Overview

URLdirect-credit-suisse-e1f47.web.app/
IP 199.36.158.100 (United States)
ASN#54113 FASTLY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-02 05:56:19 UTC
StatusLoading report..
IDS alerts0
Blocklist alert6
urlquery alerts No alerts detected
Tags None

Domain Summary (22)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
direct.credit-suisse.com (10) 0 2017-07-03 11:47:15 UTC 2022-12-01 17:26:45 UTC 198.240.216.40 Domain (credit-suisse.com) ranked at: 38102
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-12-01 18:13:33 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
direct-credit-suisse-e1f47.web.app (2) 0 2022-12-01 14:40:00 UTC 2022-12-02 02:37:40 UTC 199.36.158.100 Unknown ranking
r3.o.lencr.org (7) 344 No data No data 23.36.77.32
firefox.settings.services.mozilla.com (1) 867 2020-06-04 20:08:41 UTC 2022-12-01 17:14:08 UTC 34.102.187.140
ajax.aspnetcdn.com (1) 693 2012-05-24 13:35:31 UTC 2020-04-28 09:07:42 UTC 152.199.19.160
cpnlify-default-rtdb.firebaseio.com (1) 0 2022-11-29 15:14:35 UTC 2022-12-01 17:26:46 UTC 34.120.160.131 Domain (firebaseio.com) ranked at: 45172
ocsp.pki.goog (15) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.131
cdn.jsdelivr.net (1) 439 2012-09-30 00:15:09 UTC 2020-08-10 12:12:39 UTC 151.101.1.229
ocsp.globalsign.com (1) 2075 2012-07-20 17:46:16 UTC 2020-05-02 20:58:10 UTC 104.18.20.226
unpkg.com (2) 11693 2016-01-07 23:26:01 UTC 2022-12-01 18:41:54 UTC 104.16.125.175
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-01 17:12:49 UTC 34.117.237.239
ocsp.quovadisglobal.com (8) 4610 2012-10-10 00:35:30 UTC 2022-12-01 20:48:06 UTC 152.195.132.213
code.jquery.com (1) 634 2012-05-21 17:28:02 UTC 2020-04-21 12:46:20 UTC 69.16.175.10
www.gstatic.com (5) 0 2016-07-26 09:37:06 UTC 2022-12-01 17:12:24 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 54.70.239.215
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-12-01 18:48:44 UTC 142.250.74.72
firebaseinstallations.googleapis.com (2) 529 2019-10-17 19:26:38 UTC 2022-12-01 21:12:30 UTC 142.250.74.170
img-getpocket.cdn.mozilla.net (5) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
ipinfo.io (1) 8136 2016-08-10 14:14:24 UTC 2022-12-01 17:12:57 UTC 34.117.59.81

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-12-01 2 direct-credit-suisse-e1f47.web.app/ Credit Suisse
2022-12-01 2 direct-credit-suisse-e1f47.web.app/ Credit Suisse

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-02 2 direct-credit-suisse-e1f47.web.app/ Phishing
2022-12-02 2 direct-credit-suisse-e1f47.web.app/ Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-02 2 direct-credit-suisse-e1f47.web.app Sinkholed
2022-12-02 2 direct-credit-suisse-e1f47.web.app Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.36.158.100
Date UQ / IDS / BL URL IP
2023-02-08 06:34:03 +0000 0 - 0 - 8 greenenergy-sharedrive-0utlook.web.app/ 199.36.158.100
2023-02-08 06:31:48 +0000 0 - 0 - 6 grechtaine.firebaseapp.com/ 199.36.158.100
2023-02-08 06:19:57 +0000 0 - 0 - 2 sendermailbox555.firebaseapp.com/ 199.36.158.100
2023-02-08 04:47:29 +0000 0 - 0 - 8 file-share-drive-folder-sharepoint-view.web.app/ 199.36.158.100
2023-02-08 04:46:26 +0000 0 - 0 - 2 ing-de.web.app/ 199.36.158.100


