint53:13:83:2E:7B:B0:FA:7C:DD:AF:7F:6A:98:84:2D:76:81:62:13:1F ValidityMon, 02 Dec 2024 08:36:37 GMT - Mon, 24 Feb 2025 08:36:36 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 39x39, components 3 Hashc3b82d7b0325d08ea5e162e7ddcff295 ddfd16c8625dc671ea9fec24d697e1b19046da66 c2a1409962950c016ec0ca325cafdf69831a2ed83e894e2848a169319b6af21d
GET /-QN2lgvtYZco/YN3mUSryAVI/AAAAAAAAADs/KrR-etCcvUMcPl06jopTs9pzq59IAXhMQCLcBGAsYHQ/s39/avatar.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="avatar.jpg"
x-content-type-options: nosniff
server: fife
content-length: 660
x-xss-protection: 0
date: Mon, 23 Dec 2024 11:26:21 GMT
expires: Tue, 24 Dec 2024 11:26:21 GMT
cache-control: public, max-age=86400, no-transform
age: 629
etag: "v3c"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| stereospoutfireextinguisher.com/watch.439244675468.js?key=d447eb3f0b17b2013e1eb94040c8cf3d&kw=%5B%22nu%22%2C%22suggestions%22%5D&refer=https%3A%2F%2Fwww.nueducation.xyz%2Fp%2Fnu-suggestions.html%3Fm%3D1&tz=0&dev=e&res=14.2071&rb=&uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce%3A3%3A1 | 192.243.61.227 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1stereospoutfireextinguisher.com/watch.439244675468.js?key=d447eb3f0b17b2013e1eb94040c8cf3d&kw=%5B%22nu%22%2C%22suggestions%22%5D&refer=https%3A%2F%2Fwww.nueducation.xyz%2Fp%2Fnu-suggestions.html%3Fm%3D1&tz=0&dev=e&res=14.2071&rb=&uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce%3A3%3A1 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectstereospoutfireextinguisher.com FingerprintC5:2E:10:49:A7:54:62:C2:76:32:76:44:BB:73:B5:4E:C2:01:2C:0F ValidityWed, 18 Dec 2024 21:16:38 GMT - Tue, 18 Mar 2025 21:16:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.439244675468.js?key=d447eb3f0b17b2013e1eb94040c8cf3d&kw=%5B%22nu%22%2C%22suggestions%22%5D&refer=https%3A%2F%2Fwww.nueducation.xyz%2Fp%2Fnu-suggestions.html%3Fm%3D1&tz=0&dev=e&res=14.2071&rb=&uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce%3A3%3A1 HTTP/1.1
Host: stereospoutfireextinguisher.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:51 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.nueducation.xyz
Access-Control-Allow-Origin: https://www.nueducation.xyz
Access-Control-Allow-Credentials: true
Location: https://stereospoutfireextinguisher.com/watch.439244675468.js?dev=e&key=d447eb3f0b17b2013e1eb94040c8cf3d&kw=%5B%22nu%22%2C%22suggestions%22%5D&pst=1734953871&rb=&refer=https%3A%2F%2Fwww.nueducation.xyz%2Fp%2Fnu-suggestions.html%3Fm%3D1&res=14.2071&rmtc=t&shu=949deea7d7921448942f477997bb66db2b4003024007d6a537a289fb8e783f8b53c07fe713d6b4f87d214b6fbd1fdc7f8c91b28f7df13853d59b80a79028742919d6bbd4a8ff8916f985c93c003f938861741ec09b8730611596&tz=0&uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce%3A3%3A1
Set-Cookie: u_pl24202791=1; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.sW69UYBTC3IexGuZQrtF9AaHDJIHH1HqO3Z1x6zjX1M; expires=Mon, 23 Dec 2024 11:37:51 GMT; path=/; secure; SameSite=None
Host: stereospoutfireextinguisher.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d1c8d8007f4eb571710e227834e62871
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| www.nueducation.xyz/favicon.ico | 142.250.74.147 | 200 OK | 1.3 kB |
URL GET HTTP/2www.nueducation.xyz/favicon.ico IP142.250.74.147:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectwww.nueducation.xyz Fingerprint07:8F:50:2C:DD:7E:D7:7D:95:85:F4:12:06:CC:D9:5B:45:3C:DF:B1 ValidityMon, 04 Nov 2024 09:38:17 GMT - Sun, 02 Feb 2025 10:29:30 GMT
File typeMS Windows icon resource - 1 icon, 48x48, 32 bits/pixel Hash4b5b5908e935219dc077381b69422b54 0abdf1172a4f23c8f0ba95d5997136880115ab46 6b9b2fcd82b241c6f84e87c3ddb7a157c1a3775fc4afd4405a97363ff00c5734
GET /favicon.ico HTTP/1.1
Host: www.nueducation.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/p/nu-suggestions.html?m=1
Cookie: _ga_Z5E74LKPBX=GS1.1.1734953810.1.0.1734953810.0.0.0; _ga=GA1.1.1216959546.1734953810; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Mon, 23 Dec 2024 11:36:51 GMT
date: Mon, 23 Dec 2024 11:36:51 GMT
cache-control: private, max-age=86400
last-modified: Mon, 23 Dec 2024 02:14:10 GMT
etag: W/"d3b0a358e1bc66e49116497315f3bb3c4b32bb250a7397df46952ef7ddb153af"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1259
server: GSE
X-Firefox-Spdy: h2
|
|
| stereospoutfireextinguisher.com/watch.439244675468.js?dev=e&key=d447eb3f0b17b2013e1eb94040c8cf3d&kw=%5B%22nu%22%2C%22suggestions%22%5D&pst=1734953871&rb=&refer=https%3A%2F%2Fwww.nueducation.xyz%2Fp%2Fnu-suggestions.html%3Fm%3D1&res=14.2071&rmtc=t&shu=949deea7d7921448942f477997bb66db2b4003024007d6a537a289fb8e783f8b53c07fe713d6b4f87d214b6fbd1fdc7f8c91b28f7df13853d59b80a79028742919d6bbd4a8ff8916f985c93c003f938861741ec09b8730611596&tz=0&uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce%3A3%3A1 | 192.243.61.227 | 200 OK | 2.0 kB |
URL GET HTTP/1.1stereospoutfireextinguisher.com/watch.439244675468.js?dev=e&key=d447eb3f0b17b2013e1eb94040c8cf3d&kw=%5B%22nu%22%2C%22suggestions%22%5D&pst=1734953871&rb=&refer=https%3A%2F%2Fwww.nueducation.xyz%2Fp%2Fnu-suggestions.html%3Fm%3D1&res=14.2071&rmtc=t&shu=949deea7d7921448942f477997bb66db2b4003024007d6a537a289fb8e783f8b53c07fe713d6b4f87d214b6fbd1fdc7f8c91b28f7df13853d59b80a79028742919d6bbd4a8ff8916f985c93c003f938861741ec09b8730611596&tz=0&uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce%3A3%3A1 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectstereospoutfireextinguisher.com FingerprintC5:2E:10:49:A7:54:62:C2:76:32:76:44:BB:73:B5:4E:C2:01:2C:0F ValidityWed, 18 Dec 2024 21:16:38 GMT - Tue, 18 Mar 2025 21:16:37 GMT
File typeJavaScript source, ASCII text, with very long lines (2501) Hashe30975132c8b44597e5d0e5ac93d8216 7602232bbf1d0832e9e520b81eeb0488cddc6ba7 d8e0ea9046e870105a737af6b715832543b4f0ee739630108933cd3fe9e686eb
