urlquery - report: sender3.zohoinsights.com/ck1/2d6f.327230a/1eaa06a0-0ea7-11ed-a207-525400fa05f6/de7da0fc346bf01efc530560d1682360fbf55a30/2?e=JCiKkRy/XJYflfkLPa9tDqgsk6peHiQJsrMBzsuuF6DgPYZmDMNgYM7StaJLK3UK

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	Sent bytes	Received bytes	IP
r3.o.lencr.org (7)	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	2366	6204	23.36.77.32
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-10T05:10:00Z	782	2374	34.102.187.140
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	413	5844	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	333	229	34.117.237.239
scontent-arn2-2.xx.fbcdn.net (2)	87860	2018-12-13T20:32:03Z	2023-03-10T10:00:27Z	1257	52779	157.240.194.27
img-getpocket.cdn.mozilla.net (4)	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	2164	35754	34.120.237.76
video-arn2-1.xx.fbcdn.net (6)	156173	2017-01-30T05:52:03Z	2023-03-10T15:03:07Z	4296	240627	31.13.72.14
ocsp.digicert.com (4)	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	1364	3188	93.184.220.29
sender3.zohoinsights.com (2)	0	2019-05-22T16:55:46Z	2023-03-10T01:19:55Z	1136	1033	136.143.190.89
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	606	127	44.240.207.158
static.xx.fbcdn.net (12)	661	2012-12-01T14:12:13Z	2023-03-10T05:12:12Z	5702	501120	31.13.72.12
www.facebook.com (1)	99	2012-05-21T02:23:41Z	2021-02-04T00:31:35Z	462	181033	31.13.72.36

Scan Date	Severity	Indicator	Comment
2022-11-11	medium	zohoinsights.com	Sinkholed
2022-11-11	medium	zohoinsights.com	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-05-16 21:15:51 UTC	0 - 6 - 0	sender9.zohoinsights-crm.com/ck1/2d6f.327230a (...)	136.143.190.89
2023-05-14 06:59:47 UTC	0 - 0 - 1	sender.zohoinsights.com/ck1/*	136.143.190.89
2023-05-14 06:58:46 UTC	0 - 0 - 1	sender.zohoinsights.com/ck1/2d6f.327230a/	136.143.190.89
2023-05-12 18:52:12 UTC	0 - 0 - 3	sender5.zohoinsights.com/ck1/2d6f.327230a/c54 (...)	136.143.190.89
2023-05-12 17:56:03 UTC	0 - 0 - 1	sender.zohoinsights.com/ck1/2d6f.327230a/bf7d (...)	136.143.190.89

Date	UQ / IDS / BL	URL	IP
2023-05-31 11:30:23 UTC	0 - 1 - 0	rphyb-zgpl.maillist-manage.com/ua/upc?upd=1ef (...)	136.143.190.68
2023-05-30 14:25:08 UTC	0 - 2 - 0	sfrg-zgpl.maillist-manage.com/click/1efb4845b (...)	136.143.190.68
2023-05-29 08:31:21 UTC	0 - 11 - 0	cped-cmpzourl.maillist-manage.com/ua/cmpredir (...)	136.143.190.68
2023-05-28 01:29:03 UTC	0 - 0 - 1	blzhc-zgpl.maillist-manage.com/click/1f1fc954 (...)	136.143.190.68
2023-05-27 20:56:00 UTC	0 - 7 - 0	gole-zgph.maillist-manage.net/click/1273a86dd (...)	136.143.190.68

Date	UQ / IDS / BL	URL	IP
2023-05-14 06:59:47 UTC	0 - 0 - 1	sender.zohoinsights.com/ck1/*	136.143.190.89
2023-05-14 06:58:46 UTC	0 - 0 - 1	sender.zohoinsights.com/ck1/2d6f.327230a/	136.143.190.89
2023-05-12 18:52:12 UTC	0 - 0 - 3	sender5.zohoinsights.com/ck1/2d6f.327230a/c54 (...)	136.143.190.89
2023-05-12 17:56:03 UTC	0 - 0 - 1	sender.zohoinsights.com/ck1/2d6f.327230a/bf7d (...)	136.143.190.89
2023-05-12 00:27:16 UTC	0 - 0 - 1	sender9.zohoinsights.com/ck1/2d6f.327230a/609 (...)	136.143.190.89

Date	UQ / IDS / BL	URL	IP
2023-04-04 15:46:17 UTC	0 - 0 - 3	gozomosaic.com/memento-trophy/	92.251.57.62
2022-12-30 02:51:44 UTC	0 - 0 - 1	gs.orenhofen.de/nichestags/facial.html	92.205.64.100
2022-12-28 02:53:05 UTC	0 - 0 - 1	gs.orenhofen.de/porn-tube/Tube8/pdf/pdf/mitgl (...)	92.205.64.100
2022-12-24 14:49:06 UTC	0 - 0 - 1	primesolutionsz.com/campaigns/ok850s08pp5ca/t (...)	172.67.156.186
2022-12-16 03:37:59 UTC	0 - 0 - 1	gs.orenhofen.de/syns/compilation/images/satzu (...)	92.205.64.100

