firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 08:14:54 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: n6SlHVlFUnkCxu_Mb0jJBLurPKSIOyf9GGGGs13elQTYlkQ1m5z-bA==
Age: 3437
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eJ69bWrQneoKsrcrRCcnevxr948_V1NhtT_r4zFUPCjsYrf7XBPusA==
age: 16617
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9282
Expires: Sun, 25 Sep 2022 11:46:53 GMT
Date: Sun, 25 Sep 2022 09:12:11 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 514befbd67fcc361a111551bb0e1a48d
2501a4f2340f885d92bd6a80f267b5d213c32b0f
361521cb35140877dec35da96e8b7a52662177d395827bde02cf29556c0c5421
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 09:12:11 GMT
Last-Modified: Sun, 25 Sep 2022 07:24:50 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BbGGLoBYKiBsJ_jjdMVHrPX-CvzS-SnWkYbF60hcwJyQyYHcIX38rA==
Age: 6441
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 09:12:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash defffdd4d6e07febb8c1b56d4348fa1e
1e7ae2eeb661bfee6e0d90b583bf9a6e63b0f66b
701766031a28ea832198a1fe9670d12b59aa4ea85798d04de47e6e4d6b15b372
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "701766031A28EA832198A1FE9670D12B59AA4EA85798D04DE47E6E4D6B15B372"
Last-Modified: Sat, 24 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12470
Expires: Sun, 25 Sep 2022 12:40:01 GMT
Date: Sun, 25 Sep 2022 09:12:11 GMT
Connection: keep-alive
cdn.tailwindcss.com/
302 Found 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 25 Sep 2022 09:12:11 GMT
content-length: 0
cache-control: max-age=14400
location: /3.1.8
strict-transport-security: max-age=63072000
x-vercel-cache: MISS
x-vercel-id: syd1::iad1::2mjgv-1664096277703-fd770731ead9
cf-cache-status: HIT
age: 830
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4Z8uL1Wrcwq2NE6SRftPBwBFppuh0zM6mwO7s6DHCTmLAPSeIkGKXo377Sbzo6kYaryaCM6StsXIN4SPSUIl7yHsBulxpD34HsiJYBGJbpGd9VGnR%2BMDX76GCqAfpH6N%2Fb3oPZ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7502a3023c85b524-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e728be090cf6e6ff0935be5d9cca9a87
7a5a674ef2f990d5e6fdc3568c369d3a76f74ff9
20dbdaa3275c45469dd4dfcfad97ee9483e47e4684d676186919716c1660b78a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5262
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:11 GMT
Last-Modified: Sun, 25 Sep 2022 07:44:29 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash e728be090cf6e6ff0935be5d9cca9a87
7a5a674ef2f990d5e6fdc3568c369d3a76f74ff9
20dbdaa3275c45469dd4dfcfad97ee9483e47e4684d676186919716c1660b78a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4535
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:11 GMT
Last-Modified: Sun, 25 Sep 2022 07:56:38 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash e728be090cf6e6ff0935be5d9cca9a87
7a5a674ef2f990d5e6fdc3568c369d3a76f74ff9
20dbdaa3275c45469dd4dfcfad97ee9483e47e4684d676186919716c1660b78a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5041
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:11 GMT
Last-Modified: Sun, 25 Sep 2022 07:48:10 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash e728be090cf6e6ff0935be5d9cca9a87
7a5a674ef2f990d5e6fdc3568c369d3a76f74ff9
20dbdaa3275c45469dd4dfcfad97ee9483e47e4684d676186919716c1660b78a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5041
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:11 GMT
Last-Modified: Sun, 25 Sep 2022 07:48:10 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash e728be090cf6e6ff0935be5d9cca9a87
7a5a674ef2f990d5e6fdc3568c369d3a76f74ff9
20dbdaa3275c45469dd4dfcfad97ee9483e47e4684d676186919716c1660b78a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3265
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:11 GMT
Last-Modified: Sun, 25 Sep 2022 08:17:46 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
otiloooapp.herokuapp.com/
200 OK 191 kB URL HTTP/1.1 otiloooapp.herokuapp.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1724)
Size 191 kB (190558 bytes)
Hash 1fd1e0f318abb6b25d4eb7c35134197a
f1bb1400df812a050500830725bd8f721a9b7dc2
5763711d416eb5de0f608857a2363e3c9b27ba23991330905731aa7a4c4a1a66
Analyzer Verdict Alert openphish United Services Automobile Association
GET / HTTP/1.1
Host: otiloooapp.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Connection: keep-alive
Server: gunicorn
Date: Sun, 25 Sep 2022 09:12:11 GMT
Content-Type: text/html; charset=utf-8
X-Frame-Options: DENY
Vary: Cookie
Content-Length: 190558
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
Set-Cookie: csrftoken=wnPfLdyl88jKP8bAYFzOHV0MH1Ud6KEtb9DZ7tB9kBA9DIGGsBFviTtduUXlW1Rn; expires=Sun, 24 Sep 2023 09:12:11 GMT; Max-Age=31449600; Path=/; SameSite=Lax
Via: 1.1 vegur
ocsp.digicert.com/
200 OK 727 B IP
Hash 64c3219ff2f297715e33c6da842c2d89
07d1785110c6addc42558a0bf0b87156735f1383
7c477ccbf7ed22580b51c54cf8a82445003618fc93329ea35d380a3a5344d17f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5944
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:11 GMT
Last-Modified: Sun, 25 Sep 2022 07:33:07 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 727
tags.tiqcdn.com/dle/usaa/nw/ent-unified-logon-web.js
200 OK 273 B URL HTTP/2 tags.tiqcdn.com/dle/usaa/nw/ent-unified-logon-web.js
IP
File type ASCII text, with no line terminators
Hash 1a6e4c1aade1d02a22faec181b827e84
4072c76f7cfd9abaadb9c0f6830085f1972df5fc
12823479e57e579d5eb7af45a060336db24bfb84bf0af53a1099d6ca016973f2
GET /dle/usaa/nw/ent-unified-logon-web.js HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Ap5q+W8pX5UwDkZ7kme9KerZOdxqMSECGNwLvI3Ib9iTai21LLWEp54SU3Fzy1K5FS6sbm0fHvU=
x-amz-request-id: TZ308S50F4HNTSFH
last-modified: Tue, 24 Nov 2020 19:54:16 GMT
etag: "1a6e4c1aade1d02a22faec181b827e84"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
content-length: 273
cache-control: max-age=3600
expires: Sun, 25 Sep 2022 10:12:11 GMT
date: Sun, 25 Sep 2022 09:12:11 GMT