GET /watch.439244675468.js?dev=e&key=d447eb3f0b17b2013e1eb94040c8cf3d&kw=%5B%22nu%22%2C%22suggestions%22%5D&pst=1734953871&rb=&refer=https%3A%2F%2Fwww.nueducation.xyz%2Fp%2Fnu-suggestions.html%3Fm%3D1&res=14.2071&rmtc=t&shu=949deea7d7921448942f477997bb66db2b4003024007d6a537a289fb8e783f8b53c07fe713d6b4f87d214b6fbd1fdc7f8c91b28f7df13853d59b80a79028742919d6bbd4a8ff8916f985c93c003f938861741ec09b8730611596&tz=0&uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce%3A3%3A1 HTTP/1.1
Host: stereospoutfireextinguisher.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nueducation.xyz
Referer: https://www.nueducation.xyz/
DNT: 1
Connection: keep-alive
Cookie: u_pl24202791=1; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyNDIwMjc5MSwiayI6ImQ0NDdlYjNmMGIxN2IyMDEzZTFlYjk0MDQwYzhjZjNkIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0MTc3OTM1LCJwaWQiOjIxMTY1NTUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjcsImFpZCI6MjMsInB0Ijo0LCJwayI6Imh0ODAwOXRyZyIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo3OTk1NDE5NiwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjE4MTEwLCJvbiI6IkxpbnV4Iiwib3YiOiJVbmtub3duIiwiYmlkIjoxMTY2NzAsImJuIjoiRmlyZWZveCIsImJ2IjoiOTYuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy5udWVkdWNhdGlvbi54eXovcC9udS1zdWdnZXN0aW9ucy5odG1sP209MSIsImFyIjpbXX19.sW69UYBTC3IexGuZQrtF9AaHDJIHH1HqO3Z1x6zjX1M
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.nueducation.xyz
Access-Control-Allow-Origin: https://www.nueducation.xyz
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce:3:1; expires=Mon, 30 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
uncs=1; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
pdhtkv23=true; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
uncs23=1; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
Host: stereospoutfireextinguisher.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0645f1de9089af2a1087b5d7bda566e3
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.blogger.com/dyn-css/authorization.css?targetBlogID=8300317005060698026&zx=c5ff1ee3-01d0-4cae-aeac-ac202975d6ec | 142.250.74.105 | 200 OK | 21 B |
URL GET HTTP/3www.blogger.com/dyn-css/authorization.css?targetBlogID=8300317005060698026&zx=c5ff1ee3-01d0-4cae-aeac-ac202975d6ec IP142.250.74.105:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint8A:84:60:EE:5D:E0:EB:62:4D:DC:5B:51:04:04:56:4D:76:91:61:DF ValidityMon, 02 Dec 2024 08:35:43 GMT - Mon, 24 Feb 2025 08:35:42 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=8300317005060698026&zx=c5ff1ee3-01d0-4cae-aeac-ac202975d6ec HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 23 Dec 2024 11:36:51 GMT
last-modified: Mon, 23 Dec 2024 11:36:51 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| unusuallypilgrim.com/sbar.json?key=e4148511633ea108d44e0ab53550ee45&uuid=a25aaf93-2bed-4c97-af6a-23145d5907b7%3A2%3A1 | 192.243.61.227 | 200 OK | 7.9 kB |
URL GET HTTP/1.1unusuallypilgrim.com/sbar.json?key=e4148511633ea108d44e0ab53550ee45&uuid=a25aaf93-2bed-4c97-af6a-23145d5907b7%3A2%3A1 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectunusuallypilgrim.com Fingerprint66:7E:85:5B:FA:13:40:79:0E:2C:68:1D:64:CF:4E:83:76:E3:5B:E9 ValidityFri, 13 Dec 2024 21:46:16 GMT - Thu, 13 Mar 2025 21:46:15 GMT
Hash4a25bf81ab2a4d1b0bfb53de1292dd4a d6cfdf525c4b42e710ddfaa7ef0f55db88bbd842 d1bff3fdba394419b08fdc0bfa597fb2745b25e380f6ba530dcfb3fd0389a2af
GET /sbar.json?key=e4148511633ea108d44e0ab53550ee45&uuid=a25aaf93-2bed-4c97-af6a-23145d5907b7%3A2%3A1 HTTP/1.1
Host: unusuallypilgrim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:51 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.nueducation.xyz
Access-Control-Allow-Origin: https://www.nueducation.xyz
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl24202847=1; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
uid_id2=a25aaf93-2bed-4c97-af6a-23145d5907b7:2:1; expires=Mon, 30 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
uncs=1; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
pdhtkv29=true; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
uncs29=1; expires=Tue, 24 Dec 2024 11:36:51 GMT; path=/; secure; SameSite=None
Host: unusuallypilgrim.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 1b3860da93af8f0139e408b1f9a7a37b
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| blogger.googleusercontent.com/img/a/AVvXsEj1u5wPimwJPXj5XNQfRoUgnHQZFZ4IxN75wIKp8ZVVR4LQhCOyQQVm_MettF5RaguT3TMdU1I-Qy-wfsXgKBomsbbEu0RFaWAChUR7zJ8Ohnu3lVelCRJVXq1s2a88J3i_8vFIl5Lu3yUOs2uewyAm6t9YYknhN6tXl-1tqUPpm9Vvi8wQ47W75-IIbj9n=s400 | 142.250.74.161 | 200 OK | 22 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/a/AVvXsEj1u5wPimwJPXj5XNQfRoUgnHQZFZ4IxN75wIKp8ZVVR4LQhCOyQQVm_MettF5RaguT3TMdU1I-Qy-wfsXgKBomsbbEu0RFaWAChUR7zJ8Ohnu3lVelCRJVXq1s2a88J3i_8vFIl5Lu3yUOs2uewyAm6t9YYknhN6tXl-1tqUPpm9Vvi8wQ47W75-IIbj9n=s400 IP142.250.74.161:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintB7:81:DF:88:6A:8E:A6:85:C5:CC:E0:38:BE:A6:D8:AF:B1:92:4E:DF ValidityMon, 02 Dec 2024 08:36:53 GMT - Mon, 24 Feb 2025 08:36:52 GMT
File typePNG image data, 400 x 70, 8-bit/color RGBA, non-interlaced Hashf7f4ae4b7665821c84a25e2949f52f7e 70aa9a6ad350261494e7c43edef23d337f3e2c3d 24837d8f757143549b792de8bb8c9a961999392e49cc8c4d2bdb424b5349045d
GET /img/a/AVvXsEj1u5wPimwJPXj5XNQfRoUgnHQZFZ4IxN75wIKp8ZVVR4LQhCOyQQVm_MettF5RaguT3TMdU1I-Qy-wfsXgKBomsbbEu0RFaWAChUR7zJ8Ohnu3lVelCRJVXq1s2a88J3i_8vFIl5Lu3yUOs2uewyAm6t9YYknhN6tXl-1tqUPpm9Vvi8wQ47W75-IIbj9n=s400 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v415"
expires: Tue, 24 Dec 2024 11:36:51 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="NU_EDUCATIO-removebg-preview (1).png"
x-content-type-options: nosniff
date: Mon, 23 Dec 2024 11:36:51 GMT
server: fife
content-length: 22307