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF" Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13478 Expires: Fri, 11 Nov 2022 22:27:32 GMT Date: Fri, 11 Nov 2022 18:42:54 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3d0727e32cd103ddd4b73f28c81758aa Sha1: 197a7bf43d63723fc532c23c6dced68d5cc36652 Sha256: d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3455 Cache-Control: max-age=146768 Date: Fri, 11 Nov 2022 18:42:54 GMT Etag: "636e247f-1d7" Expires: Sun, 13 Nov 2022 11:29:02 GMT Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT Server: ECS (ska/F715) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 4edf853c470fcec0ab277c78527f3c2d Sha1: de93530ce15337e671c488d9fe05e7091d4956f0 Sha256: b9d7976b398b1243ff8a571ddd3975d3a1317d69101061bdb1a755b3b56620e6
GET /ck1/2d6f.327230a/1eaa06a0-0ea7-11ed-a207-525400fa05f6/de7da0fc346bf01efc530560d1682360fbf55a30/2?e=JCiKkRy/XJYflfkLPa9tDqgsk6peHiQJsrMBzsuuF6DgPYZmDMNgYM7StaJLK3UK HTTP/1.1 Host: sender3.zohoinsights.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	136.143.190.89 HTTP/1.1 301 Moved Permanently Content-Type: text/html Server: ZGS Date: Fri, 11 Nov 2022 18:42:54 GMT Content-Length: 134 Connection: keep-alive Location: https://sender3.zohoinsights.com/ck1/2d6f.327230a/1eaa06a0-0ea7-11ed-a207-525400fa05f6/de7da0fc346bf01efc530560d1682360fbf55a30/2?e=JCiKkRy/XJYflfkLPa9tDqgsk6peHiQJsrMBzsuuF6DgPYZmDMNgYM7StaJLK3UK --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 134 Md5: 4aa7a432bb447f094408f1bd6229c605 Sha1: 1965c4952cc8c082a6307ed67061a57aab6632fa Sha256: 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a Blocklists: - quad9: Sinkholed
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 11 Nov 2022 17:43:54 GMT cache-control: public,max-age=3600 age: 3540 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 4736bac84ca28f2b1e961159fb4ea098 Sha1: 1319612979f53896fcfeacd4215c2715d4951e4c Sha256: 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "17894427C471F7FA02CA274795DC55DF1BFC99D7BD83F9EE36249394035110FD" Last-Modified: Wed, 09 Nov 2022 02:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2384 Expires: Fri, 11 Nov 2022 19:22:38 GMT Date: Fri, 11 Nov 2022 18:42:54 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2b57492bf85f4ae6abbd1641b17dc9ab Sha1: 008e71ec05d47bf025ca64e17da2ea1bd8e71111 Sha256: 17894427c471f7fa02ca274795dc55df1bfc99d7bd83f9ee36249394035110fd
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: zuOL38/WMYdn4mr85nS0snhYxCw+yRdiiPVvIgRoaqIvHWdXMiGEKRsmJEhtKtBpBY3zep0a0dI= x-amz-request-id: XFZJHA5ME3P1Y6YG content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 11 Nov 2022 17:49:54 GMT age: 3180 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 67d5a988edcda47bc3b3b3f65d32b4b6 Sha1: d4f0e0da8b3690cc7da925026d3414b68c7d954f Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 11 Nov 2022 18:42:54 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "51C6F54E0945FBF6D5FFB3A7D7A90CFE7142157AB7C5C089AAB67E2028597DDD" Last-Modified: Thu, 10 Nov 2022 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17690 Expires: Fri, 11 Nov 2022 23:37:45 GMT Date: Fri, 11 Nov 2022 18:42:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f268300ef12276f3d307767d6784c75f Sha1: 8734807323e9df2f563ecf8875f885b4563a189a Sha256: 51c6f54e0945fbf6d5ffb3a7d7a90cfe7142157ab7c5c089aab67e2028597ddd
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 11 Nov 2022 18:24:58 GMT cache-control: public,max-age=3600 age: 1077 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /ck1/2d6f.327230a/1eaa06a0-0ea7-11ed-a207-525400fa05f6/de7da0fc346bf01efc530560d1682360fbf55a30/2?e=JCiKkRy/XJYflfkLPa9tDqgsk6peHiQJsrMBzsuuF6DgPYZmDMNgYM7StaJLK3UK HTTP/1.1 Host: sender3.zohoinsights.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	136.143.190.89 HTTP/1.1 302 Server: ZGS Date: Fri, 11 Nov 2022 18:42:55 GMT Content-Length: 0 Connection: keep-alive X-Content-Type-Options: nosniff X-XSS-Protection: 1 Set-Cookie: 8a231755c9=31a2ce54685c927afdcdaeb4c1559997; Path=/ tm_csrf_cookie=0883ed1f-eff0-475f-a424-08749a8a5ef6;path=/;SameSite=None;Secure;priority=high _zcsr_tmp=0883ed1f-eff0-475f-a424-08749a8a5ef6;path=/;SameSite=Strict;Secure;priority=high X-Frame-Options: SAMEORIGIN Location: https://www.facebook.com/rosemarierecords Strict-Transport-Security: max-age=63072000 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Blocklists: - quad9: Sinkholed
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6190 Cache-Control: max-age=144427 Date: Fri, 11 Nov 2022 18:42:55 GMT Etag: "636e10ac-1d7" Expires: Sun, 13 Nov 2022 10:50:02 GMT Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT Server: ECS (ska/F715) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: f7ff606fbc8634c858bbc04b69f55cf6 Sha1: 2441de2cba649239efd0dae7a878d7ef2245c0b4 Sha256: 95154e0dbb7e827b8f893cc141f986c29634ead618256470d753429aa65a0548
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5733 Cache-Control: max-age=123433 Date: Fri, 11 Nov 2022 18:42:55 GMT Etag: "636dc073-1d7" Expires: Sun, 13 Nov 2022 05:00:08 GMT Last-Modified: Fri, 11 Nov 2022 03:24:35 GMT Server: ECS (ska/F715) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: d84a911b820c140cf4e3da2af665b63c Sha1: fbee3b2193231404844c0ecb6e8f72d02d30e997 Sha256: 7f0381e9de205bbe3e0cab3e7e40afced0d58bb25b8df4715d1406c702624d14
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 3aHmiu1RMg/QbSjfKd7PBw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	44.240.207.158 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: Ls8EoroMZjAEr4zEEIEkwRnFlZA= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5734 Cache-Control: max-age=123433 Date: Fri, 11 Nov 2022 18:42:56 GMT Etag: "636dc073-1d7" Expires: Sun, 13 Nov 2022 05:00:09 GMT Last-Modified: Fri, 11 Nov 2022 03:24:35 GMT Server: ECS (ska/F715) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: d84a911b820c140cf4e3da2af665b63c Sha1: fbee3b2193231404844c0ecb6e8f72d02d30e997 Sha256: 7f0381e9de205bbe3e0cab3e7e40afced0d58bb25b8df4715d1406c702624d14
GET /rsrc.php/v3/yN/r/61nCrAl7vPC.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Wed, 08 Nov 2023 02:07:08 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: bOu/nqdAumgjuinBQOLRug== x-fb-debug: DSeXwnSdL8w8/1uRqSCP1UL+zrri+kjdVG+KynnGLX2fZ9sPEJ4YZ1+AhXyDeVTixRld5ts5Uem1iWcpQc25bg== priority: u=3,i content-length: 65894 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (18622) Size: 65894 Md5: 6cebbf9ea740ba6823ba29c140e2d1ba Sha1: 7599f1992800176a79efed968bb53e4e2ec0551b Sha256: ea0ec797ef5ef637989111b72a1187ebf072bebc3e2fac75fe04ce1821a69dd0
GET /rsrc.php/v3/yW/r/mN85asyNf-g.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Fri, 03 Nov 2023 00:16:38 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: VHssTvmZaSBzzV7nL32LHA== x-fb-debug: QtT7LtKtItrX+h8PHAXN42c17rdoLOZVmqRuPKQ15NyRsLu3RzzcMaaF0y5AUufk8rkxBgVTOcsXN9UEGvujrQ== priority: u=3,i content-length: 8276 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (3779) Size: 8276 Md5: 547b2c4ef999692073cd5ee72f7d8b1c Sha1: df327589f5d1cf001ad0e8cae1705cc78e776587 Sha256: c2b657218a3bb8e549480b2b48eaa6e444b764a8a0f51953e883b71847ab3614