X-Firefox-Spdy: h2
tags.usaa.com/cj/tags/11168/tag.js
200 OK 16 kB URL HTTP/2 tags.usaa.com/cj/tags/11168/tag.js
IP
File type C source, ASCII text, with very long lines (46791)
Hash 2dfb1b8a37b057c5f34bddf67f6a711f
ab63e524b0cb3f203086e73e051f6e878897771a
2802370b895be2d3f1760b3b4c62389fc6e98830c8b6c3ad43f0a0e7d13df999
GET /cj/tags/11168/tag.js HTTP/1.1
Host: tags.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
x-request-id: e014627d-3c6c-11ed-a3b1-dd6fa79ac78e
server: nginx
content-encoding: gzip
x-amz-cf-pop: HAM50-P1
x-amz-cf-id: Md-mjXg9rnMqlmlVlnSJ-ExjJfR7tfufujVu2zyyRGL-mUNSojHRiQ==
content-length: 15772
cache-control: max-age=56667
date: Sun, 25 Sep 2022 09:12:11 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
d.agkn.com/iframe/9297/?amcid=32618501463703198671866453280982687073&type=1000&che=0.07590553044698556
200 OK 223 B URL HTTP/1.1 d.agkn.com/iframe/9297/?amcid=32618501463703198671866453280982687073&type=1000&che=0.07590553044698556
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 61be0e1270dd68abaa035bbe8ec9dd7d
3927a4d9a6c64e37996d74400adace6443472940
52a1d0f52f460e327988c355867521b4de4af61472d94935afb22dd20cfea935
GET /iframe/9297/?amcid=32618501463703198671866453280982687073&type=1000&che=0.07590553044698556 HTTP/1.1
Host: d.agkn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, must-revalidate
Content-Type: text/html;charset=UTF-8
Date: Sun, 25 Sep 2022 09:12:11 GMT
Expires: Sat, 01 Jan 2000 00:00:00 GMT
P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: Apache-Coyote/1.1
Set-Cookie: ab=0001%3Arn71e8aYkjtpeV3EsalmzT6MdBBBf9bU;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
u=C|0CAAqwtfrKsLX6wAAAAAAATNdCAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
Content-Length: 223
Connection: keep-alive
www.sjwoe.com/policy
200 OK 28 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cb03d8f455e88d7bb7050795f9f9cfc9
ad15e9674b599d400994e2e83d094e696c76eb98
4bfe3fd63b2ce813a2e3e1252146acf89e82d30222ca39161cf68086449cd64b
GET /policy HTTP/1.1
Host: www.sjwoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 28
date: Sun, 25 Sep 2022 03:42:46 GMT
x-amzn-requestid: 8ebe6059-69ab-4e4f-9b20-7baae9b15c50
access-control-allow-origin: *
x-amz-apigw-id: Y_0ogEoyoAMFqtg=
cache-control: max-age=3600
x-amzn-trace-id: Root=1-632fce36-0b834c6900d947f516f12380;Sampled=0
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lIhiR4OFB493W-roZr6VDpPQJL9bnlh8aXQo_OFk0Yqvdbykzkvk3A==
age: 19765
X-Firefox-Spdy: h2
www.sjwoe.com/policy
200 OK 28 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cb03d8f455e88d7bb7050795f9f9cfc9
ad15e9674b599d400994e2e83d094e696c76eb98
4bfe3fd63b2ce813a2e3e1252146acf89e82d30222ca39161cf68086449cd64b
GET /policy HTTP/1.1
Host: www.sjwoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 28
date: Sun, 25 Sep 2022 03:42:46 GMT
x-amzn-requestid: 8ebe6059-69ab-4e4f-9b20-7baae9b15c50
access-control-allow-origin: *
x-amz-apigw-id: Y_0ogEoyoAMFqtg=
cache-control: max-age=3600
x-amzn-trace-id: Root=1-632fce36-0b834c6900d947f516f12380;Sampled=0
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8rxvtFf-L-NHyqt5Fic-e9s_piVus2Jq7HE6KhCm7YL69d0gGWkYpQ==
age: 19766
X-Firefox-Spdy: h2
www.usaa.com/utils/externals/react!react-dom/17.0.2/react!react-dom.min.js
302 Found 0 B URL HTTP/2 www.usaa.com/utils/externals/react!react-dom/17.0.2/react!react-dom.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utils/externals/react!react-dom/17.0.2/react!react-dom.min.js HTTP/1.1
Host: www.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-length: 0
location: https://www.usaa.com/utils/externals/react!react-dom/17.0.2/react!react-dom.min.js?akredirect=true
cache-control: max-age=2592000
expires: Tue, 25 Oct 2022 09:12:12 GMT
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akma9SkofkRrpT9TuNeCRq5dppcyVACwMD9Eft4DOGDlsfJYLkcUOBifjxJWOQ1rPyW0yrdUbN9yn9GAPZOYe0+ehw==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaaldcBe+3INv5VXTOkzNA56wFqEQTZczb4ijgzRN1Z69n5ocLoDr2kZ8+F8T2p1kBWeczD/5tezgdCflsvmul62Q==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
gdpr=true; Secure; Path=/; domain=.usaa.com
ak_esd=NO:; Secure; Path=/; domain=.usaa.com
server-timing: edge;desc=eef448a
strict-transport-security: max-age=31536000
server: USAA-Loyalty
X-Firefox-Spdy: h2
otiloooapp.herokuapp.com/my/logon/ent-unified-logon-web.c9102f3887a609c51e93.js
404 Not Found 179 B URL HTTP/1.1 otiloooapp.herokuapp.com/my/logon/ent-unified-logon-web.c9102f3887a609c51e93.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 64db5ad5f2ef41babdba80a6dd0518f6
aa18a9b1580b8522be1ea5525650e49458d6f7e0
5547992afdadb59737c5c0feb1a35dff294cd27145bf290c031737ecf8a2577d
Analyzer Verdict Alert openphish United Services Automobile Association
GET /my/logon/ent-unified-logon-web.c9102f3887a609c51e93.js HTTP/1.1
Host: otiloooapp.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://otiloooapp.herokuapp.com/
Connection: keep-alive
Cookie: csrftoken=wnPfLdyl88jKP8bAYFzOHV0MH1Ud6KEtb9DZ7tB9kBA9DIGGsBFviTtduUXlW1Rn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Connection: keep-alive
Server: gunicorn
Date: Sun, 25 Sep 2022 09:12:12 GMT
Content-Type: text/html
X-Frame-Options: DENY
Content-Length: 179
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
Via: 1.1 vegur
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 25 Sep 2022 09:04:17 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 25 Sep 2022 10:03:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: q8XTAkHg3vN3DzMGPLppoQTGeLGCS7K-qUtspmO64YZE2TeweLeykw==
Age: 475
tms.usaa.com/nw/prod/utag.288.js?utv=ut4.46.202209161551
200 OK 4.1 kB URL HTTP/2 tms.usaa.com/nw/prod/utag.288.js?utv=ut4.46.202209161551
IP
File type ASCII text, with very long lines (956)
Hash da74f65282418e0590be747d95545f31
7785de3b13801152e9a5673d7410bb13253ab39d
d5a431a551dc22f7979db7466980d52d593a5be950df6bffbc34fa919f942816