Last 5 reports on ASN: FASTLY
Date UQ / IDS / BL URL IP
2023-02-08 07:50:36 +0000 0 - 0 - 0 bio.site/2023antmanandthewaspbgsubub 151.101.130.132
2023-02-08 07:41:47 +0000 0 - 0 - 2 dev-bancolombiaaactualizacionnueva.pantheonsi (...) 23.185.0.1
2023-02-08 07:36:50 +0000 0 - 0 - 0 bio.site/antman3bgsub2023 151.101.66.132
2023-02-08 06:34:03 +0000 0 - 0 - 8 greenenergy-sharedrive-0utlook.web.app/ 199.36.158.100
2023-02-08 06:31:48 +0000 0 - 0 - 6 grechtaine.firebaseapp.com/ 199.36.158.100


Last 4 reports on domain: direct-credit-suisse-e1f47.web.app
Date UQ / IDS / BL URL IP
2023-01-13 21:21:31 +0000 0 - 0 - 4 direct-credit-suisse-e1f47.web.app/ 199.36.158.100
2022-12-02 05:56:19 +0000 0 - 0 - 6 direct-credit-suisse-e1f47.web.app/ 199.36.158.100
2022-12-01 17:26:56 +0000 0 - 0 - 3 direct-credit-suisse-e1f47.web.app/ 199.36.158.100
2022-12-01 14:40:17 +0000 0 - 0 - 3 direct-credit-suisse-e1f47.web.app/ 199.36.158.100


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-02 04:40:18 +0000 0 - 0 - 3 direct-credit-suisse-e1f47.firebaseapp.com/ 199.36.158.100
2022-12-02 00:23:36 +0000 0 - 0 - 27 direct-credit-suisse-e1f47.firebaseapp.com/lo (...) 199.36.158.100
2022-12-01 23:52:41 +0000 0 - 0 - 2 direct-credit-suisse-e1f47.firebaseapp.com/lo (...) 199.36.158.100
2022-12-01 23:52:11 +0000 0 - 0 - 2 direct-credit-suisse-e1f47.firebaseapp.com/lo (...) 199.36.158.100
2022-12-01 17:26:56 +0000 0 - 0 - 3 direct-credit-suisse-e1f47.web.app/ 199.36.158.100

JavaScript

Executed Scripts (30)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (71)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: direct-credit-suisse-e1f47.web.app
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         199.36.158.100
HTTP/1.1 301 Moved Permanently
                                        
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://direct-credit-suisse-e1f47.web.app/
Accept-Ranges: bytes
Date: Fri, 02 Dec 2022 05:56:07 GMT
X-Served-By: cache-bma1670-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1669960567.491772,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - openphish: Credit Suisse
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9003
Expires: Fri, 02 Dec 2022 08:26:10 GMT
Date: Fri, 02 Dec 2022 05:56:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 251
Cache-Control: max-age=103156
Date: Fri, 02 Dec 2022 05:56:07 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:35:23 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: direct-credit-suisse-e1f47.web.app
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         199.36.158.100
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: max-age=3600
content-encoding: br
etag: "6c34d76d3594b31a174919c5524a0347b8b4980bb87c25c87bcf4ea898ca10a7-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Dec 2022 05:56:07 GMT
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669960568.816786,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1025
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   1025
Md5:    49a1ab756ab1ea42056a4f70f52d186f
Sha1:   351cb10b9df4f638c0c43a3e6482e09ee783f34d
Sha256: 70f2342359514abecd58e6bda9f2b21de0381f4f44a315d561ae6f3fb83e66dc