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/a/AVvXsEiMe9bJw9it3QPyIkMVTWspr5QXrzu-ONxt6Hv-OJttA3rWSnOrvDTJSOWZ9N98kPKU2dTk1aFfgl0YuF9rtjVW616kopDjkzboWnZSZ3dhdorNEcHu4S-MaMpq_-j2FuN7cBnwLs-GZJDx4HTq-OXVXx31PlVfyXXYJBHWBJUO3asTnQdemnU_VGdiVm2j=s400 | 142.250.74.161 | 200 OK | 22 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/a/AVvXsEiMe9bJw9it3QPyIkMVTWspr5QXrzu-ONxt6Hv-OJttA3rWSnOrvDTJSOWZ9N98kPKU2dTk1aFfgl0YuF9rtjVW616kopDjkzboWnZSZ3dhdorNEcHu4S-MaMpq_-j2FuN7cBnwLs-GZJDx4HTq-OXVXx31PlVfyXXYJBHWBJUO3asTnQdemnU_VGdiVm2j=s400 IP142.250.74.161:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintB7:81:DF:88:6A:8E:A6:85:C5:CC:E0:38:BE:A6:D8:AF:B1:92:4E:DF ValidityMon, 02 Dec 2024 08:36:53 GMT - Mon, 24 Feb 2025 08:36:52 GMT
File typePNG image data, 400 x 70, 8-bit/color RGBA, non-interlaced Hashf7f4ae4b7665821c84a25e2949f52f7e 70aa9a6ad350261494e7c43edef23d337f3e2c3d 24837d8f757143549b792de8bb8c9a961999392e49cc8c4d2bdb424b5349045d
GET /img/a/AVvXsEiMe9bJw9it3QPyIkMVTWspr5QXrzu-ONxt6Hv-OJttA3rWSnOrvDTJSOWZ9N98kPKU2dTk1aFfgl0YuF9rtjVW616kopDjkzboWnZSZ3dhdorNEcHu4S-MaMpq_-j2FuN7cBnwLs-GZJDx4HTq-OXVXx31PlVfyXXYJBHWBJUO3asTnQdemnU_VGdiVm2j=s400 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v416"
expires: Tue, 24 Dec 2024 11:36:51 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="NU_EDUCATIO-removebg-preview (1).png"
x-content-type-options: nosniff
date: Mon, 23 Dec 2024 11:36:51 GMT
server: fife
content-length: 22307
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRUYV8ovPvPXlo2hLSH8dknMts3DRzSzbipXABu9lVff4HyTjdfTT2b9mxCffgtoltlLesdyOo4pqn6ZTRbX9RwTTxekms7A5KnDmdmYfZMus4smJJ0aIoOZKHYloz6w1QtzdtLbFVqkYS5zvYyMpFTjt7-eSOJFdJyNcOrFH2RJWDKA/w45-h45-p-k-no-nu/android-chrome-512x512.png | 142.250.74.161 | 200 OK | 1.2 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRUYV8ovPvPXlo2hLSH8dknMts3DRzSzbipXABu9lVff4HyTjdfTT2b9mxCffgtoltlLesdyOo4pqn6ZTRbX9RwTTxekms7A5KnDmdmYfZMus4smJJ0aIoOZKHYloz6w1QtzdtLbFVqkYS5zvYyMpFTjt7-eSOJFdJyNcOrFH2RJWDKA/w45-h45-p-k-no-nu/android-chrome-512x512.png IP142.250.74.161:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintB7:81:DF:88:6A:8E:A6:85:C5:CC:E0:38:BE:A6:D8:AF:B1:92:4E:DF ValidityMon, 02 Dec 2024 08:36:53 GMT - Mon, 24 Feb 2025 08:36:52 GMT
File typePNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced Hashf8c62aabf06f70247d5e170bd777c989 9790ef0273d7d131138286aeb957f24f5dbf2421 eb496b5f45b24d3d38368eb327af7b4455d48aff0bd19f549cc7c5eb4e1477fb
GET /img/b/R29vZ2xl/AVvXsEhRUYV8ovPvPXlo2hLSH8dknMts3DRzSzbipXABu9lVff4HyTjdfTT2b9mxCffgtoltlLesdyOo4pqn6ZTRbX9RwTTxekms7A5KnDmdmYfZMus4smJJ0aIoOZKHYloz6w1QtzdtLbFVqkYS5zvYyMpFTjt7-eSOJFdJyNcOrFH2RJWDKA/w45-h45-p-k-no-nu/android-chrome-512x512.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v342"
expires: Tue, 24 Dec 2024 11:36:51 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="android-chrome-512x512.png"
x-content-type-options: nosniff
date: Mon, 23 Dec 2024 11:36:51 GMT
server: fife
content-length: 1161
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD9vE9SNFP9c-j-QYKj5yEoIwAmyTWzfaCRY-R4Px6WNkUWHo2SvXmPYRhfIeHrQ40FIoxKm3_siQA9zZTEeOj3toBi_IVZ61stYWzt6LOs41Ti0vUJJswuAmc0E9McigBUtqzcG5rOhbOKjLYFaVxkOCABPn2evhHrL-sLZMiKZCPl4PRMlzRyYS692V0/w99-h66-p-k-no-nu/%E0%A6%B8%E0%A7%8D%E0%A6%AC%E0%A6%BE%E0%A6%A7%E0%A7%80%E0%A6%A8%20%E0%A6%AC%E0%A6%BE%E0%A6%82%E0%A6%B2%E0%A6%BE%E0%A6%A6%E0%A7%87%E0%A6%B6%E0%A7%87%E0%A6%B0%20%E0%A6%85%E0%A6%AD%E0%A7%8D%E0%A6%AF%E0%A7%81%E0%A6%A6%E0%A7%9F%E0%A7%87%E0%A6%B0%20%E0%A6%87%E0%A6%A4%E0%A6%BF%E0%A6%B9%E0%A6%BE%E0%A6%B8%20%E0%A6%85%E0%A6%A8%E0%A6%BE%E0%A6%B0%E0%A7%8D%E0%A6%B8%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%A5%E0%A6%AE%20%E0%A6%AC%E0%A6%B0%E0%A7%8D%E0%A6%B7%20%E0%A6%95%20%E0%A6%AC%E0%A6%BF%E0%A6%AD%E0%A6%BE%E0%A6%97%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%B6%E0%A7%8D%E0%A6%A8%20%E0%A6%8F%E0%A6%AC%E0%A6%82%20%E0%A6%B8%E0%A6%BE%E0%A6%9C%E0%A7%87%E0%A6%B6%E0%A6%A8%E0%A5%A4.jpg=w72-h72-p-k-no-nu | 142.250.74.161 | 200 OK | 4.8 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD9vE9SNFP9c-j-QYKj5yEoIwAmyTWzfaCRY-R4Px6WNkUWHo2SvXmPYRhfIeHrQ40FIoxKm3_siQA9zZTEeOj3toBi_IVZ61stYWzt6LOs41Ti0vUJJswuAmc0E9McigBUtqzcG5rOhbOKjLYFaVxkOCABPn2evhHrL-sLZMiKZCPl4PRMlzRyYS692V0/w99-h66-p-k-no-nu/%E0%A6%B8%E0%A7%8D%E0%A6%AC%E0%A6%BE%E0%A6%A7%E0%A7%80%E0%A6%A8%20%E0%A6%AC%E0%A6%BE%E0%A6%82%E0%A6%B2%E0%A6%BE%E0%A6%A6%E0%A7%87%E0%A6%B6%E0%A7%87%E0%A6%B0%20%E0%A6%85%E0%A6%AD%E0%A7%8D%E0%A6%AF%E0%A7%81%E0%A6%A6%E0%A7%9F%E0%A7%87%E0%A6%B0%20%E0%A6%87%E0%A6%A4%E0%A6%BF%E0%A6%B9%E0%A6%BE%E0%A6%B8%20%E0%A6%85%E0%A6%A8%E0%A6%BE%E0%A6%B0%E0%A7%8D%E0%A6%B8%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%A5%E0%A6%AE%20%E0%A6%AC%E0%A6%B0%E0%A7%8D%E0%A6%B7%20%E0%A6%95%20%E0%A6%AC%E0%A6%BF%E0%A6%AD%E0%A6%BE%E0%A6%97%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%B6%E0%A7%8D%E0%A6%A8%20%E0%A6%8F%E0%A6%AC%E0%A6%82%20%E0%A6%B8%E0%A6%BE%E0%A6%9C%E0%A7%87%E0%A6%B6%E0%A6%A8%E0%A5%A4.jpg=w72-h72-p-k-no-nu IP142.250.74.161:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintB7:81:DF:88:6A:8E:A6:85:C5:CC:E0:38:BE:A6:D8:AF:B1:92:4E:DF ValidityMon, 02 Dec 2024 08:36:53 GMT - Mon, 24 Feb 2025 08:36:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 99x66, components 3 Hash1407f0b897002f6bfef9cf87b02530e7 4ee096d21eaebb96780253c2470384d9e689121b 3a38985db0ff52d799c864ffee0c042251e8ea3965445ac7f675db3405001ebc
GET /img/b/R29vZ2xl/AVvXsEiD9vE9SNFP9c-j-QYKj5yEoIwAmyTWzfaCRY-R4Px6WNkUWHo2SvXmPYRhfIeHrQ40FIoxKm3_siQA9zZTEeOj3toBi_IVZ61stYWzt6LOs41Ti0vUJJswuAmc0E9McigBUtqzcG5rOhbOKjLYFaVxkOCABPn2evhHrL-sLZMiKZCPl4PRMlzRyYS692V0/w99-h66-p-k-no-nu/%E0%A6%B8%E0%A7%8D%E0%A6%AC%E0%A6%BE%E0%A6%A7%E0%A7%80%E0%A6%A8%20%E0%A6%AC%E0%A6%BE%E0%A6%82%E0%A6%B2%E0%A6%BE%E0%A6%A6%E0%A7%87%E0%A6%B6%E0%A7%87%E0%A6%B0%20%E0%A6%85%E0%A6%AD%E0%A7%8D%E0%A6%AF%E0%A7%81%E0%A6%A6%E0%A7%9F%E0%A7%87%E0%A6%B0%20%E0%A6%87%E0%A6%A4%E0%A6%BF%E0%A6%B9%E0%A6%BE%E0%A6%B8%20%E0%A6%85%E0%A6%A8%E0%A6%BE%E0%A6%B0%E0%A7%8D%E0%A6%B8%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%A5%E0%A6%AE%20%E0%A6%AC%E0%A6%B0%E0%A7%8D%E0%A6%B7%20%E0%A6%95%20%E0%A6%AC%E0%A6%BF%E0%A6%AD%E0%A6%BE%E0%A6%97%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%B6%E0%A7%8D%E0%A6%A8%20%E0%A6%8F%E0%A6%AC%E0%A6%82%20%E0%A6%B8%E0%A6%BE%E0%A6%9C%E0%A7%87%E0%A6%B6%E0%A6%A8%E0%A5%A4.jpg=w72-h72-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v3b9"