GET /nw/prod/utag.288.js?utv=ut4.46.202209161551 HTTP/1.1
Host: tms.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d11e4b98c5fb4154929904e15724341a:1663949965.140114"
last-modified: Fri, 23 Sep 2022 16:19:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Sun, 25 Sep 2022 09:42:12 GMT
date: Sun, 25 Sep 2022 09:12:12 GMT
content-length: 4126
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
otiloooapp.herokuapp.com/my/logon/ent-unified-logon-web.cc256535bb4b2ba39419.css
404 Not Found 179 B URL HTTP/1.1 otiloooapp.herokuapp.com/my/logon/ent-unified-logon-web.cc256535bb4b2ba39419.css
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 64db5ad5f2ef41babdba80a6dd0518f6
aa18a9b1580b8522be1ea5525650e49458d6f7e0
5547992afdadb59737c5c0feb1a35dff294cd27145bf290c031737ecf8a2577d
Analyzer Verdict Alert openphish United Services Automobile Association
GET /my/logon/ent-unified-logon-web.cc256535bb4b2ba39419.css HTTP/1.1
Host: otiloooapp.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://otiloooapp.herokuapp.com/
Connection: keep-alive
Cookie: csrftoken=wnPfLdyl88jKP8bAYFzOHV0MH1Ud6KEtb9DZ7tB9kBA9DIGGsBFviTtduUXlW1Rn
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Connection: keep-alive
Server: gunicorn
Date: Sun, 25 Sep 2022 09:12:12 GMT
Content-Type: text/html
X-Frame-Options: DENY
Content-Length: 179
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
Via: 1.1 vegur
ocsp.digicert.com/
200 OK 471 B IP
Hash a7809de115ea73f8b61f3d20a9978493
01fc65a2b694d7aadd5204d21801e87b2b55b73e
72692486033feeb149424c59576c6c75b17228dfc89b4c369d2e17cc4bff3d52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5701
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:12 GMT
Last-Modified: Sun, 25 Sep 2022 07:37:12 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
d.agkn.com/iframe/9297/?amcid=32618501463703198671866453280982687073&type=1000&che=0.07590553044698556
200 OK 223 B URL HTTP/1.1 d.agkn.com/iframe/9297/?amcid=32618501463703198671866453280982687073&type=1000&che=0.07590553044698556
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 61be0e1270dd68abaa035bbe8ec9dd7d
3927a4d9a6c64e37996d74400adace6443472940
52a1d0f52f460e327988c355867521b4de4af61472d94935afb22dd20cfea935
GET /iframe/9297/?amcid=32618501463703198671866453280982687073&type=1000&che=0.07590553044698556 HTTP/1.1
Host: d.agkn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, must-revalidate
Content-Type: text/html;charset=UTF-8
Date: Sun, 25 Sep 2022 09:12:12 GMT
Expires: Sat, 01 Jan 2000 00:00:00 GMT
P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Server: Apache-Coyote/1.1
Set-Cookie: ab=0001%3A5OIRar36xR5peV3EsalmzVqihDQ9ldOq;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
u=C|0CAAqwtfsKsLX7AAAAAAAATNdCAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure
Content-Length: 223
Connection: keep-alive
tms.usaa.com/nw/prod/utag.327.js?utv=ut4.46.202209161551
200 OK 1.6 kB URL HTTP/2 tms.usaa.com/nw/prod/utag.327.js?utv=ut4.46.202209161551
IP
File type ASCII text, with very long lines (995)
Hash 6e8aeff7e62af08f75549f4a4ebe0d96
f163a9fba4af686938afb590257e536743529080
2527d527df472c0f20e578233e83dce43a57daa9a99e60f93723db0de022911c
GET /nw/prod/utag.327.js?utv=ut4.46.202209161551 HTTP/1.1
Host: tms.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "3808b64d4b673835ac1587015ca902ad:1663949965.371775"
last-modified: Fri, 23 Sep 2022 16:19:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Sun, 25 Sep 2022 09:42:12 GMT
date: Sun, 25 Sep 2022 09:12:12 GMT
content-length: 1614
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tms.usaa.com/nw/prod/utag.233.js?utv=ut4.46.202209161551
200 OK 35 kB URL HTTP/2 tms.usaa.com/nw/prod/utag.233.js?utv=ut4.46.202209161551
IP
File type ASCII text, with very long lines (26488)
Hash 70d872e87802e7cde57e19080052ec00
dbe522c00cd655ec05076743d548132e942c1020
ddd478c208e435beda7efe3a4925115a1f341d6d336473b19ffd5362a5231346
GET /nw/prod/utag.233.js?utv=ut4.46.202209161551 HTTP/1.1
Host: tms.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "026ca2454a49e119d1d51b42c66e2ef9:1663949964.196839"
last-modified: Fri, 23 Sep 2022 16:19:24 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Sun, 25 Sep 2022 09:42:12 GMT
date: Sun, 25 Sep 2022 09:12:12 GMT
content-length: 34636
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tms.usaa.com/nw/prod/utag.272.js?utv=ut4.46.202209161551
200 OK 8.1 kB URL HTTP/2 tms.usaa.com/nw/prod/utag.272.js?utv=ut4.46.202209161551
IP
File type ASCII text, with very long lines (4560)
Hash 6d2f393e1fa9ad7a6a3b66639dcd76f5
2de41ed13689c498a3ef561ea4b2954919566d04
0b925e303c81a4f0954e324676bdca1a92096ea2bebb017f0381245414c26aee
GET /nw/prod/utag.272.js?utv=ut4.46.202209161551 HTTP/1.1
Host: tms.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "8319a90deacf26fb1ea40f63c570a31b:1663949964.062326"
last-modified: Fri, 23 Sep 2022 16:19:24 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Sun, 25 Sep 2022 09:42:12 GMT
date: Sun, 25 Sep 2022 09:12:12 GMT
content-length: 8056
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
otiloooapp.herokuapp.com/8GsQz2/lpm/bx9/sqvaGpEZ/3tuJJptN/ODZq/Y2/UzR2c1GHgB
404 Not Found 179 B URL HTTP/1.1 otiloooapp.herokuapp.com/8GsQz2/lpm/bx9/sqvaGpEZ/3tuJJptN/ODZq/Y2/UzR2c1GHgB
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 64db5ad5f2ef41babdba80a6dd0518f6
aa18a9b1580b8522be1ea5525650e49458d6f7e0
5547992afdadb59737c5c0feb1a35dff294cd27145bf290c031737ecf8a2577d
Analyzer Verdict Alert openphish United Services Automobile Association
GET /8GsQz2/lpm/bx9/sqvaGpEZ/3tuJJptN/ODZq/Y2/UzR2c1GHgB HTTP/1.1
Host: otiloooapp.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://otiloooapp.herokuapp.com/
Connection: keep-alive
Cookie: csrftoken=wnPfLdyl88jKP8bAYFzOHV0MH1Ud6KEtb9DZ7tB9kBA9DIGGsBFviTtduUXlW1Rn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Connection: keep-alive
Server: gunicorn