GET /rsrc.php/v3/y2/r/j3MAwLgD5Lv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Sat, 11 Nov 2023 00:35:14 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: yht0+pPdX+A1dquz2E5EgQ== x-fb-debug: R8UFEPyprH5E8YJxwj0yeQSk1oD0rg3VEw7i2DaGxAz84ikNix4xcjT9p8byDgHtPNAXTb9UgKGDL5tUuTCLmw== content-length: 8221 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (7867) Size: 8221 Md5: ca1b74fa93dd5fe03576abb3d84e4481 Sha1: 2fa0e107f3a19a352f87db97ad258765b7aa67b4 Sha256: e69408b1d5dba663a74464f542514afb3c7f546a86177a4370b920564811224a
GET /rsrc.php/v3/ym/l/0,cross/Un0FR4ontc7.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	31.13.72.12 HTTP/2 200 OK content-type: text/css; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Sat, 11 Nov 2023 05:29:28 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: BHJpsRGapcdmaTbOS+MPbw== x-fb-debug: UlXrK+8auNvbfiJiE/mr4DKgrCKb3T18ELU1YhaiZCjEhawKdTwyI9N5URCMYETzbthwM6mQ8TwajvOTBgwTYA== content-length: 128497 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (52307) Size: 128497 Md5: 047269b1119aa5c7666936ce4be30f6f Sha1: 780b181a89679c0e1a93df0a9b3d057fbef732c8 Sha256: 4360fc0f1ad7f8a48972b0b71e944be406d632377e91b5982adb124a06cf384f
GET /rsrc.php/v3/y_/r/vxYPrdhdOH5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Wed, 08 Nov 2023 01:28:06 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: TuIbV1b/U9p8i0po4dJcIw== x-fb-debug: Sa3wD2OfaZS8xnQThnRKbxLZuogYQanCBZdZ4UNvj7FwICdN0SXOoX8FCynOPB/qysxmrwJk4DSBu21tB3vpzw== priority: u=3,i content-length: 5237 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (9358) Size: 5237 Md5: 4ee21b5756ff53da7c8b4a68e1d25c23 Sha1: 98ded304cd0fd8cc28a8b40f172a4a759b949e7a Sha256: ea11b67b5b4cd8206e3a5d369391c1721448d146f32fda93d32141cd5c00bf4d
GET /rsrc.php/v3idBq4/yp/l/en_US/Qy5ggD59FQd.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Wed, 08 Nov 2023 02:06:23 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: U7am3yfisiK6t84RVZj2nQ== x-fb-debug: JCkVEZ+TMPU9dC4R0isA+YbT5zg4+Q23egf9OftdrM52XNPDttbnTf94T9rHJh1eR/R6rzYiXiu91Lk2zk8tJA== content-length: 11610 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (6053) Size: 11610 Md5: 53b6a6df27e2b222bab7ce115598f69d Sha1: 57d0b21c3985910d848286b63cd28a68d9b8bd69 Sha256: 8a4f8fc756ce84ecece87bb3a914ba48ba363b7aa1b710d7c37933ff86a8c62f
GET /rsrc.php/v3i-ty4/yv/l/en_US/D8N8Li45c9u.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Thu, 09 Nov 2023 00:26:57 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: LncIa6y3P/TldNG3G1RypA== x-fb-debug: 3iEdz1PK+b7CUgNEAPgGtek7JRNkr+5+usWDKIK/Zb9RLKYNR9NxUrmm8BU2AXCKzyU96i734SgnA9mCAZxXBw== priority: u=3,i content-length: 81383 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (4633) Size: 81383 Md5: 2e77086bacb73ff4e574d1b71b5472a4 Sha1: b2bf4f5614ed251d3c728b13d48b0238bfb9512d Sha256: 67a8db3e3ff884863da6a40feb89123b6d5f33900b99ce59534fc7d3e15629e8
GET /rsrc.php/v3iNzS4/yh/l/en_US/gXIkvKySvHd4TMVbUB_6zocHLS71p1A6ySVJwVCvwqmNIOECMYAMuXOeldXvkHr9JoFnnPdRIKPhjat5K49wedtgLeD1yGR54aNFtZeICTtUi_PCPLoNHL-WfBz98ql31qLJ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Sat, 11 Nov 2023 11:52:45 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: 6DbhpCkohgCO40vYj6pkWA== x-fb-debug: zCTLyOYth4QIcCN13u8UBii9ntyIW5JbIJ0+0mGbq4wbAPuxXNbc9aK5SFYufvP8Ena5mYEeU9NuSDDcCG9EOQ== content-length: 100040 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65436) Size: 100040 Md5: e836e1a4292886008ee34bd88faa6458 Sha1: 6fd04abce137c6b6a1918bfbc788ebcf2dc3e730 Sha256: 16ad38966de2ea25be3e241b8d33d28476039dd1f7a52b9f7652ffa64401a7ca
GET /rsrc.php/v3iQbs4/yX/l/en_US/MgQPUiIMUSl.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Sat, 11 Nov 2023 01:48:34 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: 5hJWBmqLKbY5fboiTYU+2g== x-fb-debug: /FyPYuJPRzXquKSwhn3cYv1TJ+xL5sgyJEXINIUfe5oC/eiL6RF1u4XnFlqPqg8W1iipBCy2kSWzsmODdueuzQ== priority: u=3,i content-length: 17720 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (45939) Size: 17720 Md5: e61256066a8b29b6397dba224d853eda Sha1: 0e408d44bd36ee010f812f0696af15bec09ab357 Sha256: f9f4e78308d75e5e82c3f167ab8e113b4ac98fc31523ad3a25c1cce8444a9baa
GET /rsrc.php/v3ipnB4/yx/l/en_US/ZTuz1TQX43CJHXoMu2P_nLYfCFtW6S_mUSZ6KPt2bgur2vox9jQhWg54oKVHX2Fz8f783Zm2enzvhYoBPydHQmRqGc8TGL1RzKOhkb5KjQo45u.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Fri, 10 Nov 2023 20:02:12 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: Wc3Q069gin8ByhHxDb26Nw== x-fb-debug: dOxt6298TjBTQ9LcCAJ5DheCwDN4FrVCrUFphXkFYPlIA5k9n+Qxr4EREYWdv9zlyonWj1+3EVfCGl+Ck0aalQ== content-length: 57150 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (46500) Size: 57150 Md5: 59cdd0d3af608a7f01ca11f10dbdba37 Sha1: 88b1420c7dd0fa0ffe532cfabb7a99a0c2bca3ae Sha256: 6039cb06e77927cb36ff7ecb6f8f1e957411c945fc097185ed3eb9cc04b6abe4
GET /v/t39.30808-6/291606517_447819644020042_4811948710508952417_n.png?stp=dst-png_fb50_s320x320&_nc_cat=108&ccb=1-7&_nc_sid=e3f864&_nc_ohc=EQRpQv4sq68AX96haTf&_nc_ht=scontent-arn2-2.xx&oh=00_AfDxKha4thhbdm-6OXHg1jcPqEC9tql0EuRqTLfD2XSGQg&oe=6373A4B5 HTTP/1.1 Host: scontent-arn2-2.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	157.240.194.27 HTTP/2 200 OK content-type: image/png x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS last-modified: Wed, 06 Jul 2022 19:43:44 GMT x-haystack-needlechecksum: 3965435470 x-needle-checksum: 2349376692 content-length: 5657 content-digest: adler32=801290237 timing-allow-origin: * cross-origin-resource-policy: cross-origin access-control-allow-origin: * cache-control: max-age=1209600, no-transform x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT x-fb-edge-debug: _UCUnxY1PiqKGTQdVAouWLIpMDSj5QEZBHREtiTPoeSrj8NIBSkqCzXPGKbYrq5mY_a2FHHsURcxXov3QgLk3FaypKWSLJPgHr2yupd1koc alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced\012- data Size: 5657 Md5: a5a9fd2a714335189f09fdd4880ca383 Sha1: 63291d42cc134d79916895fe883b52f4156b1ed7 Sha256: 6c6af0424b3a40d0b1559d3ea72388c5f430ac1c2f2a670d5e22b91e5d2bc083
GET /v/t39.30808-6/291606517_447819644020042_4811948710508952417_n.png?stp=dst-png_p180x540&_nc_cat=108&ccb=1-7&_nc_sid=e3f864&_nc_ohc=EQRpQv4sq68AX96haTf&_nc_ht=scontent-arn2-2.xx&oh=00_AfAF-Khvy8Abu9pS2H0LWiIMEcMHLAU6wmpXZbrB5gUoPA&oe=6373A4B5 HTTP/1.1 Host: scontent-arn2-2.