expires: Tue, 24 Dec 2024 11:36:52 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_______ __________ _________ ______ ______ _____ ____ _ _____ ______ ___ _______.jpg";filename*=UTF-8''%E0%A6%B8%E0%A7%8D%E0%A6%AC%E0%A6%BE%E0%A6%A7%E0%A7%80%E0%A6%A8%20%E0%A6%AC%E0%A6%BE%E0%A6%82%E0%A6%B2%E0%A6%BE%E0%A6%A6%E0%A7%87%E0%A6%B6%E0%A7%87%E0%A6%B0%20%E0%A6%85%E0%A6%AD%E0%A7%8D%E0%A6%AF%E0%A7%81%E0%A6%A6%E0%A7%9F%E0%A7%87%E0%A6%B0%20%E0%A6%87%E0%A6%A4%E0%A6%BF%E0%A6%B9%E0%A6%BE%E0%A6%B8%20%E0%A6%85%E0%A6%A8%E0%A6%BE%E0%A6%B0%E0%A7%8D%E0%A6%B8%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%A5%E0%A6%AE%20%E0%A6%AC%E0%A6%B0%E0%A7%8D%E0%A6%B7%20%E0%A6%95%20%E0%A6%AC%E0%A6%BF%E0%A6%AD%E0%A6%BE%E0%A6%97%20%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%B6%E0%A7%8D%E0%A6%A8%20%E0%A6%8F%E0%A6%AC%E0%A6%82%20%E0%A6%B8%E0%A6%BE%E0%A6%9C%E0%A7%87%E0%A6%B6%E0%A6%A8%E0%A5%A4.jpg
x-content-type-options: nosniff
date: Mon, 23 Dec 2024 11:36:52 GMT
server: fife
content-length: 4765
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0R1XyDZP3DnyHZ3ZqYHHyixtiNn5tXmKd7Rrtgn_7ltA_y2URi9U5qa3VwyuiJuDOhnCPYvX3qiMjebnFP3y8ocNCYbquVPc1GBkWlMpWkfZR7MuNC23pLVs8LfCYAfDl1dEulstwmmHSN4AO7MXnMwDeLIWC1VLzdNyPHsE5iwnyDkejKyH17pOApH89/w99-h66-p-k-no-nu/IMG_20241125_145418.JPG=w72-h72-p-k-no-nu | 142.250.74.161 | 200 OK | 4.1 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0R1XyDZP3DnyHZ3ZqYHHyixtiNn5tXmKd7Rrtgn_7ltA_y2URi9U5qa3VwyuiJuDOhnCPYvX3qiMjebnFP3y8ocNCYbquVPc1GBkWlMpWkfZR7MuNC23pLVs8LfCYAfDl1dEulstwmmHSN4AO7MXnMwDeLIWC1VLzdNyPHsE5iwnyDkejKyH17pOApH89/w99-h66-p-k-no-nu/IMG_20241125_145418.JPG=w72-h72-p-k-no-nu IP142.250.74.161:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintB7:81:DF:88:6A:8E:A6:85:C5:CC:E0:38:BE:A6:D8:AF:B1:92:4E:DF ValidityMon, 02 Dec 2024 08:36:53 GMT - Mon, 24 Feb 2025 08:36:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 99x66, components 3 Hashe0436573a8c76960c266931aecefd228 486cb27fa899c433953454aa21979e34be81d61e d80951d64e7d8aa74ae11f07a013f9ca71bcceb32ea030325023fa2b562c80d2
GET /img/b/R29vZ2xl/AVvXsEi0R1XyDZP3DnyHZ3ZqYHHyixtiNn5tXmKd7Rrtgn_7ltA_y2URi9U5qa3VwyuiJuDOhnCPYvX3qiMjebnFP3y8ocNCYbquVPc1GBkWlMpWkfZR7MuNC23pLVs8LfCYAfDl1dEulstwmmHSN4AO7MXnMwDeLIWC1VLzdNyPHsE5iwnyDkejKyH17pOApH89/w99-h66-p-k-no-nu/IMG_20241125_145418.JPG=w72-h72-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v2f5"
expires: Tue, 24 Dec 2024 11:36:52 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="IMG_20241125_145418.JPG"
x-content-type-options: nosniff
date: Mon, 23 Dec 2024 11:36:52 GMT
server: fife
content-length: 4089
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| unusuallypilgrim.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSeTSMuHFCrcqqQLOAAEnH2t216qCglqGpoq4aqXFA1uzPrDBnvbGd2vI5PEZFQj4a%2FYPM5aQRU%2FPgDqCqnEodISDHikAP5J5B6RjYRhnfY9773vR198735as%2BekQCWnt74RA2FlHQ1arqNdz7zvKuNdZHbQWPQjh%2FG4dWG7r%2FfiZvuu42PebqlVn3Xc13P9RprQvNMDVZnJETxtOM1O24z9JteFGKg%2F4%2BNdWCoA9Y%2FI5cg2HT5hXMZIp0g7%2F10g5utUhXvfdSzkpZKo88O7%2Bdbuapy9BZlph1k%2BeH5NJQ5WXsGlR%2FM5UL1%2Fx1MxJQ4vz5Dkh%2Bei0TS35%2FrTCR4joS9iqo%2FAZcTCDpBqnYh2AkBUobbd5D3ntxWuqLb%2F7B0xk7J8su%2FIKopWf7zMvLeD9elGDQ2lLSlULnBIKshBhOI7gSFPUI5dCCqI6TllxDsN7L6ch15b%2F%2BOkQqCnb5N%2FYjSrBOs%2BAlnK2Haaa3QLKYrfuCFEYs6bitpzQ0SYgKRTSD5CNQswRoHVjiwmQNbOOix00bqeV7LZSl12500DViLJzFzPdrKPOq5cRs2nd1hhLIYIZUjpHoHhd7Blvj6JLoEbZ%2FDbNYwzIEpCfqsRsUJKkNQUYJKEFQlQdWvD5g0vqmfMGls4p1n%2FzwH9ViV3T16oMouzwmoHkGzel8Uj8wu0vLCeJiZz8cqM2yvOCMXZ746j24%2FxBY%2FbfDQC9uR58VBwKnntlkYcpcmURBFLudhBCNqCLMEahwMxZRce%2F4aCjEljVvHSOgRjDxCKq6A2jdAqxp0s8Yw%2FzG3nNmUztbUHGwPwVSNolxGue3syTNyZb7cB29ugqfH5DyQ6hqFrvGFeEHQlY%2FH91RF9u%2BpypCf7xSl6Inh%2FMSNkpb8le9u8e1KaXbzhhl9%2B0E6I2bl00%2B5KddpzkTeNeT764IxrteUTjn55aZ5wJO71mxetzq3xfrdD9du9grNjREqn4CKk7d8pGJKLv5xf%2F6ivdcJhJ5A2xo9u1Aq1ARpsQNTLHpGEWi5wEnhoLL1WPvJoikFgeQLTJMa5j84WdRjTWd%2FU1Hvmcfo6iXQchd5r0Zf1%2BjLGlSOYOyFcVno42u%2FB%2FNAIpfGidRL%2B4nU8pu5ybNPF0acNlpB4NK4E3mtFuWtJPTbWewxSv0w9uOYBijNtCtubfwdAAD%2F%2F%2BvgVySrBAAA | 192.243.61.227 | 200 OK | 7 B |
URL GET HTTP/1.1unusuallypilgrim.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSeTSMuHFCrcqqQLOAAEnH2t216qCglqGpoq4aqXFA1uzPrDBnvbGd2vI5PEZFQj4a%2FYPM5aQRU%2FPgDqCqnEodISDHikAP5J5B6RjYRhnfY9773vR198735as%2BekQCWnt74RA2FlHQ1arqNdz7zvKuNdZHbQWPQjh%2FG4dWG7r%2FfiZvuu42PebqlVn3Xc13P9RprQvNMDVZnJETxtOM1O24z9JteFGKg%2F4%2BNdWCoA9Y%2FI5cg2HT5hXMZIp0g7%2F10g5utUhXvfdSzkpZKo88O7%2Bdbuapy9BZlph1k%2BeH5NJQ5WXsGlR%2FM5UL1%2Fx1MxJQ4vz5Dkh%2Bei0TS35%2FrTCR4joS9iqo%2FAZcTCDpBqnYh2AkBUobbd5D3ntxWuqLb%2F7B0xk7J8su%2FIKopWf7zMvLeD9elGDQ2lLSlULnBIKshBhOI7gSFPUI5dCCqI6TllxDsN7L6ch15b%2F%2BOkQqCnb5N%2FYjSrBOs%2BAlnK2Haaa3QLKYrfuCFEYs6bitpzQ0SYgKRTSD5CNQswRoHVjiwmQNbOOix00bqeV7LZSl12500DViLJzFzPdrKPOq5cRs2nd1hhLIYIZUjpHoHhd7Blvj6JLoEbZ%2FDbNYwzIEpCfqsRsUJKkNQUYJKEFQlQdWvD5g0vqmfMGls4p1n%2FzwH9ViV3T16oMouzwmoHkGzel8Uj8wu0vLCeJiZz8cqM2yvOCMXZ746j24%2FxBY%2FbfDQC9uR58VBwKnntlkYcpcmURBFLudhBCNqCLMEahwMxZRce%2F4aCjEljVvHSOgRjDxCKq6A2jdAqxp0s8Yw%2FzG3nNmUztbUHGwPwVSNolxGue3syTNyZb7cB29ugqfH5DyQ6hqFrvGFeEHQlY%2FH91RF9u%2BpypCf7xSl6Inh%2FMSNkpb8le9u8e1KaXbzhhl9%2B0E6I2bl00%2B5KddpzkTeNeT764IxrteUTjn55aZ5wJO71mxetzq3xfrdD9du9grNjREqn4CKk7d8pGJKLv5xf%2F6ivdcJhJ5A2xo9u1Aq1ARpsQNTLHpGEWi5wEnhoLL1WPvJoikFgeQLTJMa5j84WdRjTWd%2FU1Hvmcfo6iXQchd5r0Zf1%2BjLGlSOYOyFcVno42u%2FB%2FNAIpfGidRL%2B4nU8pu5ybNPF0acNlpB4NK4E3mtFuWtJPTbWewxSv0w9uOYBijNtCtubfwdAAD%2F%2F%2BvgVySrBAAA IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectunusuallypilgrim.com Fingerprint66:7E:85:5B:FA:13:40:79:0E:2C:68:1D:64:CF:4E:83:76:E3:5B:E9 ValidityFri, 13 Dec 2024 21:46:16 GMT - Thu, 13 Mar 2025 21:46:15 