Date: Sun, 25 Sep 2022 09:12:12 GMT
Content-Type: text/html
X-Frame-Options: DENY
Content-Length: 179
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
Via: 1.1 vegur
tms.usaa.com/nw/prod/utag.417.js?utv=ut4.46.202209161551
200 OK 1.7 kB URL HTTP/2 tms.usaa.com/nw/prod/utag.417.js?utv=ut4.46.202209161551
IP
File type ASCII text, with very long lines (995)
Hash 7196f20fe970af55e4d078c83ba3ef7e
c6520c9fbf9536e5f346af5ac05e9df5385e7d50
4a36c0caf0a650f0d9da43ff642822a16736ca0152c2dd682a09410c5b9ff574
GET /nw/prod/utag.417.js?utv=ut4.46.202209161551 HTTP/1.1
Host: tms.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "07d5005875546b38349374766d596c32:1663949963.695125"
last-modified: Fri, 23 Sep 2022 16:19:23 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Sun, 25 Sep 2022 09:42:12 GMT
date: Sun, 25 Sep 2022 09:12:12 GMT
content-length: 1720
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/C1B705B7AD8D5B4C6.woff2
200 OK 23 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/C1B705B7AD8D5B4C6.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22828, version 1.19726\012- data
Hash 085f40d84a8004717ea42b286d93b0e4
d7ff2c4d9fd27ea536ab3dcd220cea2fa0076497
8ca92c098205eebe75921badb282e0219fba6b69f74f71a06afc6e4521462ecf
GET /mcontent/static_assets/Fonts/C1B705B7AD8D5B4C6.woff2 HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:30 GMT
etag: "592c-55f1360680380"
accept-ranges: bytes
content-length: 22828
content-type: font/woff2
cache-control: max-age=514377
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akmaZqBB3xlQh4/e9+OosB03FdR1+8uHVKt9Y9f40cjynn0xiTtM9r7+Y95a/tsn7nxrGHF7Az9P2ouQ/xXGDgCTgQ==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaazlka66LLcjrvnql19pb9Zv12Xjgw+BLvZ74cH8rDlChYmzclL56Cv9Lv5GNfSk0wHpWOYQcsme2F9ozxWvi9Mw==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/E83D71A074DF776F4.woff2
200 OK 22 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/E83D71A074DF776F4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21772, version 1.19726\012- data
Hash 44b3494f8911fb677721629bb389f472
bc7a73021fea8900614b3645113b03c582067928
008889d286feafdf1773721c82309aeef1573bc92096f12e43674ddaae27b1c6
GET /mcontent/static_assets/Fonts/E83D71A074DF776F4.woff2 HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:49 GMT
etag: "550c-55f136189ee40"
accept-ranges: bytes
content-length: 21772
content-type: font/woff2
cache-control: max-age=526504
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akma/1dqMuVGry/0x9Ob0yvZjW7fhsV0mPo/g/O109bGWWlpg5ytrao2N0ZWqW9dPnqIt4h5RaTff7veOOSAbW79RQ==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaafKVapX9bWTy5aNnosKM/elBWpYNv2vG1HxbQ7eoAlHU6U6g35uhrduYpEiQjMvd0Lj4BuF0e927g2HBhMt+qnQ==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/9C7F15704715916A9.woff2
200 OK 15 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/9C7F15704715916A9.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 14912, version 1.13173\012- data
Hash 4016bf4a6f8a2d89febf43d4ffe0ff99
0423953f1962d1c157a9786fe613fd2615693b0f
9ea54106530de63a9c33d3eb5a43d7dd0051c1e876ee8be5b49b73601eb10f1b
GET /mcontent/static_assets/Fonts/9C7F15704715916A9.woff2 HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:17 GMT
etag: "3a40-55f135fa1a640"
accept-ranges: bytes
content-length: 14912
content-type: font/woff2
cache-control: max-age=514411
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akmaCGa97GVLhni+2XU8OLhgtXq7GT35Ec40QG18TmKyU8UuV+SLmFuSrJxxq1ZBiQmYgdOBJo/p/ljoBPJpEraqgw==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaag/3EYULDO6tvIw6EaIawQ805v4EKu6lDlHCSiyw6pny8bp1j5qCXQ4dxVv59c2Ny3MgvjnKbodXoI4o0UyuBOQ==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/9ECBC8FFB535D0532.woff2
200 OK 22 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/9ECBC8FFB535D0532.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22088, version 1.19726\012- data
Hash 3978a25659ccf40e136fefc4a3f1d4af
6e8f8d356dd36e89fe2059b4bff6e58869333f68
947dad01228bb6787ad0218540575dfafe48c76c0623fcb492b6d0b0cfc62e0b
GET /mcontent/static_assets/Fonts/9ECBC8FFB535D0532.woff2 HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:20 GMT
etag: "5648-55f135fcf6d00"
accept-ranges: bytes
content-length: 22088
content-type: font/woff2
cache-control: max-age=514485
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akmamojruIW4mR0m/zRA4EZY7Qpt4+XPz7sY04A2qXKU9jROMdUH3fiEnOBhJWV5RcNDGbAgua5THOfsXhOVZ3vLTg==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaa42WEUUDtH2/ONbGIutfJh10xjBlnFXwrLth4M+UMhVXdNnJWQzDO45hPrQ/SRVa8wab1IBq1MIihxY941OsbJw==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/12C383965421BC56F.woff2
200 OK 14 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/12C383965421BC56F.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 14408, version 1.13173\012- data
Hash 9cfc4e859f5ef4d0ab77df4f8698a7ab
1aa7edc7b3e7da125452b7fad636ef42fb723373
dbcf49bfa4184ed509854e05cd53df0426b5ea1856f6f4aad1f93b2d355d7e1c
GET /mcontent/static_assets/Fonts/12C383965421BC56F.woff2 HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:27:37 GMT
etag: "3848-55f135d3f4c40"
accept-ranges: bytes
content-length: 14408
content-type: font/woff2
cache-control: max-age=526534
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akmaisTAaQGxDNyOcEwNIH42MCGv4BHU3sSII01xHIvGO8a0Nqz6uM6nmWy+o6X9f1cMtnNyVHtzKE7cyWPLOVSB6A==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaaUVwM0r8YvPnqZi9PIU2xT3effqPGlZ2ruh0Zvm7ihcqSfo9TufYB0BECZSJeM6BZO4cqD5Dd7GMQM+zRDrNtyw==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/F68DD4439278D0467.woff2
200 OK 23 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/F68DD4439278D0467.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22892, version 1.19726\012- data
Hash 890566a4fd4453d50c19ab3c37ddf1dc
f2a9afc95e99600061027305ef229f1d8802713d
b47c74b16a02f8df070e4bd91b1b542ba2765624e8ec56a59305a91559a83682