Alerts:
  Blocklists:
    - openphish: Credit Suisse
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 05:19:51 GMT
cache-control: public,max-age=3600
age: 2176
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6990
Expires: Fri, 02 Dec 2022 07:52:37 GMT
Date: Fri, 02 Dec 2022 05:56:07 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 2ueBz1+LerjhxvggbYrke4VYQdgJ5CH8dzI7pUp6fSbR5O9DGuAsySLYpajDwG3qoKPy9yXNDHY=
x-amz-request-id: K2Q1KA16ZMNEZW0K
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 05:46:35 GMT
age: 572
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 02 Dec 2022 05:56:07 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /s/gts1d4int/8EklPeV1cd0 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /npm/uuid@latest/dist/umd/uuidv4.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.1.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 8.3.2
x-jsd-version-type: version
etag: W/"556-Wdn/VD6mBE6EvolddgVB6g4Ez5g"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 02 Dec 2022 05:56:08 GMT
age: 26258
x-served-by: cache-fra19158-FRA, cache-bma1660-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 669
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1366), with no line terminators
Size:   669
Md5:    410a517cf9f3478998f3b01bbcb6fdc9
Sha1:   f3374770c11535a58ef6ac7ff44fea0c2e6f9d35
Sha256: 37ffa90fc1782840938551dbc7a8366efa13f68af2c289e68765a89d8d1c3e48
                                        
                                            GET /ajax/jQuery/jquery-3.3.1.min.js HTTP/1.1 
Host: ajax.aspnetcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         152.199.19.160
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 22962063
cache-control: public,max-age=31536000
date: Fri, 02 Dec 2022 05:56:08 GMT
etag: "80288516b793d31:0"
last-modified: Mon, 22 Jan 2018 19:27:49 GMT
server: ECAcc (ska/F7A8)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30394
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30394
Md5:    a263be51483c81a54aa8c85104a93e55
Sha1:   555a54a73531c553bd2aede6abc25c128b63312e
Sha256: b2f13ad730928958c09d89e6e32bb6a227c0260d032a39ca464d998a59e57a66
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "3B484099CD23F2101F5A61CC6C161CF2CF5E5114"
Expires: Fri, 02 Dec 2022 17:00:00 GMT
Last-Modified: Fri, 02 Dec 2022 05:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 652
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7731d14f6e22b51b-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    bf59d606ede7ab20019906413ae5c150
Sha1:   a9bd68ea0ffd7b208b554c5eb3fce97e1938d3b6
Sha256: a480643ca83411152046b1c6efa0a06466f66c4da682d8c8874a7d6b7bf1e9e8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.quovadisglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         152.195.132.213
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6480
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Date: Fri, 02 Dec 2022 05:56:08 GMT
Etag: "aaf0d26ca23c5450b92ed891acf4c128a56bf544"
Expires: Sun, 04 Dec 2022 05:56:07 GMT
Last-Modified: Fri, 02 Dec 2022 04:08:08 GMT
Server: ECAcc (ska/F78F)
X-Cache: HIT
Content-Length: 1753


--- Additional Info ---
Magic:  data
Size:   1753
Md5:    ba65716fe1995a68b3de456325afddbe
Sha1:   aaf0d26ca23c5450b92ed891acf4c128a56bf544
Sha256: 9e282254ee6de93845823a9b66e6e74d0c81e9d3d24bd69a3766d9054ed26a68
                                        
                                            POST / HTTP/1.1 
Host: ocsp.quovadisglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         152.195.132.213
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Date: Fri, 02 Dec 2022 05:56:08 GMT
Etag: "edc52fceb406113e19a563cabebe77b6c7179f07"
Expires: Sun, 04 Dec 2022 05:56:07 GMT
Last-Modified: Fri, 02 Dec 2022 05:56:08 GMT
Server: Apache
Content-Length: 1753


--- Additional Info ---
Magic:  data
Size:   1753
Md5:    e18136fc6fbb533c925da5500621d1c9
Sha1:   edc52fceb406113e19a563cabebe77b6c7179f07
Sha256: d5dbb16b504ec03fcf52bf83fd3cb6ca8e38527617aae73f0a15d3d51db64661
                                        