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSeTSMuHFCrcqqQLOAAEnH2t216qCglqGpoq4aqXFA1uzPrDBnvbGd2vI5PEZFQj4a%2FYPM5aQRU%2FPgDqCqnEodISDHikAP5J5B6RjYRhnfY9773vR198735as%2BekQCWnt74RA2FlHQ1arqNdz7zvKuNdZHbQWPQjh%2FG4dWG7r%2FfiZvuu42PebqlVn3Xc13P9RprQvNMDVZnJETxtOM1O24z9JteFGKg%2F4%2BNdWCoA9Y%2FI5cg2HT5hXMZIp0g7%2F10g5utUhXvfdSzkpZKo88O7%2Bdbuapy9BZlph1k%2BeH5NJQ5WXsGlR%2FM5UL1%2Fx1MxJQ4vz5Dkh%2Bei0TS35%2FrTCR4joS9iqo%2FAZcTCDpBqnYh2AkBUobbd5D3ntxWuqLb%2F7B0xk7J8su%2FIKopWf7zMvLeD9elGDQ2lLSlULnBIKshBhOI7gSFPUI5dCCqI6TllxDsN7L6ch15b%2F%2BOkQqCnb5N%2FYjSrBOs%2BAlnK2Haaa3QLKYrfuCFEYs6bitpzQ0SYgKRTSD5CNQswRoHVjiwmQNbOOix00bqeV7LZSl12500DViLJzFzPdrKPOq5cRs2nd1hhLIYIZUjpHoHhd7Blvj6JLoEbZ%2FDbNYwzIEpCfqsRsUJKkNQUYJKEFQlQdWvD5g0vqmfMGls4p1n%2FzwH9ViV3T16oMouzwmoHkGzel8Uj8wu0vLCeJiZz8cqM2yvOCMXZ746j24%2FxBY%2FbfDQC9uR58VBwKnntlkYcpcmURBFLudhBCNqCLMEahwMxZRce%2F4aCjEljVvHSOgRjDxCKq6A2jdAqxp0s8Yw%2FzG3nNmUztbUHGwPwVSNolxGue3syTNyZb7cB29ugqfH5DyQ6hqFrvGFeEHQlY%2FH91RF9u%2BpypCf7xSl6Inh%2FMSNkpb8le9u8e1KaXbzhhl9%2B0E6I2bl00%2B5KddpzkTeNeT764IxrteUTjn55aZ5wJO71mxetzq3xfrdD9du9grNjREqn4CKk7d8pGJKLv5xf%2F6ivdcJhJ5A2xo9u1Aq1ARpsQNTLHpGEWi5wEnhoLL1WPvJoikFgeQLTJMa5j84WdRjTWd%2FU1Hvmcfo6iXQchd5r0Zf1%2BjLGlSOYOyFcVno42u%2FB%2FNAIpfGidRL%2B4nU8pu5ybNPF0acNlpB4NK4E3mtFuWtJPTbWewxSv0w9uOYBijNtCtubfwdAAD%2F%2F%2BvgVySrBAAA HTTP/1.1
Host: unusuallypilgrim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Cookie: u_pl24202847=1; uid_id2=a25aaf93-2bed-4c97-af6a-23145d5907b7:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:52 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: unusuallypilgrim.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 388db38b3b367f03d41ed42a531a9bd9
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unusuallypilgrim.com/pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Findex.html&l=1947&fd=536 | 192.243.61.227 | 200 OK | 0 B |
URL GET HTTP/1.1unusuallypilgrim.com/pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Findex.html&l=1947&fd=536 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectunusuallypilgrim.com Fingerprint66:7E:85:5B:FA:13:40:79:0E:2C:68:1D:64:CF:4E:83:76:E3:5B:E9 ValidityFri, 13 Dec 2024 21:46:16 GMT - Thu, 13 Mar 2025 21:46:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Findex.html&l=1947&fd=536 HTTP/1.1
Host: unusuallypilgrim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Cookie: u_pl24202847=1; uid_id2=a25aaf93-2bed-4c97-af6a-23145d5907b7:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:53 GMT
Content-Length: 0
Connection: keep-alive
Host: unusuallypilgrim.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/img/adobe_flash_player.png | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/2cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/img/adobe_flash_player.png IP188.114.96.1:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcreative-stat1.com FingerprintA5:93:3C:16:BF:CC:79:91:37:A7:7D:E8:8B:8D:A8:B3:FD:F9:5E:DB ValidityMon, 16 Dec 2024 18:24:51 GMT - Sun, 16 Mar 2025 19:23:03 GMT
File typePNG image data, 300 x 335, 8-bit colormap, non-interlaced Hash59a190081a9ee0dfce168033e73e6383 bd604cd88aa562d3363eebc4c403dc605db0eb42 844b46db74175f0108f5500b30ea887521893f2093c1e54066a94d69cc0bacaf
GET /sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/img/adobe_flash_player.png HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:53 GMT
content-type: image/png
content-length: 11265
last-modified: Fri, 19 Jan 2024 14:24:08 GMT
etag: "65aa8608-2c01"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1192690
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gNgyuaof6fMio3qBPVtHGyks1LRkxIUvkUhXhdS%2FQGWF0yC3cdDX6yrgKO6KceueFyd2Y3FCzVHm%2B6bzfU5AzbIWJPDJpZ0%2B8OxcmpWpsNT9HLqsLiDfIOauv2U3Sbz0qRlrrmnRsUHd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f680e742d6a5690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1185&min_rtt=504&rtt_var=1289&sent=10&recv=15&lost=0&retrans=1&sent_bytes=5210&recv_bytes=1662&delivery_rate=7502590&cwnd=245&unsent_bytes=0&cid=a30eed01718f36c6&ts=121&x=0"
X-Firefox-Spdy: h2
|
|
| cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/img/send.png | 188.114.96.1 | 200 OK | 17 kB |
URL GET HTTP/2cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/img/send.png IP188.114.96.1:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcreative-stat1.com FingerprintA5:93:3C:16:BF:CC:79:91:37:A7:7D:E8:8B:8D:A8:B3:FD:F9:5E:DB ValidityMon, 16 Dec 2024 18:24:51 GMT - Sun, 16 Mar 2025 19:23:03 GMT
File typePNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced Hash49d282404a58395fd8d033171b934c1f c5fe08b3491fc9ab1cd577fd0566a60cfade8ba2 dafcb1f828c60041971b47d7ebeaebbb1cae72e32a0f2e729b9077910bfbfb67
GET /sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/img/send.png HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:53 GMT
content-type: image/png
content-length: 16894
last-modified: Fri, 19 Jan 2024 14:24:08 GMT
etag: "65aa8608-41fe"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1192690
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fwYWTW3t7ujynfW33KPLENJEUNK%2Bkb03dtDqx0aJ%2FHR7K0KL6eMoNXiyQPpUh6%2BbZD8WEKCvlo3VVd1i4I00kud8yhzDxv1%2FZrszDCwWIqo6G6Dt4Urcz4X7bMPVU7wcn9Qp2SrkeE1w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f680e743d6f5690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=917&min_rtt=504&rtt_var=210&sent=20&recv=26&lost=0&retrans=1&sent_bytes=17191&recv_bytes=1791&delivery_rate=15162303&cwnd=245&unsent_bytes=0&cid=a30eed01718f36c6&ts=126&x=0"
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=e4148511633ea108d44e0ab53550ee45&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11 | 192.243.61.225 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=e4148511633ea108d44e0ab53550ee45&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subject*.unseenreport.com FingerprintB3:C3:D3:00:AB:EE:F9:2F:2C:9A:5D:74:A9:E1:4E:36:06:3F:B6:74 ValidityMon, 18 Nov 2024 22:38:22 GMT - Sun, 16 Feb 2025 22:38:21 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=f4ce6dc7-a45d-4a6e-8d8f-2f7fcea428ce&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=e4148511633ea108d44e0ab53550ee45&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:53 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Host: unseenreport.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: ff97810f4e7c2d89c02efb71d81980b3