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	157.240.194.27 HTTP/2 200 OK content-type: image/png x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS last-modified: Wed, 06 Jul 2022 19:43:44 GMT x-haystack-needlechecksum: 3965435470 x-needle-checksum: 2349376692 content-length: 45810 content-digest: adler32=1472560036 timing-allow-origin: * cross-origin-resource-policy: cross-origin access-control-allow-origin: * cache-control: max-age=1209600, no-transform x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT x-fb-edge-debug: _7Fha2yBEeapchWOOGgm99t3kiLQG7YxJDBWQInbeWlqEjjF-Z2AxEsFL8BdnvHVCUUXFDXhXq_yMYwG5sl81jMoPeBCCzSDThgYWCgEpvg alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 960 x 540, 8-bit/color RGB, non-interlaced\012- data Size: 45810 Md5: f3b90046d8ed88f6ad75e6838be4df42 Sha1: 82a612ef4f4166e08645222d83c89540c67d161a Sha256: 10245e1656a7c083efdd1336029c7ff0ca649f6e3b9e45529de217d4e2f856b9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6282 Expires: Fri, 11 Nov 2022 20:27:39 GMT Date: Fri, 11 Nov 2022 18:42:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fb29db48daab83bcaed56b72093619cc Sha1: e0e0a09d729ffb1c41411419768896f1e1eb3346 Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6282 Expires: Fri, 11 Nov 2022 20:27:39 GMT Date: Fri, 11 Nov 2022 18:42:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fb29db48daab83bcaed56b72093619cc Sha1: e0e0a09d729ffb1c41411419768896f1e1eb3346 Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6282 Expires: Fri, 11 Nov 2022 20:27:39 GMT Date: Fri, 11 Nov 2022 18:42:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fb29db48daab83bcaed56b72093619cc Sha1: e0e0a09d729ffb1c41411419768896f1e1eb3346 Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6282 Expires: Fri, 11 Nov 2022 20:27:39 GMT Date: Fri, 11 Nov 2022 18:42:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fb29db48daab83bcaed56b72093619cc Sha1: e0e0a09d729ffb1c41411419768896f1e1eb3346 Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8581 x-amzn-requestid: 385174fe-153f-448f-be5e-9ea3b5757ff9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bZ4u1EYOIAMFncA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-636d6e5e-6084a34f58df22037275e676;Sampled=0 x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT x-amz-cf-pop: YVR50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: MhIq0Vdxah99pPo_O7gkhrq9Nekkxld2lv0955wr0yJzcP3g6LAH8g== via: 1.1 dfc972676b24a6d23251d4f298dfa08c.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google date: Thu, 10 Nov 2022 21:46:56 GMT age: 75361 etag: "e0d1ebb35a16c686eae3d31eb85ac72278459b05" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8581 Md5: 13f7b6eea163326da8c58ae5c09efccd Sha1: e0d1ebb35a16c686eae3d31eb85ac72278459b05 Sha256: 13f2f428acb7806808d957a8167ab2c139a5d0f59798671465717f2b39b914a9
GET /rsrc.php/v3iOKA4/yC/l/en_US/ZS8lSoDd8Q4.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Fri, 10 Nov 2023 23:18:35 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: GDSjiGRpniHtqMNHpH0/hg== x-fb-debug: asOrQeyk+0WdalEiD2nyv1olQr1+eBwCaFTvGw9nPbOSiUCVGKIowr0H2/Y9F7kIHpLcUDhYGtcqsSSKzUSdAQ== priority: u=3,i content-length: 326495 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 8294 Md5: 88c9931a009690991e73c5b37a1aa085 Sha1: 815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0 Sha256: 74e70391889e4b46742033b1d5daccfec415ba2ee999e429d1013fd4a1ebc61a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7dc40a-e47f-44b5-b3b4-87b10cd8669d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10671 x-amzn-requestid: 1b6053eb-64ac-4c24-a750-c1b8cd69157f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bJEh8GxPoAMFhPA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6366b472-56c6a3bc07ec89ab56d4f3bd;Sampled=0 x-amzn-remapped-date: Sat, 05 Nov 2022 19:07:30 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: qJeWGvC4DM_d3k66OHN2V19elou-xoSNkep1BNalBO0NtKyQtAFzNQ== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google date: Fri, 11 Nov 2022 03:31:46 GMT age: 54671 etag: "5fe340bf33ac219f6a3d44810f31d0a8796c83a9" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10671 Md5: e72f32944d6f03e005f7b6f3e87d8c72 Sha1: 5fe340bf33ac219f6a3d44810f31d0a8796c83a9 Sha256: bcdcba30210d276996d0fe749bbfc69d666ae11ddfbfdb57307e4bb4d6e43d1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50b47142-be82-4ddc-85e8-45dc7102abe9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6696 x-amzn-requestid: 19f91da1-beeb-400a-b4c0-059851ca839f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bNeQ_F3doAMFr6A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63687739-2ef73e121ff2c3cf0e95b450;Sampled=0 x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: GgmLFeCzBEuR8gcEDGr8nBYW4xUUkIKZi0m8_TZ5quDeLmkROXm2_g== via: 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google date: Fri, 11 Nov 2022 07:45:28 GMT age: 39449 etag: "7339ad7b4f37cc37cb712207a7b3a5ac9355d9dc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6696 Md5: 90a78b0f806c0c5ef5e7128cc37b2edf Sha1: 7339ad7b4f37cc37cb712207a7b3a5ac9355d9dc Sha256: 770a2247a0f8d6b44c61cecc8a11e9882e4dd39269e181eef52cf6816407022b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f7d2f5-4807-4bbd-a3db-7a239962aca5.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5583 x-amzn-requestid: e844f42a-e87e-4e61-8c97-137c07c5ae28 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bNeQ9Ho7IAMF5_g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63687739-62c44d2f7d23632e74895bd8;Sampled=0 x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: uHlIN1IVGCFUVl5lx5pFSux0YncseT2HQjiwFDL9eaEaBa9CdnCl8g== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google date: Fri, 11 Nov 2022 04:18:29 GMT age: 51868 etag: "691f59b65ca9fde4f59bbf96b37071e07351f190" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5583 Md5: 85c6f450b38f41a2fb924d6d9a9cbff8 Sha1: 691f59b65ca9fde4f59bbf96b37071e07351f190 Sha256: c8f877488a2cf65f0d9829384fd4113847722a1b4df94b6b1d5788699689722c
GET /rosemarierecords HTTP/1.1 Host: www.facebook.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	31.13.72.36 HTTP/2 200 OK content-type: text/html; charset="utf-8" vary: Accept-Encoding content-encoding: br accept-ch-lifetime: 4838400 accept-ch: sec-ch-prefers-color-scheme report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 content-security-policy-report-only: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com 'unsafe-eval' .fbcdn.net;script-src .facebook.com .fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: .facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com 'unsafe-eval' .fbcdn.net;script-src .facebook.com .fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com: wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; document-policy: force-load-at-top cross-origin-opener-policy: same-origin-allow-popups pragma: no-cache cache-control: private, no-cache, no-store, must-revalidate expires: Sat, 01 Jan 2000 00:00:00 GMT x-content-type-options: nosniff x-xss-protection: 0 x-frame-options: DENY strict-transport-security: max-age=15552000; preload x-fb-debug: gpeSpNpzhcdW1hLk7SYHRR6mNzTFlgoVvusVeznvNcxbhvnYZUDbT+FDYDSYzd8JDBkTFqQJr7Lj5xPOQ7R4qQ== date: Fri, 11 Nov 2022 18:42:55 GMT priority: u=3,i alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators Size: 177991 Md5: 25eb3ef2d2e1b59e97f68cb4689db68a Sha1: 9356efca9e494ba93458a38006fdb211d3309a1a Sha256: 5867d2890b1084ac485944e2347e6560386359e719d76679d91c13b7ef1a788b
GET /v/t39.25447-2/314714842_5666118406815642_5563522311224587975_n.mp4?_nc_cat=103&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mbm9ybTE0X2ZyYWdfMl9hdWRpbyJ9&_nc_ohc=jKw9h-cByZ8AX-thbeF&_nc_ht=video-arn2-1.xx&oh=00_AfDgzO2VmMMu7W5HO6OqMTa-PvaUFmX8sdvDF4IXl59pyw&oe=63735360&bytestart=0&byteend=782 HTTP/1.1 Host: video-arn2-1.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.14 HTTP/2 200 OK content-type: video/mp4 x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS last-modified: Fri, 11 Nov 2022 16:59:52 GMT x-haystack-needlechecksum: 1464666420 x-needle-checksum: 3689517273 timing-allow-origin: * cross-origin-resource-policy: cross-origin content-digest: adler32=3689517273 content-length: 783 accept-ranges: bytes x-fb-trip-id: 436667874 date: Fri, 11 Nov 2022 18:42:57 GMT cache-control: max-age=1209600, no-transform access-control-allow-origin: https://www.facebook.com vary: Origin x-fb-edge-debug: bAvdC-qJdcjToy7-UDJxeWwPmHjuJsbtknNaNZ98wv8x31Zr6betAnN3WjqO4u_2DKwxnDRLGTrR53JfS8jLjFMjHSPJV1_5Ytaypt-yx58 alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ISO Media, MP4 Base Media v5 \012- data Size: 783 Md5: bb6eca476b420e015627b57725591f3f Sha1: 06543d18ae992743c1833c4b28c55ae6496a8700 Sha256: f13a1d0de93bf0fd8a111bb92938ed7f265d899a816f261ece8a7498b8203a28