GET /mcontent/static_assets/Fonts/F68DD4439278D0467.woff2 HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:39 GMT
etag: "596c-55f1360f157c0"
accept-ranges: bytes
content-length: 22892
content-type: font/woff2
cache-control: max-age=512397
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akma+tm39cawbzbY23V1JY0hDwmTgQFkqX2kV2qf0kBY+1tEr1YwS0zMngtC/Z2mQF41cSTi8jOfW0Ldx0d+nlmdRQ==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaaEedK1epwCAlPvPs3BzcgTON709Zs/PCp9W2s55IpgwRccB+mSJ+tATohWezimi2TF+eJ+AuIyVWqnDIO4liGUA==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
www.sjwoe.com/policy
200 OK 28 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cb03d8f455e88d7bb7050795f9f9cfc9
ad15e9674b599d400994e2e83d094e696c76eb98
4bfe3fd63b2ce813a2e3e1252146acf89e82d30222ca39161cf68086449cd64b
GET /policy HTTP/1.1
Host: www.sjwoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 28
date: Sun, 25 Sep 2022 03:42:46 GMT
x-amzn-requestid: 8ebe6059-69ab-4e4f-9b20-7baae9b15c50
access-control-allow-origin: *
x-amz-apigw-id: Y_0ogEoyoAMFqtg=
cache-control: max-age=3600
x-amzn-trace-id: Root=1-632fce36-0b834c6900d947f516f12380;Sampled=0
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tA-19BupeoDo2C8DHjU2r0SvsWhETwYYZPFhQ2lWhedfN4K_x5jOCA==
age: 19766
X-Firefox-Spdy: h2
www.sjwoe.com/policy
200 OK 28 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cb03d8f455e88d7bb7050795f9f9cfc9
ad15e9674b599d400994e2e83d094e696c76eb98
4bfe3fd63b2ce813a2e3e1252146acf89e82d30222ca39161cf68086449cd64b
GET /policy HTTP/1.1
Host: www.sjwoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 28
date: Sun, 25 Sep 2022 03:42:46 GMT
x-amzn-requestid: 8ebe6059-69ab-4e4f-9b20-7baae9b15c50
access-control-allow-origin: *
x-amz-apigw-id: Y_0ogEoyoAMFqtg=
cache-control: max-age=3600
x-amzn-trace-id: Root=1-632fce36-0b834c6900d947f516f12380;Sampled=0
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yCXO3pZmwIT83Of2XgyXHmrH8C52CGm763agfSj7kYRJXZP0PPUc1Q==
age: 19766
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/C1B705B7AD8D5B4C6.woff
200 OK 29 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/C1B705B7AD8D5B4C6.woff
IP
File type Web Open Font Format, TrueType, length 28985, version 1.0\012- data
Hash 23d6cb2ad67004ecc850580b244a4eb3
67ee0c465e4e9cd2320d26d8e8b15fb0620b4a88
98d1c5521936e34b7623b7f151d79c2610f1aa8cdbfe381f94103af1d0cf7933
GET /mcontent/static_assets/Fonts/C1B705B7AD8D5B4C6.woff HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:29 GMT
etag: "7139-55f136058c140"
accept-ranges: bytes
content-length: 28985
content-type: text/plain
cache-control: max-age=515705
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akma9j50sKmVflIa8tVjUrbGMyMlQ/II2juzp1WwhVpQdxAokxYP8XWwot8RwiBOT1FlCZ17YYy9fCrCMeLV2fYbNA==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaanFqGjTHilYMPPFeTf9x5vfin9HhgTiPaptOmPDSVhOghlkKnNf1rI21Q8dagPlwGopmI+voNIX1VtgRR+JGxIA==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/9ECBC8FFB535D0532.woff
200 OK 28 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/9ECBC8FFB535D0532.woff
IP
File type Web Open Font Format, TrueType, length 28201, version 1.0\012- data
Hash 48a2c0645c1a1b0af7f2f961b448dcc9
e3e70317a9d5a996a05e08ffb0c92bb12600c9b3
9bdae78a8c509f414cffdb7fee422988979841a09925b891b95a10d9088bd75f
GET /mcontent/static_assets/Fonts/9ECBC8FFB535D0532.woff HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:19 GMT
etag: "6e29-55f135fc02ac0"
accept-ranges: bytes
content-length: 28201
content-type: text/plain
cache-control: max-age=515813
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akmagjboLrtB8p2jA+INEUvSV/M0Za+CnLO+uzmaoz/9kDNCgFpj5NS3wFijdJ670H2vLNVxIhmhbZYsnT11RYhrGA==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaaDcDvOtFLSUAHoDe3Hh5QIHD/OpJxWGnujG9GqRMNhfyt+wTm0Sg472jg+c/dLFTEXLXjXx1NfTK2uIDbsz52kQ==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/F68DD4439278D0467.woff
200 OK 29 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/F68DD4439278D0467.woff
IP
File type Web Open Font Format, TrueType, length 28825, version 1.0\012- data
Hash 027d2b41b8117a0170ad5608a28f8447
f2a742f624fb9e46e9b56ff85e0d57572c193d87
9b510b9bfbcfeb026714418a2c004399ca1ab07385bd782e8ede083b94689f27
GET /mcontent/static_assets/Fonts/F68DD4439278D0467.woff HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:37 GMT
etag: "7099-55f1360d2d340"
accept-ranges: bytes
content-length: 28825
content-type: text/plain
cache-control: max-age=517297
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akmacwxUPRGGDZ6aG/p28qGs0n0XL47Khj32LM3mv6i5heIkNHHNq7KM+SNWuQ/TSFEH9LX0mzQWERloai6ZwLwHOw==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaa5pgHf7yyowHv9lUxfk7T7s8oX9wMhY7PE1N6a2I2uxIJwoXJpxVnOzaSekn4QTkRgHTlbGDs3Yejc3/DyQ9spA==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nfoYWSl+zPH6OHF19vjpkw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iyHea1PPRoOUsoZd/vGlZKXdjeQ=
tags.usaa.com/cj/11168/pageInfo
200 OK 68 B URL HTTP/2 tags.usaa.com/cj/11168/pageInfo
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
POST /cj/11168/pageInfo HTTP/1.1
Host: tags.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://otiloooapp.herokuapp.com
Content-Length: 190
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 68
x-request-id: 24391786-3cb2-11ed-aec4-ef25488760e5
server: nginx
cache-control: no-store
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: Npl-awr0K49NP9dwMM_UoTq5m_yoWvj0w4eSEM07AyFRVpkjnRzUqg==
date: Sun, 25 Sep 2022 09:12:12 GMT
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tags.usaa.com/cj/11168/pageInfo
200 OK 68 B URL HTTP/2 tags.usaa.com/cj/11168/pageInfo
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
POST /cj/11168/pageInfo HTTP/1.1
Host: tags.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://otiloooapp.herokuapp.com
Content-Length: 190
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 68
x-request-id: 243965f7-3cb2-11ed-8073-05c81d7db61a