                                            POST / HTTP/1.1 
Host: ocsp.quovadisglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         152.195.132.213
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Date: Fri, 02 Dec 2022 05:56:08 GMT
Etag: "edc52fceb406113e19a563cabebe77b6c7179f07"
Expires: Sun, 04 Dec 2022 05:56:07 GMT
Last-Modified: Fri, 02 Dec 2022 05:56:08 GMT
Server: Apache
Content-Length: 1753


--- Additional Info ---
Magic:  data
Size:   1753
Md5:    e18136fc6fbb533c925da5500621d1c9
Sha1:   edc52fceb406113e19a563cabebe77b6c7179f07
Sha256: d5dbb16b504ec03fcf52bf83fd3cb6ca8e38527617aae73f0a15d3d51db64661
                                        
                                            POST / HTTP/1.1 
Host: ocsp.quovadisglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         152.195.132.213
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Date: Fri, 02 Dec 2022 05:56:08 GMT
Etag: "edc52fceb406113e19a563cabebe77b6c7179f07"
Expires: Sun, 04 Dec 2022 05:56:07 GMT
Last-Modified: Fri, 02 Dec 2022 05:56:08 GMT
Server: Apache
Content-Length: 1753


--- Additional Info ---
Magic:  data
Size:   1753
Md5:    e18136fc6fbb533c925da5500621d1c9
Sha1:   edc52fceb406113e19a563cabebe77b6c7179f07
Sha256: d5dbb16b504ec03fcf52bf83fd3cb6ca8e38527617aae73f0a15d3d51db64661
                                        
                                            POST / HTTP/1.1 
Host: ocsp.quovadisglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         152.195.132.213
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Date: Fri, 02 Dec 2022 05:56:08 GMT
Etag: "4ce876fa62130b8db4f48dfb2ab91e8c973c8731"
Expires: Sun, 04 Dec 2022 05:56:07 GMT
Last-Modified: Fri, 02 Dec 2022 05:56:08 GMT
Server: Apache
Content-Length: 1781


--- Additional Info ---
Magic:  data
Size:   1781
Md5:    4842c2bed720fa1d325b6cffb49c0f82
Sha1:   4ce876fa62130b8db4f48dfb2ab91e8c973c8731
Sha256: ab7aa8441f1fadf1010e77fdacc10c216bff0ffeef4c93abeda23d523aa80865
                                        
                                            POST / HTTP/1.1 
Host: ocsp.quovadisglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         152.195.132.213
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Date: Fri, 02 Dec 2022 05:56:08 GMT
Etag: "4ce876fa62130b8db4f48dfb2ab91e8c973c8731"
Expires: Sun, 04 Dec 2022 05:56:07 GMT
Last-Modified: Fri, 02 Dec 2022 05:56:08 GMT
Server: Apache
Content-Length: 1781


--- Additional Info ---
Magic:  data
Size:   1781
Md5:    4842c2bed720fa1d325b6cffb49c0f82
Sha1:   4ce876fa62130b8db4f48dfb2ab91e8c973c8731
Sha256: ab7aa8441f1fadf1010e77fdacc10c216bff0ffeef4c93abeda23d523aa80865
                                        
                                            POST / HTTP/1.1 
Host: ocsp.quovadisglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         152.195.132.213
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Date: Fri, 02 Dec 2022 05:56:08 GMT
Etag: "4ce876fa62130b8db4f48dfb2ab91e8c973c8731"
Expires: Sun, 04 Dec 2022 05:56:07 GMT
Last-Modified: Fri, 02 Dec 2022 05:56:08 GMT
Server: Apache
Content-Length: 1781


--- Additional Info ---
Magic:  data
Size:   1781
Md5:    4842c2bed720fa1d325b6cffb49c0f82
Sha1:   4ce876fa62130b8db4f48dfb2ab91e8c973c8731
Sha256: ab7aa8441f1fadf1010e77fdacc10c216bff0ffeef4c93abeda23d523aa80865
                                        