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/js/jquery.min.js | 188.114.96.1 | 200 OK | 31 kB |
URL GET HTTP/2cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/js/jquery.min.js IP188.114.96.1:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcreative-stat1.com FingerprintA5:93:3C:16:BF:CC:79:91:37:A7:7D:E8:8B:8D:A8:B3:FD:F9:5E:DB ValidityMon, 16 Dec 2024 18:24:51 GMT - Sun, 16 Mar 2025 19:23:03 GMT
File typeJavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators Hash6326c600df01e3bfb9b40e1aa08176f8 6b4fb754d29b297b539bf62ba9b4eaf0f33f314a df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3
GET /sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/js/jquery.min.js HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:53 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:24:08 GMT
etag: W/"65aa8608-149a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1192690
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BF%2BXVRuonMUpA9RLxq3tb0undHTOlP%2BzaUhNXL%2BM2QhrrdhkrWuFi%2B2tt9qgkHKggSfU2vta21iCZB4JgNu0JXxZtH0DVKyKHfwFztcDc1AdkLkvALETtxof%2BCmwIOci2Px3y39uf%2B%2FL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f680e744d845690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1069&min_rtt=504&rtt_var=460&sent=34&recv=27&lost=0&retrans=1&sent_bytes=34881&recv_bytes=1791&delivery_rate=15162303&cwnd=245&unsent_bytes=0&cid=a30eed01718f36c6&ts=134&x=0"
X-Firefox-Spdy: h2
|
|
| unusuallypilgrim.com/pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Fcss%2Fanimate.css&l=78689&fd=520 | 192.243.61.227 | 200 OK | 0 B |
URL GET HTTP/1.1unusuallypilgrim.com/pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Fcss%2Fanimate.css&l=78689&fd=520 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectunusuallypilgrim.com Fingerprint66:7E:85:5B:FA:13:40:79:0E:2C:68:1D:64:CF:4E:83:76:E3:5B:E9 ValidityFri, 13 Dec 2024 21:46:16 GMT - Thu, 13 Mar 2025 21:46:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Fcss%2Fanimate.css&l=78689&fd=520 HTTP/1.1
Host: unusuallypilgrim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Cookie: u_pl24202847=1; uid_id2=a25aaf93-2bed-4c97-af6a-23145d5907b7:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:53 GMT
Content-Length: 0
Connection: keep-alive
Host: unusuallypilgrim.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| unusuallypilgrim.com/pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Fcss%2Fstyle.css&l=3970&fd=552 | 192.243.61.227 | 200 OK | 0 B |
URL GET HTTP/1.1unusuallypilgrim.com/pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Fcss%2Fstyle.css&l=3970&fd=552 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectunusuallypilgrim.com Fingerprint66:7E:85:5B:FA:13:40:79:0E:2C:68:1D:64:CF:4E:83:76:E3:5B:E9 ValidityFri, 13 Dec 2024 21:46:16 GMT - Thu, 13 Mar 2025 21:46:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Fcss%2Fstyle.css&l=3970&fd=552 HTTP/1.1
Host: unusuallypilgrim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Cookie: u_pl24202847=1; uid_id2=a25aaf93-2bed-4c97-af6a-23145d5907b7:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:53 GMT
Content-Length: 0
Connection: keep-alive
Host: unusuallypilgrim.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| unusuallypilgrim.com/pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Fjs%2Fscript.js&l=5287&fd=478 | 192.243.61.227 | 200 OK | 0 B |
URL GET HTTP/1.1unusuallypilgrim.com/pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Fjs%2Fscript.js&l=5287&fd=478 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectunusuallypilgrim.com Fingerprint66:7E:85:5B:FA:13:40:79:0E:2C:68:1D:64:CF:4E:83:76:E3:5B:E9 ValidityFri, 13 Dec 2024 21:46:16 GMT - Thu, 13 Mar 2025 21:46:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.50.2194&tmpl=482&u=https%3A%2F%2Fcdn.creative-stat1.com%2Fsb%2Fnotifications%2Fdating%2Fwhatsapp%2Fmulti%2Fwindows%2Fwhatsapp-message%2Fjs%2Fscript.js&l=5287&fd=478 HTTP/1.1
Host: unusuallypilgrim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Cookie: u_pl24202847=1; uid_id2=a25aaf93-2bed-4c97-af6a-23145d5907b7:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:53 GMT
Content-Length: 0
Connection: keep-alive
Host: unusuallypilgrim.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18536, version 1.0 Hash8eff0b8045fd1959e117f85654ae7770 227fee13ceb7c410b5c0bb8000258b6643cb6255 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Dec 2024 19:08:18 GMT
expires: Sat, 20 Dec 2025 19:08:18 GMT
cache-control: public, max-age=31536000
age: 232116
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| unusuallypilgrim.com/pixel/sbs?c=1 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1unusuallypilgrim.com/pixel/sbs?c=1 IP172.240.108.68:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectunusuallypilgrim.com Fingerprint66:7E:85:5B:FA:13:40:79:0E:2C:68:1D:64:CF:4E:83:76:E3:5B:E9 ValidityFri, 13 Dec 2024 21:46:16 GMT - Thu, 13 Mar 2025 21:46:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: unusuallypilgrim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Cookie: u_pl24202847=1; uid_id2=a25aaf93-2bed-4c97-af6a-23145d5907b7:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:54 GMT
Content-Length: 0
Connection: keep-alive