server: nginx
cache-control: no-store
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 6zF9hZj-j_SShfHGdxL8AypL256aSeuD8XqXAvqvdwqCN1mpMhBLug==
date: Sun, 25 Sep 2022 09:12:12 GMT
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tags.usaa.com/cj/11168/pageInfo
200 OK 68 B URL HTTP/2 tags.usaa.com/cj/11168/pageInfo
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
POST /cj/11168/pageInfo HTTP/1.1
Host: tags.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://otiloooapp.herokuapp.com
Content-Length: 190
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 68
x-request-id: 243fceb9-3cb2-11ed-9387-7dcd017b2320
server: nginx
cache-control: no-store
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: VNQLHYePixw7-r3f1ELxYqf7i_ZkuAjwcgKgDWhvmEPYg_o853jlbA==
date: Sun, 25 Sep 2022 09:12:12 GMT
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tags.usaa.com/cj/11168/pageInfo
200 OK 68 B URL HTTP/2 tags.usaa.com/cj/11168/pageInfo
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
POST /cj/11168/pageInfo HTTP/1.1
Host: tags.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://otiloooapp.herokuapp.com
Content-Length: 190
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
x-request-id: 243f0b6c-3cb2-11ed-8021-c7a001ddc662
server: nginx
cache-control: no-store
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: lFzpFMqw9jiSxYgaeUsZVpz4L7f8Y1q1zn3PR03ZaNd6paRLmdQ5Qg==
date: Sun, 25 Sep 2022 09:12:12 GMT
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/E83D71A074DF776F4.woff
200 OK 28 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/E83D71A074DF776F4.woff
IP
File type Web Open Font Format, TrueType, length 27799, version 1.0\012- data
Hash afd03596db023de5faee9977d78619a5
8e7dcd0e0b6a7e522a7d643fd289dabb3b687e15
862eff8a57590f8e85dd621b011f688df35f8efea22f441abedef959721cc979
GET /mcontent/static_assets/Fonts/E83D71A074DF776F4.woff HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:35 GMT
etag: "6c97-55f1360b44ec0"
accept-ranges: bytes
content-length: 27799
content-type: text/plain
cache-control: max-age=512905
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akmarSHW4xVgmerfWuieJm4VOL8wUoQHNN3jUJblfa0vCXZIROyDnLUVJS03+X5+fhudmkTk494zzkJkBRQVmPAGLA==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaaDcviise74rXU56WNlQq+rEfhU6r7oxGZHnQdiif2uNLYVQRl404MYPLKTyo4poLgE3WA4mZCG4mnKXAB7mIm4Q==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/9C7F15704715916A9.woff
200 OK 17 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/9C7F15704715916A9.woff
IP
File type Web Open Font Format, CFF, length 17443, version 1.0\012- data
Hash 0ae90578ca1e9d134d44a1a3282bae64
5e6e22ae5a59cda1c0876d3376a1656e866d7e3b
73494b42cbe09cef2382099e45afd65dbf99af4ab4ced0072be19163ff748846
GET /mcontent/static_assets/Fonts/9C7F15704715916A9.woff HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:28:14 GMT
etag: "4423-55f135f73df80"
accept-ranges: bytes
content-length: 17443
content-type: text/plain
cache-control: max-age=579883
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akmaHxht9ASoh8F7mWo5lRnIE3+8hKPEiYD498kRnBOs3kbkjuZVCcZ7uQptWx656XylJbblK0Y1V+8/9qQgB4VF5w==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaaY42OntNx7NARc6RZ8b9PeXT5Famgp3w3XJPKPOIcjQQLXS6ilolROQd/M07RZsuQXNh186N78P543U1+qeOaeQ==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
content.usaa.com/mcontent/static_assets/Fonts/12C383965421BC56F.woff
200 OK 17 kB URL HTTP/2 content.usaa.com/mcontent/static_assets/Fonts/12C383965421BC56F.woff
IP
File type Web Open Font Format, CFF, length 16835, version 1.0\012- data
Hash 011f6e6a5603cbcabd996e4193ecf46e
766959c25fc1448c2ba185668867b85bf6aa40a5
e1a4d363aa34a9253ccca92fed02d19e7769737d18b34f402f181992429a39ed
GET /mcontent/static_assets/Fonts/12C383965421BC56F.woff HTTP/1.1
Host: content.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://otiloooapp.herokuapp.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Nov 2017 23:27:35 GMT
etag: "41c3-55f135d20c7c0"
accept-ranges: bytes
content-length: 16835
content-type: text/plain
cache-control: max-age=525068
date: Sun, 25 Sep 2022 09:12:12 GMT
set-cookie: akmachineid=akmaYav9k4CM7ikJP2dSMJRmLUZ8a5nKcFDV1rKkDrYbeTWS96QPT5XvFDToCJdZ2etKR0xSKfhrV+Xv8vrLxT/n6g==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaakgDW4SaMI2LKY/w85w0iHc+atQDQP3Nt1WHiIx9jx7nkSsZhSd2oGdacRbKSLSH4SyBTUqC49/3JiE7/aW9x0w==; expires=Wed, 22-Sep-2032 09:12:12 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
server: USAA-Service
X-Firefox-Spdy: h2
www.usaa.com/utils/externals/react!react-dom/17.0.2/react!react-dom.min.js?akredirect=true
200 OK 4.0 kB URL HTTP/2 www.usaa.com/utils/externals/react!react-dom/17.0.2/react!react-dom.min.js?akredirect=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1702), with CRLF, LF line terminators
Hash 4ac6fefce754b939ff479e625d8e06e0
1ed973723970010b4925be66198ddbf9c73096f2
08168c13db25ad949ca29096c9e323bf3b9a2b82d8a6e4b82892fb79ebe03754
GET /utils/externals/react!react-dom/17.0.2/react!react-dom.min.js?akredirect=true HTTP/1.1
Host: www.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: USAA-Honesty
content-length: 4029
content-type: text/html
set-cookie: akmachineid=akmacJbNbtcZCVTeLHg02f+mr63v4gRIxwNAswyuH/CTLCC9v8AKzZpIUvewOZre9V5Thaj4m9wLePdGCHKqYUdu3g==; expires=Wed, 22-Sep-2032 09:12:13 GMT; Secure; Path=/; domain=.usaa.com
akusaa=akusaakOQtWLEI3ccVORBXa/wPj2/1jkWpj65Kx3shkWtLT/IYu2+2/reM+g8MR6ukRSACYRffUdc2sf8aMEQxMV19pQ==; expires=Wed, 22-Sep-2032 09:12:13 GMT; Secure; Path=/; domain=.usaa.com
strict-transport-security: max-age=31536000
etag: "c27893a6e57b88850208e511dc965afb:1508878722"
expires: Sun, 25 Sep 2022 09:12:13 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 25 Sep 2022 09:12:13 GMT
X-Firefox-Spdy: h2
otiloooapp.herokuapp.com/my/logon/ent-unified-logon-web.c9102f3887a609c51e93.js