GET /v/t39.25447-2/314714842_5666118406815642_5563522311224587975_n.mp4?_nc_cat=103&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mbm9ybTE0X2ZyYWdfMl9hdWRpbyJ9&_nc_ohc=jKw9h-cByZ8AX-thbeF&_nc_ht=video-arn2-1.xx&oh=00_AfDgzO2VmMMu7W5HO6OqMTa-PvaUFmX8sdvDF4IXl59pyw&oe=63735360&bytestart=1007&byteend=17475 HTTP/1.1 Host: video-arn2-1.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.14 HTTP/2 200 OK content-type: video/mp4 x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS last-modified: Fri, 11 Nov 2022 16:59:52 GMT x-haystack-needlechecksum: 1464666420 x-needle-checksum: 3689517273 timing-allow-origin: * cross-origin-resource-policy: cross-origin content-digest: adler32=3689517273 content-length: 16469 accept-ranges: bytes x-fb-trip-id: 436667874 date: Fri, 11 Nov 2022 18:42:57 GMT cache-control: max-age=1209600, no-transform access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 16469 Md5: 423af42103be1ae6e954f4dab67f961b Sha1: 28fb56bb57cd6eb0297c032f11c9486d3eab6aac Sha256: 09ef14638592a06ef40508af483495b72a1a64e9d61b1e4b172a2f8a9799a2fe
GET /v/t39.25447-2/314714842_5666118406815642_5563522311224587975_n.mp4?_nc_cat=103&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mbm9ybTE0X2ZyYWdfMl9hdWRpbyJ9&_nc_ohc=jKw9h-cByZ8AX-thbeF&_nc_ht=video-arn2-1.xx&oh=00_AfDgzO2VmMMu7W5HO6OqMTa-PvaUFmX8sdvDF4IXl59pyw&oe=63735360&bytestart=783&byteend=1006 HTTP/1.1 Host: video-arn2-1.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.14 HTTP/2 200 OK content-type: video/mp4 x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS last-modified: Fri, 11 Nov 2022 16:59:52 GMT x-haystack-needlechecksum: 1464666420 x-needle-checksum: 3689517273 timing-allow-origin: * cross-origin-resource-policy: cross-origin content-digest: adler32=3689517273 content-length: 224 accept-ranges: bytes x-fb-trip-id: 436667874 date: Fri, 11 Nov 2022 18:42:57 GMT cache-control: max-age=1209600, no-transform access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 224 Md5: 5579efcd2c11444a01ff457f64940240 Sha1: 33ca46380d7ce1b8d3bbbe6a958aaa648de39016 Sha256: 2b7b1a9ee3683df5b65589a86774b66082df49ebdcf9d7881e5501c955fccea3
GET /v/t39.25447-2/315369353_659702652396474_1197839114180864941_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTYwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=G21Ohi9RwlAAX9Oa0Dw&_nc_ht=video-arn2-1.xx&oh=00_AfDHHqBJniU6FjKyYKmX9QeJ4gUNkzXoumghU4cauzdbdg&oe=6372FFAD&bytestart=0&byteend=852 HTTP/1.1 Host: video-arn2-1.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.14 HTTP/2 200 OK content-type: video/mp4 x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS last-modified: Fri, 11 Nov 2022 17:00:54 GMT x-haystack-needlechecksum: 0 x-needle-checksum: 2985614656 timing-allow-origin: * cross-origin-resource-policy: cross-origin content-digest: adler32=2985614656 content-length: 853 accept-ranges: bytes x-fb-trip-id: 436667874 date: Fri, 11 Nov 2022 18:42:57 GMT cache-control: max-age=1209600, no-transform access-control-allow-origin: https://www.facebook.com vary: Origin x-fb-edge-debug: JxRaafiruKHnELP2hirhv4mepsArbbkHJWorYUdUI8_v7nQl3OGraAS6e-M6kq5y_50xEb08iXJfZjDElH-ALrjia0gqxCHDMVrr94IFJyI alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ISO Media, MP4 Base Media v5 \012- data Size: 853 Md5: 8b62f923050046e9370e34080d045abb Sha1: 7cad473ae3dd56c0cfebf4c6eac48ceb0286e2a8 Sha256: 627e1b70922b841f4b11e5b3105e6033500112d0be062acb198c4dc8db4d172d
GET /v/t39.25447-2/315369353_659702652396474_1197839114180864941_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTYwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=G21Ohi9RwlAAX9Oa0Dw&_nc_ht=video-arn2-1.xx&oh=00_AfDHHqBJniU6FjKyYKmX9QeJ4gUNkzXoumghU4cauzdbdg&oe=6372FFAD&bytestart=853&byteend=956 HTTP/1.1 Host: video-arn2-1.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.14 HTTP/2 200 OK content-type: video/mp4 x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS last-modified: Fri, 11 Nov 2022 17:00:54 GMT x-haystack-needlechecksum: 0 x-needle-checksum: 2985614656 timing-allow-origin: * cross-origin-resource-policy: cross-origin content-digest: adler32=2985614656 content-length: 104 accept-ranges: bytes x-fb-trip-id: 436667874 date: Fri, 11 Nov 2022 18:42:57 GMT cache-control: max-age=1209600, no-transform access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 104 Md5: 25fd0efc7bbe062351660a48ce97f36e Sha1: 5800b9800a96e8be9a7536c83f50c4acb8e90ef5 Sha256: 7555402eb9ad516ee18fa163314bffc6229b8226855977a1a7e4e823d4171121
GET /v/t39.25447-2/315369353_659702652396474_1197839114180864941_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTYwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=G21Ohi9RwlAAX9Oa0Dw&_nc_ht=video-arn2-1.xx&oh=00_AfDHHqBJniU6FjKyYKmX9QeJ4gUNkzXoumghU4cauzdbdg&oe=6372FFAD&bytestart=957&byteend=219236 HTTP/1.1 Host: video-arn2-1.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	31.13.72.14 HTTP/2 200 OK content-type: video/mp4 x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS last-modified: Fri, 11 Nov 2022 17:00:54 GMT x-haystack-needlechecksum: 0 x-needle-checksum: 2985614656 timing-allow-origin: * cross-origin-resource-policy: cross-origin content-digest: adler32=2985614656 content-length: 218280 accept-ranges: bytes x-fb-trip-id: 436667874 date: Fri, 11 Nov 2022 18:42:57 GMT cache-control: max-age=1209600, no-transform access-control-allow-origin: https://www.facebook.com vary: Origin x-fb-edge-debug: FDk_7cxp8hWABKlpHXWvHn0G0kxuJvgC3djQci85d9r7gDQZqrbjuwUv0sm7YIpYtkFK0uHrPgzCUvhWWq-pinxnQGl9Hw5N0w0iDLI-2lA alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 218280 Md5: 0320b1232c1dfbb3ee06a51b4098f854 Sha1: e7dff5331caa4b721b9d39ac7a777c3e9d99121a Sha256: 16929959c1281a6065eef9cccd56c2da4ca4112e24429dd9999425926703436c
GET /rsrc.php/v3isSD4/yT/l/en_US/0WcNveACuQFWAyn1_6Ighjobl3reNOJqG9jqufmMu_aYLnIRr7nHroRd8QWNF-3vJpRmxTdhWOF4p.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.facebook.com Connection: keep-alive Referer: https://www.facebook.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	31.13.72.12 HTTP/2 200 OK content-type: application/x-javascript; charset=utf-8 content-encoding: br last-modified: Mon, 01 Jan 2001 08:00:00 GMT expires: Sat, 11 Nov 2023 11:52:45 GMT cache-control: public,max-age=31536000,immutable x-fb-rlafr: 0 document-policy: force-load-at-top cross-origin-resource-policy: cross-origin x-content-type-options: nosniff timing-allow-origin: * content-md5: zDuJ9F9A9RX8xU6l873Pew== x-fb-debug: BwhopEFzlIqmpwFz1vJWrMkEi/utx+hJzwtIkpWmKwCOzfsjUVEHI6IeHLETLfvj5rbcV8WFVN4a5bFWBJNByw== content-length: 18723 x-fb-trip-id: 1904183273 date: Fri, 11 Nov 2022 18:42:56 GMT access-control-allow-origin: https://www.facebook.com vary: Origin alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256:

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF" 

                                            
                                                
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=13478 

                                            
                                                
Expires: Fri, 11 Nov 2022 22:27:32 GMT 

                                            
                                                
Date: Fri, 11 Nov 2022 18:42:54 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    3d0727e32cd103ddd4b73f28c81758aa

                                                Sha1:   197a7bf43d63723fc532c23c6dced68d5cc36652

                                                Sha256: d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "17894427C471F7FA02CA274795DC55DF1BFC99D7BD83F9EE36249394035110FD" 

                                            
                                                
Last-Modified: Wed, 09 Nov 2022 02:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=2384 

                                            
                                                
Expires: Fri, 11 Nov 2022 19:22:38 GMT 

                                            
                                                
Date: Fri, 11 Nov 2022 18:42:54 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    2b57492bf85f4ae6abbd1641b17dc9ab

                                                Sha1:   008e71ec05d47bf025ca64e17da2ea1bd8e71111

                                                Sha256: 17894427c471f7fa02ca274795dc55df1bfc99d7bd83f9ee36249394035110fd

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:54 GMT 

                                            
                                                
content-length: 12 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 329 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Fri, 11 Nov 2022 18:24:58 GMT 

                                            
                                                
cache-control: public,max-age=3600 

                                            
                                                
age: 1077 

                                            
                                                
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                            
                                                
etag: "1648230346554" 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             93.184.220.29

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Age: 6190 

                                            
                                                
Cache-Control: max-age=144427 

                                            
                                                
Date: Fri, 11 Nov 2022 18:42:55 GMT 

                                            
                                                
Etag: "636e10ac-1d7" 

                                            
                                                
Expires: Sun, 13 Nov 2022 10:50:02 GMT 

                                            
                                                
Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT 

                                            
                                                
Server: ECS (ska/F715) 

                                            
                                                
X-Cache: HIT 

                                            
                                                
Content-Length: 471 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    f7ff606fbc8634c858bbc04b69f55cf6

                                                Sha1:   2441de2cba649239efd0dae7a878d7ef2245c0b4

                                                Sha256: 95154e0dbb7e827b8f893cc141f986c29634ead618256470d753429aa65a0548

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: 3aHmiu1RMg/QbSjfKd7PBw== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                        
                                             44.240.207.158

                                            
                                                HTTP/1.1 101 Switching Protocols

                                            

                                            
                                                
Connection: Upgrade 

                                            
                                                
Upgrade: websocket 

                                            
                                                
Sec-WebSocket-Accept: Ls8EoroMZjAEr4zEEIEkwRnFlZA= 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /rsrc.php/v3/yN/r/61nCrAl7vPC.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 

                                        
                                            
Host: static.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://www.facebook.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             31.13.72.12

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/x-javascript; charset=utf-8

                                            

                                            
                                                
content-encoding: br 

                                            
                                                
last-modified: Mon, 01 Jan 2001 08:00:00 GMT 

                                            
                                                
expires: Wed, 08 Nov 2023 02:07:08 GMT 

                                            
                                                
cache-control: public,max-age=31536000,immutable 

                                            
                                                
x-fb-rlafr: 0 

                                            
                                                
document-policy: force-load-at-top 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
content-md5: bOu/nqdAumgjuinBQOLRug== 

                                            
                                                
x-fb-debug: DSeXwnSdL8w8/1uRqSCP1UL+zrri+kjdVG+KynnGLX2fZ9sPEJ4YZ1+AhXyDeVTixRld5ts5Uem1iWcpQc25bg== 

                                            
                                                
priority: u=3,i 

                                            
                                                
content-length: 65894 

                                            
                                                
x-fb-trip-id: 1904183273 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:56 GMT 

                                            
                                                
access-control-allow-origin: https://www.facebook.com 

                                            
                                                
vary: Origin 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (18622)

                                                Size:   65894

                                                Md5:    6cebbf9ea740ba6823ba29c140e2d1ba

                                                Sha1:   7599f1992800176a79efed968bb53e4e2ec0551b

                                                Sha256: ea0ec797ef5ef637989111b72a1187ebf072bebc3e2fac75fe04ce1821a69dd0

                                        
                                            GET /rsrc.php/v3/y2/r/j3MAwLgD5Lv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 

                                        
                                            
Host: static.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://www.facebook.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                        
                                             31.13.72.12

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/x-javascript; charset=utf-8

                                            

                                            
                                                
content-encoding: br 

                                            
                                                
last-modified: Mon, 01 Jan 2001 08:00:00 GMT 

                                            
                                                
expires: Sat, 11 Nov 2023 00:35:14 GMT 

                                            
                                                
cache-control: public,max-age=31536000,immutable 

                                            
                                                
x-fb-rlafr: 0 

                                            
                                                
document-policy: force-load-at-top 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
content-md5: yht0+pPdX+A1dquz2E5EgQ== 

                                            
                                                
x-fb-debug: R8UFEPyprH5E8YJxwj0yeQSk1oD0rg3VEw7i2DaGxAz84ikNix4xcjT9p8byDgHtPNAXTb9UgKGDL5tUuTCLmw== 

                                            
                                                
content-length: 8221 

                                            
                                                
x-fb-trip-id: 1904183273 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:56 GMT 

                                            
                                                
access-control-allow-origin: https://www.facebook.com 

                                            
                                                
vary: Origin 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (7867)

                                                Size:   8221

                                                Md5:    ca1b74fa93dd5fe03576abb3d84e4481

                                                Sha1:   2fa0e107f3a19a352f87db97ad258765b7aa67b4

                                                Sha256: e69408b1d5dba663a74464f542514afb3c7f546a86177a4370b920564811224a

                                        
                                            GET /rsrc.php/v3/y_/r/vxYPrdhdOH5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 

                                        
                                            
Host: static.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://www.facebook.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             31.13.72.12

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/x-javascript; charset=utf-8

                                            

                                            
                                                
content-encoding: br 

                                            
                                                
last-modified: Mon, 01 Jan 2001 08:00:00 GMT 

                                            
                                                
expires: Wed, 08 Nov 2023 01:28:06 GMT 

                                            
                                                
cache-control: public,max-age=31536000,immutable 

                                            
                                                
x-fb-rlafr: 0 

                                            
                                                
document-policy: force-load-at-top 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
content-md5: TuIbV1b/U9p8i0po4dJcIw== 

                                            
                                                
x-fb-debug: Sa3wD2OfaZS8xnQThnRKbxLZuogYQanCBZdZ4UNvj7FwICdN0SXOoX8FCynOPB/qysxmrwJk4DSBu21tB3vpzw== 

                                            
                                                
priority: u=3,i 

                                            
                                                
content-length: 5237 

                                            
                                                
x-fb-trip-id: 1904183273 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:56 GMT 

                                            
                                                
access-control-allow-origin: https://www.facebook.com 

                                            
                                                
vary: Origin 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (9358)

                                                Size:   5237

                                                Md5:    4ee21b5756ff53da7c8b4a68e1d25c23

                                                Sha1:   98ded304cd0fd8cc28a8b40f172a4a759b949e7a

                                                Sha256: ea11b67b5b4cd8206e3a5d369391c1721448d146f32fda93d32141cd5c00bf4d

                                        
                                            GET /rsrc.php/v3i-ty4/yv/l/en_US/D8N8Li45c9u.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 

                                        
                                            
Host: static.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://www.facebook.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             31.13.72.12

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/x-javascript; charset=utf-8

                                            