                                            POST / HTTP/1.1 
Host: ocsp.quovadisglobal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         152.195.132.213
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Date: Fri, 02 Dec 2022 05:56:08 GMT
Etag: "4ce876fa62130b8db4f48dfb2ab91e8c973c8731"
Expires: Sun, 04 Dec 2022 05:56:07 GMT
Last-Modified: Fri, 02 Dec 2022 05:56:08 GMT
Server: Apache
Content-Length: 1781


--- Additional Info ---
Magic:  data
Size:   1781
Md5:    4842c2bed720fa1d325b6cffb49c0f82
Sha1:   4ce876fa62130b8db4f48dfb2ab91e8c973c8731
Sha256: ab7aa8441f1fadf1010e77fdacc10c216bff0ffeef4c93abeda23d523aa80865
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 177
Cache-Control: 'max-age=158059'
Date: Fri, 02 Dec 2022 05:56:08 GMT
Last-Modified: Fri, 02 Dec 2022 05:53:11 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /dn/p/slogin/css/fonts/cs-icon-font-cb.eot HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://direct-credit-suisse-e1f47.web.app
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=ozERQOOysJHAVyk-IQymqihVBEXGX0tRIO2-eL_2IU0pYAX5IyDzlHaXuYNDF8Zcy5eael82T7ZteYxUpXKgxKK8hat7IbFOclhGF1MAh147vFXJAq8QMGJLAS10vL3L
Content-Length: 330
Set-Cookie: SCDID_S=nx4BHR4AxE6JyZ01OTaLvwvTqRK9JN0fS1y_hfdjO9jC6ok_GPKKoQ$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   330
Md5:    e76fa91ba2e2e80fcd40374da44a7635
Sha1:   2bc25680b70926621aecee9c4fb5d41f8f615f39
Sha256: de8c832b7ed32fb858604d7a1c77d291b2ddfe68e450bc8976e6a17d71540670
                                        
                                            GET /dn/p/slogin/css/fonts/cs-icon-font-cb.woff HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://direct-credit-suisse-e1f47.web.app
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=goZKa57F5eI2rN1D_NSZ4EZJ16BhJ1RJ084QCki5BD9jo1Bz6tdYoJzCFBO7AdXZsHGZ8uZ_JpLQxCEvzZmbYf9UXFbLTbCevsjhl8RzZd7VckxoaNzo2zMcYQJNQCdp
Content-Length: 330
Set-Cookie: SCDID_S=MDeH8p03g_GIycEqwicKECHP-GmH3bqVcmcIy7oe94hTZR4oB2HALw$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   330
Md5:    cf8d2dcf8cf458d42c15f1fd7e22c4ae
Sha1:   5b18c0d3df09e3a7f392add1231775d9f7b837f2
Sha256: 65e266486bcfa25d7aa4f66eaac3f2ee575da1160a13ff0c78534a39f2a60138
                                        
                                            GET /jquery-3.6.0.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Fri, 02 Dec 2022 05:56:08 GMT
content-encoding: gzip
content-length: 30875
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669960568.dop218.sk1.t,1669960568.cds238.sk1.hn,1669960568.cds210.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30875
Md5:    899f0189aaf034bbba5340f724d91dfa
Sha1:   210ea9de03968edb9d839ba4a0ce2d48666a8ab8
Sha256: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
                                        
                                            GET /dn/p/slogin/css/fonts/cs-icon-font-cb.ttf HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://direct-credit-suisse-e1f47.web.app
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=b3oGYoCfTjmQj9BQm78g6j5ZVNgVGpYBfG4OfaxFr9Qa24JqAA9wpXNncZzqyVpb6J1_uiSUTBakGxrnJp6ZAFOjiG-VvJB3MMVaJxgja1SOo-iBGv0bto2pEYKl3zW2
Content-Length: 330
Set-Cookie: SCDID_S=VbBesnw-ghc61xLDF0qaIErJKoECHQ0MjjUTLctFTxS60hL7lsCMhQ$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   330
Md5:    8ad232bfb9e100925db31b90f33b1270
Sha1:   a20b7b2aff53bdbb79c409186c0858b0e49ae09c
Sha256: 10adcd7d571e69b5a5a38163f63d139407d9759f92ff9fe2db1ae7072a0d8608
                                        