404 Not Found 179 B URL HTTP/1.1 otiloooapp.herokuapp.com/my/logon/ent-unified-logon-web.c9102f3887a609c51e93.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 64db5ad5f2ef41babdba80a6dd0518f6
aa18a9b1580b8522be1ea5525650e49458d6f7e0
5547992afdadb59737c5c0feb1a35dff294cd27145bf290c031737ecf8a2577d
Analyzer Verdict Alert openphish United Services Automobile Association
GET /my/logon/ent-unified-logon-web.c9102f3887a609c51e93.js HTTP/1.1
Host: otiloooapp.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://otiloooapp.herokuapp.com/
Connection: keep-alive
Cookie: csrftoken=wnPfLdyl88jKP8bAYFzOHV0MH1Ud6KEtb9DZ7tB9kBA9DIGGsBFviTtduUXlW1Rn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Connection: keep-alive
Server: gunicorn
Date: Sun, 25 Sep 2022 09:12:13 GMT
Content-Type: text/html
X-Frame-Options: DENY
Content-Length: 179
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
Via: 1.1 vegur
otiloooapp.herokuapp.com/8GsQz2/lpm/bx9/sqvaGpEZ/3tuJJptN/ODZq/Y2/UzR2c1GHgB
404 Not Found 179 B URL HTTP/1.1 otiloooapp.herokuapp.com/8GsQz2/lpm/bx9/sqvaGpEZ/3tuJJptN/ODZq/Y2/UzR2c1GHgB
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 64db5ad5f2ef41babdba80a6dd0518f6
aa18a9b1580b8522be1ea5525650e49458d6f7e0
5547992afdadb59737c5c0feb1a35dff294cd27145bf290c031737ecf8a2577d
Analyzer Verdict Alert openphish United Services Automobile Association
GET /8GsQz2/lpm/bx9/sqvaGpEZ/3tuJJptN/ODZq/Y2/UzR2c1GHgB HTTP/1.1
Host: otiloooapp.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://otiloooapp.herokuapp.com/
Connection: keep-alive
Cookie: csrftoken=wnPfLdyl88jKP8bAYFzOHV0MH1Ud6KEtb9DZ7tB9kBA9DIGGsBFviTtduUXlW1Rn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Connection: keep-alive
Server: gunicorn
Date: Sun, 25 Sep 2022 09:12:13 GMT
Content-Type: text/html
X-Frame-Options: DENY
Content-Length: 179
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
Via: 1.1 vegur
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 58b52380a6b5c598d1ad88e8da148137
a56206a0277aea6e8e2f7629793aba713d8edd0c
561a57c27dfa1f8651a89292428576b626e8700b9cd6b8173a0ce121aa8f9f4a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 58b52380a6b5c598d1ad88e8da148137
a56206a0277aea6e8e2f7629793aba713d8edd0c
561a57c27dfa1f8651a89292428576b626e8700b9cd6b8173a0ce121aa8f9f4a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 58b52380a6b5c598d1ad88e8da148137
a56206a0277aea6e8e2f7629793aba713d8edd0c
561a57c27dfa1f8651a89292428576b626e8700b9cd6b8173a0ce121aa8f9f4a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 58b52380a6b5c598d1ad88e8da148137
a56206a0277aea6e8e2f7629793aba713d8edd0c
561a57c27dfa1f8651a89292428576b626e8700b9cd6b8173a0ce121aa8f9f4a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Sun, 25 Sep 2022 08:41:09 GMT
expires: Sun, 25 Sep 2022 10:41:09 GMT
cache-control: public, max-age=7200
age: 1864
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/plugins/ua/linkid.js
200 OK 859 B URL HTTP/2 www.google-analytics.com/plugins/ua/linkid.js
IP
File type ASCII text, with very long lines (1335)
Hash 904463ce35aee800847ab85ec948aaf6
904e4d2647466c7f7e0f7412019984e3b2ccfb24
057b4d29359dfe2536a2ec40243bdfa7b151222efcc1eb358608994a14c34237
GET /plugins/ua/linkid.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 859
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 08:16:04 GMT
expires: Sun, 25 Sep 2022 09:16:04 GMT
cache-control: public, max-age=3600
age: 3369
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
otiloooapp.herokuapp.com/favicon.ico
404 Not Found 179 B URL HTTP/1.1 otiloooapp.herokuapp.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 64db5ad5f2ef41babdba80a6dd0518f6
aa18a9b1580b8522be1ea5525650e49458d6f7e0
5547992afdadb59737c5c0feb1a35dff294cd27145bf290c031737ecf8a2577d
Analyzer Verdict Alert openphish United Services Automobile Association
GET /favicon.ico HTTP/1.1
Host: otiloooapp.herokuapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://otiloooapp.herokuapp.com/
Connection: keep-alive
Cookie: csrftoken=wnPfLdyl88jKP8bAYFzOHV0MH1Ud6KEtb9DZ7tB9kBA9DIGGsBFviTtduUXlW1Rn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Connection: keep-alive
Server: gunicorn
Date: Sun, 25 Sep 2022 09:12:13 GMT
Content-Type: text/html
X-Frame-Options: DENY
Content-Length: 179
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
Via: 1.1 vegur
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 58b52380a6b5c598d1ad88e8da148137
a56206a0277aea6e8e2f7629793aba713d8edd0c
561a57c27dfa1f8651a89292428576b626e8700b9cd6b8173a0ce121aa8f9f4a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 09:12:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7172
Expires: Sun, 25 Sep 2022 11:11:45 GMT
Date: Sun, 25 Sep 2022 09:12:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7172
Expires: Sun, 25 Sep 2022 11:11:45 GMT
Date: Sun, 25 Sep 2022 09:12:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7172
Expires: Sun, 25 Sep 2022 11:11:45 GMT
Date: Sun, 25 Sep 2022 09:12:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7172
Expires: Sun, 25 Sep 2022 11:11:45 GMT
Date: Sun, 25 Sep 2022 09:12:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7172
Expires: Sun, 25 Sep 2022 11:11:45 GMT
Date: Sun, 25 Sep 2022 09:12:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78aaf154-de5d-4fec-94c5-4e185b4c0cc1.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78aaf154-de5d-4fec-94c5-4e185b4c0cc1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7eba9d4ed7413abb8e8824cc86071b50
1ec47b0f11a2b1173a1dcd32d541e5680b0088b1
399622d6099137974fa30a332c145b45182a7be272523a325418c63bfe70e5a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78aaf154-de5d-4fec-94c5-4e185b4c0cc1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4320
x-amzn-requestid: 72d102a6-8552-473f-b3f8-99450722017d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y--PmHEgIAMFXvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7730-7e4789b1723913e2500ea5f2;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Pai6CsC8F_VDgt6BkP9aRekL5WzUkwNdrvetIijRKlGByWm6skpb6w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 22:01:14 GMT