                                            
                                                
content-encoding: br 

                                            
                                                
last-modified: Mon, 01 Jan 2001 08:00:00 GMT 

                                            
                                                
expires: Thu, 09 Nov 2023 00:26:57 GMT 

                                            
                                                
cache-control: public,max-age=31536000,immutable 

                                            
                                                
x-fb-rlafr: 0 

                                            
                                                
document-policy: force-load-at-top 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
content-md5: LncIa6y3P/TldNG3G1RypA== 

                                            
                                                
x-fb-debug: 3iEdz1PK+b7CUgNEAPgGtek7JRNkr+5+usWDKIK/Zb9RLKYNR9NxUrmm8BU2AXCKzyU96i734SgnA9mCAZxXBw== 

                                            
                                                
priority: u=3,i 

                                            
                                                
content-length: 81383 

                                            
                                                
x-fb-trip-id: 1904183273 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:56 GMT 

                                            
                                                
access-control-allow-origin: https://www.facebook.com 

                                            
                                                
vary: Origin 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (4633)

                                                Size:   81383

                                                Md5:    2e77086bacb73ff4e574d1b71b5472a4

                                                Sha1:   b2bf4f5614ed251d3c728b13d48b0238bfb9512d

                                                Sha256: 67a8db3e3ff884863da6a40feb89123b6d5f33900b99ce59534fc7d3e15629e8

                                        
                                            GET /rsrc.php/v3iQbs4/yX/l/en_US/MgQPUiIMUSl.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 

                                        
                                            
Host: static.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://www.facebook.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                        
                                             31.13.72.12

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/x-javascript; charset=utf-8

                                            

                                            
                                                
content-encoding: br 

                                            
                                                
last-modified: Mon, 01 Jan 2001 08:00:00 GMT 

                                            
                                                
expires: Sat, 11 Nov 2023 01:48:34 GMT 

                                            
                                                
cache-control: public,max-age=31536000,immutable 

                                            
                                                
x-fb-rlafr: 0 

                                            
                                                
document-policy: force-load-at-top 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
content-md5: 5hJWBmqLKbY5fboiTYU+2g== 

                                            
                                                
x-fb-debug: /FyPYuJPRzXquKSwhn3cYv1TJ+xL5sgyJEXINIUfe5oC/eiL6RF1u4XnFlqPqg8W1iipBCy2kSWzsmODdueuzQ== 

                                            
                                                
priority: u=3,i 

                                            
                                                
content-length: 17720 

                                            
                                                
x-fb-trip-id: 1904183273 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:56 GMT 

                                            
                                                
access-control-allow-origin: https://www.facebook.com 

                                            
                                                
vary: Origin 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (45939)

                                                Size:   17720

                                                Md5:    e61256066a8b29b6397dba224d853eda

                                                Sha1:   0e408d44bd36ee010f812f0696af15bec09ab357

                                                Sha256: f9f4e78308d75e5e82c3f167ab8e113b4ac98fc31523ad3a25c1cce8444a9baa

                                        
                                            GET /v/t39.30808-6/291606517_447819644020042_4811948710508952417_n.png?stp=dst-png_fb50_s320x320&_nc_cat=108&ccb=1-7&_nc_sid=e3f864&_nc_ohc=EQRpQv4sq68AX96haTf&_nc_ht=scontent-arn2-2.xx&oh=00_AfDxKha4thhbdm-6OXHg1jcPqEC9tql0EuRqTLfD2XSGQg&oe=6373A4B5 HTTP/1.1 

                                        
                                            
Host: scontent-arn2-2.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             157.240.194.27

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/png

                                            

                                            
                                                
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS 

                                            
                                                
last-modified: Wed, 06 Jul 2022 19:43:44 GMT 

                                            
                                                
x-haystack-needlechecksum: 3965435470 

                                            
                                                
x-needle-checksum: 2349376692 

                                            
                                                
content-length: 5657 

                                            
                                                
content-digest: adler32=801290237 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
cache-control: max-age=1209600, no-transform 

                                            
                                                
x-fb-trip-id: 1904183273 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:56 GMT 

                                            
                                                
x-fb-edge-debug: _UCUnxY1PiqKGTQdVAouWLIpMDSj5QEZBHREtiTPoeSrj8NIBSkqCzXPGKbYrq5mY_a2FHHsURcxXov3QgLk3FaypKWSLJPgHr2yupd1koc 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced\012- data

                                                Size:   5657

                                                Md5:    a5a9fd2a714335189f09fdd4880ca383

                                                Sha1:   63291d42cc134d79916895fe883b52f4156b1ed7

                                                Sha256: 6c6af0424b3a40d0b1559d3ea72388c5f430ac1c2f2a670d5e22b91e5d2bc083

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" 

                                            
                                                
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=6282 

                                            
                                                
Expires: Fri, 11 Nov 2022 20:27:39 GMT 

                                            
                                                
Date: Fri, 11 Nov 2022 18:42:57 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    fb29db48daab83bcaed56b72093619cc

                                                Sha1:   e0e0a09d729ffb1c41411419768896f1e1eb3346

                                                Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" 

                                            
                                                
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=6282 

                                            
                                                
Expires: Fri, 11 Nov 2022 20:27:39 GMT 

                                            
                                                
Date: Fri, 11 Nov 2022 18:42:57 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    fb29db48daab83bcaed56b72093619cc

                                                Sha1:   e0e0a09d729ffb1c41411419768896f1e1eb3346

                                                Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8581 

                                            
                                                
x-amzn-requestid: 385174fe-153f-448f-be5e-9ea3b5757ff9 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: bZ4u1EYOIAMFncA= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-636d6e5e-6084a34f58df22037275e676;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT 

                                            
                                                
x-amz-cf-pop: YVR50-C1, SEA73-P1 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: MhIq0Vdxah99pPo_O7gkhrq9Nekkxld2lv0955wr0yJzcP3g6LAH8g== 

                                            
                                                
via: 1.1 dfc972676b24a6d23251d4f298dfa08c.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Thu, 10 Nov 2022 21:46:56 GMT 

                                            
                                                
age: 75361 

                                            
                                                
etag: "e0d1ebb35a16c686eae3d31eb85ac72278459b05" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8581

                                                Md5:    13f7b6eea163326da8c58ae5c09efccd

                                                Sha1:   e0d1ebb35a16c686eae3d31eb85ac72278459b05

                                                Sha256: 13f2f428acb7806808d957a8167ab2c139a5d0f59798671465717f2b39b914a9

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7dc40a-e47f-44b5-b3b4-87b10cd8669d.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 10671 

                                            
                                                
x-amzn-requestid: 1b6053eb-64ac-4c24-a750-c1b8cd69157f 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: bJEh8GxPoAMFhPA= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-6366b472-56c6a3bc07ec89ab56d4f3bd;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Sat, 05 Nov 2022 19:07:30 GMT 

                                            
                                                
x-amz-cf-pop: SEA73-P1 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: qJeWGvC4DM_d3k66OHN2V19elou-xoSNkep1BNalBO0NtKyQtAFzNQ== 

                                            
                                                
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Fri, 11 Nov 2022 03:31:46 GMT 

                                            
                                                
age: 54671 

                                            
                                                
etag: "5fe340bf33ac219f6a3d44810f31d0a8796c83a9" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10671

                                                Md5:    e72f32944d6f03e005f7b6f3e87d8c72

                                                Sha1:   5fe340bf33ac219f6a3d44810f31d0a8796c83a9

                                                Sha256: bcdcba30210d276996d0fe749bbfc69d666ae11ddfbfdb57307e4bb4d6e43d1f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f7d2f5-4807-4bbd-a3db-7a239962aca5.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 5583 

                                            
                                                
x-amzn-requestid: e844f42a-e87e-4e61-8c97-137c07c5ae28 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: bNeQ9Ho7IAMF5_g= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-63687739-62c44d2f7d23632e74895bd8;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT 

                                            
                                                
x-amz-cf-pop: SEA73-P1 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: uHlIN1IVGCFUVl5lx5pFSux0YncseT2HQjiwFDL9eaEaBa9CdnCl8g== 