Host: unusuallypilgrim.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| unusuallypilgrim.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu3ixePEhCPAVhUA8K7mz3TPf8MIdgjCshaxISQ7xIqF89W25NV6eqa3p2TsGA5Dj6F%2FR%2Bs8miBn%2F8AYYwG%2FCwIOyIhz24%2F4SQs8y4OPoO%2Fd73vtfFV9%2Brr3b9CWnC0%2BMrn5iR0pquJ%2FWw9s5nUXSxtqkyP6wNO617rfhizQ7e77bq4bu1jyXfNuuNMArDKIxqG8rK1AzX5yRU%2FrQb1bthPW7UoyTG0P4fOx%2FA0QBicELOQYnZ6ovgPBSfIuv%2FdEW67cLk733U95oWxmIg9u9k25kpM%2FSXZWoDpNn%2B6TSMO9p4BpM9XsiFGfw7yNSMBL8%2BA8v2T0WCDfYWOpmGzMDEqygHU0g9haJTcPMQShwRgAtcv4Gs%2F%2BS6sSXd%2BYelc3ZGVl%2F%2BBVXOyOqf55H1f7is1bB222hfKJM5DNMKajiF6k2R%2BwMUowCqPAAvvoQSv5H1l5vI%2Bns3nDZQ4vht2kgoTbvNtQaTYi3m3fYaTVt0rdGM4kQk3bDN2guDlJpCpVNoOQZ1K%2FAugFcBfBrA5wH64rjGoyhqh4LTsNPlvCnakrVEGNF2GtEobHXg%2BfwOYxT5GFyPwe0D5PYBttXXR8k5WP8cbquCEwFcQTAQFUpJUDqCkhKUiqAsCMpB9Vho13DVE6GdZ9FpbpzmZjUxRW%2BXPjZFT2YE1I5hRbWn8vvuIXhxZjJK3ecTkzqxm5%2BQs3Nfg%2FvX72FbHtdkHMWdJIpazaakUdgRcSxDypJmkoRSxgmcqqDcCqgLMFIzcun5a8jVjNSuHYLRAzh9AK4ugPo3QMsKdKvCKPsx81J4Tudrqg93RhCmQl6sotgJdvUJubBY7t03tyD5ITkNcFshtxW%2BUC8IevrR5JYpyd4tUzry8428UH01Wpx4u6CFfOW7a3KnNFZcveLG337A58S8fPqpdMUmzYTKeo58f1kJIe2GsVySX666u5Ld9G7rsreZzzdvfrhxtZ9b6Zwy2RRUHb3VAFczcvaPO4sXHb1OoOwU1lfo%2B6VSZabg%2BQO4fNlzhsDqJWZ5gNJXE9tgy6ZWBFouMWUV3H8wW9YTS%2Bd%2FU1Xtukfo2RXQ4iGyfoWBrTDQFagew%2FkzkyK3h5d%2Bby4CTK9MmLYre0xb%2Fc3C5PmnB6eOa81QtJlMZZvJOIlTyQVLEhbylLOm6HQ4CjfrqWu3%2Fw4AAP%2F%2FazSCzKsEAAA%3D | 192.243.61.227 | 200 OK | 7 B |
URL GET HTTP/1.1unusuallypilgrim.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu3ixePEhCPAVhUA8K7mz3TPf8MIdgjCshaxISQ7xIqF89W25NV6eqa3p2TsGA5Dj6F%2FR%2Bs8miBn%2F8AYYwG%2FCwIOyIhz24%2F4SQs8y4OPoO%2Fd73vtfFV9%2Brr3b9CWnC0%2BMrn5iR0pquJ%2FWw9s5nUXSxtqkyP6wNO617rfhizQ7e77bq4bu1jyXfNuuNMArDKIxqG8rK1AzX5yRU%2FrQb1bthPW7UoyTG0P4fOx%2FA0QBicELOQYnZ6ovgPBSfIuv%2FdEW67cLk733U95oWxmIg9u9k25kpM%2FSXZWoDpNn%2B6TSMO9p4BpM9XsiFGfw7yNSMBL8%2BA8v2T0WCDfYWOpmGzMDEqygHU0g9haJTcPMQShwRgAtcv4Gs%2F%2BS6sSXd%2BYelc3ZGVl%2F%2BBVXOyOqf55H1f7is1bB222hfKJM5DNMKajiF6k2R%2BwMUowCqPAAvvoQSv5H1l5vI%2Bns3nDZQ4vht2kgoTbvNtQaTYi3m3fYaTVt0rdGM4kQk3bDN2guDlJpCpVNoOQZ1K%2FAugFcBfBrA5wH64rjGoyhqh4LTsNPlvCnakrVEGNF2GtEobHXg%2BfwOYxT5GFyPwe0D5PYBttXXR8k5WP8cbquCEwFcQTAQFUpJUDqCkhKUiqAsCMpB9Vho13DVE6GdZ9FpbpzmZjUxRW%2BXPjZFT2YE1I5hRbWn8vvuIXhxZjJK3ecTkzqxm5%2BQs3Nfg%2FvX72FbHtdkHMWdJIpazaakUdgRcSxDypJmkoRSxgmcqqDcCqgLMFIzcun5a8jVjNSuHYLRAzh9AK4ugPo3QMsKdKvCKPsx81J4Tudrqg93RhCmQl6sotgJdvUJubBY7t03tyD5ITkNcFshtxW%2BUC8IevrR5JYpyd4tUzry8428UH01Wpx4u6CFfOW7a3KnNFZcveLG337A58S8fPqpdMUmzYTKeo58f1kJIe2GsVySX666u5Ld9G7rsreZzzdvfrhxtZ9b6Zwy2RRUHb3VAFczcvaPO4sXHb1OoOwU1lfo%2B6VSZabg%2BQO4fNlzhsDqJWZ5gNJXE9tgy6ZWBFouMWUV3H8wW9YTS%2Bd%2FU1Xtukfo2RXQ4iGyfoWBrTDQFagew%2FkzkyK3h5d%2Bby4CTK9MmLYre0xb%2Fc3C5PmnB6eOa81QtJlMZZvJOIlTyQVLEhbylLOm6HQ4CjfrqWu3%2Fw4AAP%2F%2FazSCzKsEAAA%3D IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerLet's Encrypt Subjectunusuallypilgrim.com Fingerprint66:7E:85:5B:FA:13:40:79:0E:2C:68:1D:64:CF:4E:83:76:E3:5B:E9 ValidityFri, 13 Dec 2024 21:46:16 GMT - Thu, 13 Mar 2025 21:46:15 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu3ixePEhCPAVhUA8K7mz3TPf8MIdgjCshaxISQ7xIqF89W25NV6eqa3p2TsGA5Dj6F%2FR%2Bs8miBn%2F8AYYwG%2FCwIOyIhz24%2F4SQs8y4OPoO%2Fd73vtfFV9%2Brr3b9CWnC0%2BMrn5iR0pquJ%2FWw9s5nUXSxtqkyP6wNO617rfhizQ7e77bq4bu1jyXfNuuNMArDKIxqG8rK1AzX5yRU%2FrQb1bthPW7UoyTG0P4fOx%2FA0QBicELOQYnZ6ovgPBSfIuv%2FdEW67cLk733U95oWxmIg9u9k25kpM%2FSXZWoDpNn%2B6TSMO9p4BpM9XsiFGfw7yNSMBL8%2BA8v2T0WCDfYWOpmGzMDEqygHU0g9haJTcPMQShwRgAtcv4Gs%2F%2BS6sSXd%2BYelc3ZGVl%2F%2BBVXOyOqf55H1f7is1bB222hfKJM5DNMKajiF6k2R%2BwMUowCqPAAvvoQSv5H1l5vI%2Bns3nDZQ4vht2kgoTbvNtQaTYi3m3fYaTVt0rdGM4kQk3bDN2guDlJpCpVNoOQZ1K%2FAugFcBfBrA5wH64rjGoyhqh4LTsNPlvCnakrVEGNF2GtEobHXg%2BfwOYxT5GFyPwe0D5PYBttXXR8k5WP8cbquCEwFcQTAQFUpJUDqCkhKUiqAsCMpB9Vho13DVE6GdZ9FpbpzmZjUxRW%2BXPjZFT2YE1I5hRbWn8vvuIXhxZjJK3ecTkzqxm5%2BQs3Nfg%2FvX72FbHtdkHMWdJIpazaakUdgRcSxDypJmkoRSxgmcqqDcCqgLMFIzcun5a8jVjNSuHYLRAzh9AK4ugPo3QMsKdKvCKPsx81J4Tudrqg93RhCmQl6sotgJdvUJubBY7t03tyD5ITkNcFshtxW%2BUC8IevrR5JYpyd4tUzry8428UH01Wpx4u6CFfOW7a3KnNFZcveLG337A58S8fPqpdMUmzYTKeo58f1kJIe2GsVySX666u5Ld9G7rsreZzzdvfrhxtZ9b6Zwy2RRUHb3VAFczcvaPO4sXHb1OoOwU1lfo%2B6VSZabg%2BQO4fNlzhsDqJWZ5gNJXE9tgy6ZWBFouMWUV3H8wW9YTS%2Bd%2FU1Xtukfo2RXQ4iGyfoWBrTDQFagew%2FkzkyK3h5d%2Bby4CTK9MmLYre0xb%2Fc3C5PmnB6eOa81QtJlMZZvJOIlTyQVLEhbylLOm6HQ4CjfrqWu3%2Fw4AAP%2F%2FazSCzKsEAAA%3D HTTP/1.1
Host: unusuallypilgrim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Cookie: u_pl24202847=1; uid_id2=a25aaf93-2bed-4c97-af6a-23145d5907b7:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 23 Dec 2024 11:36:54 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: unusuallypilgrim.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8503bd8a283b4b66d94b3148203c8899
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.show-sb.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/index.html | 172.67.170.115 | 200 OK | 11 kB |
URL GET HTTP/2cdn.show-sb.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/index.html IP172.67.170.115:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectshow-sb.com Fingerprint3C:A5:E1:7B:2D:A7:39:E4:57:14:B9:37:8B:15:0F:75:62:48:17:1A ValidityMon, 16 Dec 2024 21:27:23 GMT - Sun, 16 Mar 2025 22:25:53 GMT
File typeHTML document, Unicode text, UTF-8 text Hash6154ca4b0bf5e7d088ea4fce6d4f3ddd a0df50292ac4e9ca364b79bce798b491517d4ba2 b6fd5419001e07c06a9b9513e5d3d2a2fd850d668727f8ad31e81ff3231200c3
GET /sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/index.html HTTP/1.1
Host: cdn.show-sb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:52 GMT
content-type: text/html
last-modified: Fri, 19 Jan 2024 14:24:08 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xa%2BFb3w%2Fyd0D8ryotEbuQ40Y%2B64ajedS17wqzCiT9joilsRsBrbxs29HdoaXFm53apt4g%2FbFuxEXjyt%2BIr3SnJSSv%2FVNltiCZth0qw7Bz7KB8n9tcdsaW1ZMk4GeeE1ELzU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f680e6fffebb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=514&min_rtt=448&rtt_var=138&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3273&recv_bytes=1260&delivery_rate=7350253&cwnd=254&unsent_bytes=0&cid=31628e1c7cd6cd9c&ts=489&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 216.58.207.234 | 200 OK | 7.2 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP216.58.207.234:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint30:E5:7E:29:A5:A1:81:DB:C8:A8:49:80:67:40:12:AB:30:C0:34:8D ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File typeASCII text, with very long lines (7364), with no line terminators Hashe082b2c49137015642f9e60e58c34f87 02ab175bf4bcab25a605a280bb2405ea233d3085 654f6d483488078da3ff22c940040ea8a603172ff7d43d21a57b213976e06ec5