age: 40259
etag: "1ec47b0f11a2b1173a1dcd32d541e5680b0088b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb442b904-290c-4a62-b7de-aadc1622cac4.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb442b904-290c-4a62-b7de-aadc1622cac4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4ecc2a02c5bf02ae98849085d835b2dd
5fc6f043ab0929c95b84b78c9d03befbe0fadea0
ac308de6a557df495017c8cd16d431711daee7107686c1b74cd4e6f0e63de961
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb442b904-290c-4a62-b7de-aadc1622cac4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8883
x-amzn-requestid: 684fdd05-960b-42cb-8544-3347a4bf9b36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y--PmEaqIAMFz4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7730-2642e1df108d0f7a5d98b126;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ww7Y221O3YKYU2YLj-uLBxsJoTTCvV4nZd1Vlh2DK1TAFv2BINUJ4w==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:05 GMT
age: 41708
etag: "5fc6f043ab0929c95b84b78c9d03befbe0fadea0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dfdacc8edea3c24dad020d7e9c11b3f4
2b6e37596e88b62f288dc8e8c937fd904fae28d5
338a44f3bcc01bdd197f037dd8f8bf58a18dea00127465488efe76fb72a6fdff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8914
x-amzn-requestid: 8cfdc32e-f04a-4fd6-a1f1-632934a682fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_EUHqJoAMF7MQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7881-14a6d8ef126409964607e0aa;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kdF6En2vbJhRH1bkYMOuNm5XOIsT1qs3FE281N1SKn1FbyW-oNZsEw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:06 GMT
age: 41707
etag: "2b6e37596e88b62f288dc8e8c937fd904fae28d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d4989e-b390-4a8b-be36-820e0256c211.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d4989e-b390-4a8b-be36-820e0256c211.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b247d936b6e75a5075e09d9d2f7c3b1
7d3650b77b7f501d2f94592b8a4c0e02a75feb70
165d5ef729be431744228c7f1791141536db476811a3e9c7ab5958c6e38a781a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d4989e-b390-4a8b-be36-820e0256c211.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7977
x-amzn-requestid: 6d6cbdf9-91f4-4fb5-8afe-cb8dea476e8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_EoFjtIAMFjcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7883-5681f08725a5ce7e36c27d75;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:07 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2PPXUy_jWaHVW359h8C0Y4KHHwGTHGju_8C1BGdNuZdroWCuSD74aA==
via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:58:23 GMT
age: 40430
etag: "7d3650b77b7f501d2f94592b8a4c0e02a75feb70"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff440191a-84ee-43b5-bafa-0bb36c962f39.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff440191a-84ee-43b5-bafa-0bb36c962f39.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b156552f4d76fd964b279ebcf8cd1f8e
6a02487368bbe41b87feeef1f70f7320392d72a3
ceddf1a515c64d0071a4d90c26de60a27ee2bf2af341bf1572fb05743d2cc644
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff440191a-84ee-43b5-bafa-0bb36c962f39.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5293
x-amzn-requestid: a35423bc-9112-48da-85e0-93ac41794d29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y--PkGehoAMF1pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7730-450fad077885fae416572443;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: IAon_ZYxu87A9OB775Q1unI4sdLHdE-Ij9QNYaB2mqftP0IoAsgnvQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:39:22 GMT
age: 41571
etag: "6a02487368bbe41b87feeef1f70f7320392d72a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Hash b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: W6ZD1652Yn1xqZG7ehDcirlYoG8Hcsrdj11Fzfgj7zb-OiU8xHj1gw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:32 GMT
age: 41681
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tms.usaa.com/nw/prod/utag.318.js?utv=ut4.46.202209161551
200 OK 0 B URL HTTP/2 tms.usaa.com/nw/prod/utag.318.js?utv=ut4.46.202209161551
IP
GET /nw/prod/utag.318.js?utv=ut4.46.202209161551 HTTP/1.1
Host: tms.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "bc0622d4d734bbb79780a7da19923b00:1663949962.868688"
last-modified: Fri, 23 Sep 2022 16:19:22 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Sun, 25 Sep 2022 09:42:12 GMT
date: Sun, 25 Sep 2022 09:12:12 GMT
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tms.usaa.com/nw/prod/utag.js
200 OK 0 B URL HTTP/2 tms.usaa.com/nw/prod/utag.js
IP
GET /nw/prod/utag.js HTTP/1.1
Host: tms.usaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "8e4c6690dd4d9b8cf1b3c53c80262a04:1663949965.996782"
last-modified: Fri, 23 Sep 2022 16:19:26 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1800
expires: Sun, 25 Sep 2022 09:42:12 GMT
date: Sun, 25 Sep 2022 09:12:12 GMT
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn.tailwindcss.com/3.1.8
200 OK 0 B URL HTTP/2 cdn.tailwindcss.com/3.1.8
IP
GET /3.1.8 HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 09:12:11 GMT
content-type: text/javascript
cache-control: max-age=31536000
x-vercel-cache: MISS
x-vercel-id: syd1::iad1::5cswb-1659718880314-e36b19295c12
strict-transport-security: max-age=63072000
last-modified: Fri, 05 Aug 2022 17:01:21 GMT
cf-cache-status: HIT
age: 4378250
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nk%2FEtj3P4Tm86o%2BukDla%2B80Eyku2ibv7mbugswj37arl3sgukwE6kb4ca2DvLh2pg0VdD%2FH1%2Fga8HuAP14hWyhaEQdjsOeX8jYORrqguU13AUm2XotOVw%2B41mtVvzWaeQc372aE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7502a3025cb6b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
3.209.172.72
23.13.37.115
104.110.14.66
93.184.220.29
52.30.100.208