                                            
                                                
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Fri, 11 Nov 2022 04:18:29 GMT 

                                            
                                                
age: 51868 

                                            
                                                
etag: "691f59b65ca9fde4f59bbf96b37071e07351f190" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5583

                                                Md5:    85c6f450b38f41a2fb924d6d9a9cbff8

                                                Sha1:   691f59b65ca9fde4f59bbf96b37071e07351f190

                                                Sha256: c8f877488a2cf65f0d9829384fd4113847722a1b4df94b6b1d5788699689722c

                                        
                                            GET /v/t39.25447-2/314714842_5666118406815642_5563522311224587975_n.mp4?_nc_cat=103&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mbm9ybTE0X2ZyYWdfMl9hdWRpbyJ9&_nc_ohc=jKw9h-cByZ8AX-thbeF&_nc_ht=video-arn2-1.xx&oh=00_AfDgzO2VmMMu7W5HO6OqMTa-PvaUFmX8sdvDF4IXl59pyw&oe=63735360&bytestart=0&byteend=782 HTTP/1.1 

                                        
                                            
Host: video-arn2-1.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://www.facebook.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             31.13.72.14

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: video/mp4

                                            

                                            
                                                
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS 

                                            
                                                
last-modified: Fri, 11 Nov 2022 16:59:52 GMT 

                                            
                                                
x-haystack-needlechecksum: 1464666420 

                                            
                                                
x-needle-checksum: 3689517273 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
content-digest: adler32=3689517273 

                                            
                                                
content-length: 783 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
x-fb-trip-id: 436667874 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:57 GMT 

                                            
                                                
cache-control: max-age=1209600, no-transform 

                                            
                                                
access-control-allow-origin: https://www.facebook.com 

                                            
                                                
vary: Origin 

                                            
                                                
x-fb-edge-debug: bAvdC-qJdcjToy7-UDJxeWwPmHjuJsbtknNaNZ98wv8x31Zr6betAnN3WjqO4u_2DKwxnDRLGTrR53JfS8jLjFMjHSPJV1_5Ytaypt-yx58 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ISO Media, MP4 Base Media v5 \012- data

                                                Size:   783

                                                Md5:    bb6eca476b420e015627b57725591f3f

                                                Sha1:   06543d18ae992743c1833c4b28c55ae6496a8700

                                                Sha256: f13a1d0de93bf0fd8a111bb92938ed7f265d899a816f261ece8a7498b8203a28

                                        
                                            GET /v/t39.25447-2/314714842_5666118406815642_5563522311224587975_n.mp4?_nc_cat=103&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mbm9ybTE0X2ZyYWdfMl9hdWRpbyJ9&_nc_ohc=jKw9h-cByZ8AX-thbeF&_nc_ht=video-arn2-1.xx&oh=00_AfDgzO2VmMMu7W5HO6OqMTa-PvaUFmX8sdvDF4IXl59pyw&oe=63735360&bytestart=783&byteend=1006 HTTP/1.1 

                                        
                                            
Host: video-arn2-1.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://www.facebook.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             31.13.72.14

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: video/mp4

                                            

                                            
                                                
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS 

                                            
                                                
last-modified: Fri, 11 Nov 2022 16:59:52 GMT 

                                            
                                                
x-haystack-needlechecksum: 1464666420 

                                            
                                                
x-needle-checksum: 3689517273 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
content-digest: adler32=3689517273 

                                            
                                                
content-length: 224 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
x-fb-trip-id: 436667874 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:57 GMT 

                                            
                                                
cache-control: max-age=1209600, no-transform 

                                            
                                                
access-control-allow-origin: https://www.facebook.com 

                                            
                                                
vary: Origin 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   224

                                                Md5:    5579efcd2c11444a01ff457f64940240

                                                Sha1:   33ca46380d7ce1b8d3bbbe6a958aaa648de39016

                                                Sha256: 2b7b1a9ee3683df5b65589a86774b66082df49ebdcf9d7881e5501c955fccea3

                                        
                                            GET /v/t39.25447-2/315369353_659702652396474_1197839114180864941_n.mp4?_nc_cat=110&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfcjJfYXZjX2dlbjFhdmNfbGNfcTYwX2ZyYWdfMl92aWRlbyJ9&_nc_ohc=G21Ohi9RwlAAX9Oa0Dw&_nc_ht=video-arn2-1.xx&oh=00_AfDHHqBJniU6FjKyYKmX9QeJ4gUNkzXoumghU4cauzdbdg&oe=6372FFAD&bytestart=853&byteend=956 HTTP/1.1 

                                        
                                            
Host: video-arn2-1.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://www.facebook.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             31.13.72.14

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: video/mp4

                                            

                                            
                                                
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS 

                                            
                                                
last-modified: Fri, 11 Nov 2022 17:00:54 GMT 

                                            
                                                
x-haystack-needlechecksum: 0 

                                            
                                                
x-needle-checksum: 2985614656 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
content-digest: adler32=2985614656 

                                            
                                                
content-length: 104 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
x-fb-trip-id: 436667874 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:57 GMT 

                                            
                                                
cache-control: max-age=1209600, no-transform 

                                            
                                                
access-control-allow-origin: https://www.facebook.com 

                                            
                                                
vary: Origin 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   104

                                                Md5:    25fd0efc7bbe062351660a48ce97f36e

                                                Sha1:   5800b9800a96e8be9a7536c83f50c4acb8e90ef5

                                                Sha256: 7555402eb9ad516ee18fa163314bffc6229b8226855977a1a7e4e823d4171121

                                        
                                            GET /rsrc.php/v3isSD4/yT/l/en_US/0WcNveACuQFWAyn1_6Ighjobl3reNOJqG9jqufmMu_aYLnIRr7nHroRd8QWNF-3vJpRmxTdhWOF4p.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 

                                        
                                            
Host: static.xx.fbcdn.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://www.facebook.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.facebook.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                        
                                             31.13.72.12

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/x-javascript; charset=utf-8

                                            

                                            
                                                
content-encoding: br 

                                            
                                                
last-modified: Mon, 01 Jan 2001 08:00:00 GMT 

                                            
                                                
expires: Sat, 11 Nov 2023 11:52:45 GMT 

                                            
                                                
cache-control: public,max-age=31536000,immutable 

                                            
                                                
x-fb-rlafr: 0 

                                            
                                                
document-policy: force-load-at-top 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
content-md5: zDuJ9F9A9RX8xU6l873Pew== 

                                            
                                                
x-fb-debug: BwhopEFzlIqmpwFz1vJWrMkEi/utx+hJzwtIkpWmKwCOzfsjUVEHI6IeHLETLfvj5rbcV8WFVN4a5bFWBJNByw== 

                                            
                                                
content-length: 18723 

                                            
                                                
x-fb-trip-id: 1904183273 

                                            
                                                
date: Fri, 11 Nov 2022 18:42:56 GMT 

                                            
                                                
access-control-allow-origin: https://www.facebook.com 

                                            
                                                
vary: Origin 

                                            
                                                
alt-svc: h3=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    

                                                Sha1:   

                                                Sha256:

URL	sender3.zohoinsights.com/ck1/2d6f.327230a/1eaa06a0-0ea7-11ed-a207-525400fa05f6/de7da0fc346bf01efc530560d1682360fbf55a30/2?e=JCiKkRy/XJYflfkLPa9tDqgsk6peHiQJsrMBzsuuF6DgPYZmDMNgYM7StaJLK3UK
IP	136.143.190.89 (United States)
ASN	#2639 ZOHO-AS
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access
Report completed	2022-11-11 18:43:06 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	2
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (12)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 136.143.190.89

Last 5 reports on ASN: ZOHO-AS

Last 5 reports on domain: zohoinsights.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (132)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (43)

Overview

Domain Summary (12)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 136.143.190.89

Last 5 reports on ASN: ZOHO-AS

Last 5 reports on domain: zohoinsights.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (132)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (43)

Network Intrusion Detection Systems