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 23 Dec 2024 11:36:53 GMT
date: Mon, 23 Dec 2024 11:36:53 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/css/animate.css | 188.114.96.1 | 200 OK | 79 kB |
URL GET HTTP/2cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/css/animate.css IP188.114.96.1:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcreative-stat1.com FingerprintA5:93:3C:16:BF:CC:79:91:37:A7:7D:E8:8B:8D:A8:B3:FD:F9:5E:DB ValidityMon, 16 Dec 2024 18:24:51 GMT - Sun, 16 Mar 2025 19:23:03 GMT
Hash3d4123dbfb33d27a5cfdfcfa91df6783 e7d0eeeec54b848f0bc3da8685fa3bc88429d660 cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887
GET /sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/css/animate.css HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:53 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:24:08 GMT
etag: W/"65aa8608-13361"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZzaDkVqllEGmZhDoTwhMrwu4eWR9772txpDINRWXSpRxllMPp4J%2BUKINhqcLaRi91Gjgzwmy59Y8Mji5jiMSuPvWUNkhrQykIJsN8l2vuHBOajRf5lCDo1Xy2iWdRH0NWBpfhOW%2F5DR2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f680e739cd75690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1174&min_rtt=492&rtt_var=696&sent=58&recv=30&lost=0&retrans=1&sent_bytes=66387&recv_bytes=1912&delivery_rate=15162303&cwnd=245&unsent_bytes=0&cid=a30eed01718f36c6&ts=472&x=0"
X-Firefox-Spdy: h2
|
|
| cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/img/close.svg | 188.114.96.1 | 200 OK | 1.3 kB |
URL GET HTTP/2cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/img/close.svg IP188.114.96.1:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcreative-stat1.com FingerprintA5:93:3C:16:BF:CC:79:91:37:A7:7D:E8:8B:8D:A8:B3:FD:F9:5E:DB ValidityMon, 16 Dec 2024 18:24:51 GMT - Sun, 16 Mar 2025 19:23:03 GMT
File typeSVG Scalable Vector Graphics image Hash06b58be66025256a4e1785c478b1aeac aa55ba2feb6939c89f013c53818fa5575d050ae7 3817611e4087897cd053caf3ca74fa333cba3631976499a735497b1eae133b78
GET /sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/img/close.svg HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:53 GMT
content-type: image/svg+xml
last-modified: Fri, 19 Jan 2024 14:24:08 GMT
etag: W/"65aa8608-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 209581
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ah6ScClg7b0ST8jKfP%2B4cBoly5Jtv%2FgFdqbYyuC7%2F7YHj5%2Bokd1JrxJGxxuH1w2YMbHZICsfllcRrEUAOdb8fxtQWdnS7Ymp1kQnCweqDL8mzrex86NaLwMyw9XrkPGbvRbMEg9CSnKr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f680e742d505690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=640&min_rtt=504&rtt_var=265&sent=7&recv=12&lost=0&retrans=0&sent_bytes=3219&recv_bytes=1414&delivery_rate=7502590&cwnd=243&unsent_bytes=0&cid=a30eed01718f36c6&ts=112&x=0"
X-Firefox-Spdy: h2
|
|
| cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/css/style.css | 188.114.96.1 | 200 OK | 4.0 kB |
URL GET HTTP/2cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/css/style.css IP188.114.96.1:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcreative-stat1.com FingerprintA5:93:3C:16:BF:CC:79:91:37:A7:7D:E8:8B:8D:A8:B3:FD:F9:5E:DB ValidityMon, 16 Dec 2024 18:24:51 GMT - Sun, 16 Mar 2025 19:23:03 GMT
File typeASCII text, with very long lines (4210), with no line terminators Hashc736b736a3eda80f9d17ce9bb7f892ac 84de4bc57728522f6e2f9e0538810c2e43e4e633 8b963a3ac725568d35cb0f53b3ab9a0b6a2d538feeb2190db497f4902b772dd4
GET /sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/css/style.css HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:53 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:24:08 GMT
etag: W/"65aa8608-f82"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ipoZA4loO8h3CdOyKDxSEY%2BzYAFI5FvYKN%2BguRKftPg5FZT0JT%2BMkYikJRUj5WzQ94T7SiaT4ALqmgRWWIpBg2uwTbZe4%2FXFxnVvLG1a2SBg1XU6gJzJ8N9ptg%2F%2FC5%2B87o1RTY%2Fiw91c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f680e73ace65690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1024&min_rtt=492&rtt_var=653&sent=63&recv=32&lost=0&retrans=1&sent_bytes=71793&recv_bytes=1912&delivery_rate=15162303&cwnd=245&unsent_bytes=0&cid=a30eed01718f36c6&ts=506&x=0"
X-Firefox-Spdy: h2
|
|
| cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/js/script.js | 188.114.96.1 | 200 OK | 6.1 kB |
URL GET HTTP/2cdn.creative-stat1.com/sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/js/script.js IP188.114.96.1:443
Requested byhttps://www.nueducation.xyz/p/nu-suggestions.html?m=1 CertificateIssuerGoogle Trust Services Subjectcreative-stat1.com FingerprintA5:93:3C:16:BF:CC:79:91:37:A7:7D:E8:8B:8D:A8:B3:FD:F9:5E:DB ValidityMon, 16 Dec 2024 18:24:51 GMT - Sun, 16 Mar 2025 19:23:03 GMT
File typeUnicode text, UTF-8 text, with very long lines (5704), with no line terminators Hashf4113a12e7d99b8a787c6d9ecb57efc2 c4f4ff86fea6dd5d3e0ab65d06fb9dc6fecde21a 54296ad6cbed5582f4f9e17fb3c999d6c5da75a20e81535bb7409273a7237ba1
GET /sb/notifications/dating/whatsapp/multi/windows/whatsapp-message/js/script.js HTTP/1.1
Host: cdn.creative-stat1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nueducation.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.nueducation.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Dec 2024 11:36:53 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:24:08 GMT
etag: W/"65aa8608-17c3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GQJD1zeoEUwP61KD3NQw3lbbJ1DfvfgkZnvvWm%2FX%2BMHpA9caVk2goAmeYHDwlsOTeuzV97CHBNnch6BEkj%2FIJRloIogLvmEA4SeNNT9b0t3fpLhG5biEinuMlucKehm7FSVNG99aZydA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f680e75bef85690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4727&min_rtt=492&rtt_var=7730&sent=66&recv=34&lost=0&retrans=1&sent_bytes=73693&recv_bytes=1912&delivery_rate=15162303&cwnd=245&unsent_bytes=0&cid=a30eed01718f36c6&ts=829&x=0"
X-Firefox-Spdy: h2
|
|