                                            GET /dn/p/slogin/css/fonts/cs-icon-font-cb.svg HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://direct-credit-suisse-e1f47.web.app
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=qkcKLsZlRZJ2PPzG8dQqIUgV7uMVW91_lwK8Sdvv75JFNRwoCqySzNy8kdsUP8E2S_7EJ39WiX9mWxmnFo2s-zu07x4CNRprJ_qK_h7lsSzkx5beI1Z-vuVZ45IlWshK
Content-Length: 330
Set-Cookie: SCDID_S=96DCHCI2Mi1N9-HUeCZaYl4TjYYqxYSRzWWnG-zud3ij_A8s6BvC3w$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   330
Md5:    c8fd653b67a40fc741171564d5c070e8
Sha1:   0ab1eacc089fcf65dc740d6cac131061575353de
Sha256: f0a1b24913535f750ce11b738e64740d9dcd3ee9a7dd98c3023d2864b3025f09
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /firebasejs/6.1.1/firebase-database.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 47735
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:45:39 GMT
expires: Wed, 29 Nov 2023 14:45:39 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 06 Jun 2019 21:07:48 GMT
age: 227429
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   47735
Md5:    5bfd3a1d2d4c274f1cd3a7b8c59af760
Sha1:   2b0ccd97366bd4d62c246d56c301f30893f2d8e7
Sha256: 5ed649d66a13882552107974d1591bd60f9799111e60adb56d8e720ed39ddff6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /firebasejs/6.1.1/firebase-auth.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 51196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 05:54:22 GMT
expires: Sun, 26 Nov 2023 05:54:22 GMT
cache-control: public, max-age=31536000
age: 518506
last-modified: Thu, 06 Jun 2019 21:07:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size:   51196
Md5:    99217f8b4bd38b686c487c355cea9de9
Sha1:   f62878357f16df9f909958ac4540d28116dc5d55
Sha256: 92fa6342aed2bfff5bb56e122e07a00048e7cb3e341a696e3cffca83733ec430
                                        
                                            GET /firebasejs/7.3.0/firebase-analytics.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 6955
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:34:48 GMT
expires: Fri, 01 Dec 2023 08:34:48 GMT
cache-control: public, max-age=31536000
age: 76880
last-modified: Thu, 07 Nov 2019 23:11:03 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21419)
Size:   6955
Md5:    d846a2e20e468143b8c1d16506676f61
Sha1:   3b7b9b23d118e5fa829b4590dac114729067583b
Sha256: 7ef679e5249b1294f6f4ba12fd2a71001aa3b78944c0c5408fd75cf65d55eb5d
                                        
                                            GET /firebasejs/7.3.0/firebase-app.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 4111
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 14:26:42 GMT
expires: Tue, 28 Nov 2023 14:26:42 GMT
cache-control: public, max-age=31536000
age: 314966
last-modified: Thu, 07 Nov 2019 23:11:03 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12024)
Size:   4111
Md5:    28c636c993e7e1c9f91062a5ae7e9ad3
Sha1:   77a3eeb7ae16a6296a41bcba68edd9cec7132c0d
Sha256: 549e9eefe09d5f2579ce3e80b0eab78da68113d741c9c78ec82511999d3a97cb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 247
Cache-Control: max-age=98088
Date: Fri, 02 Dec 2022 05:56:08 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:10:56 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /firebasejs/5.9.4/firebase.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 215186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 19:13:27 GMT
expires: Sat, 25 Nov 2023 19:13:27 GMT
cache-control: public, max-age=31536000
age: 556961
last-modified: Thu, 11 Apr 2019 22:18:35 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size:   215186
Md5:    0cbab56b1b10298805c7db2779011521
Sha1:   17987abe838240cc51aedaae45ff439109a334c9
Sha256: c9c1b32cfd6deb4ff5e2fc5b4fec161e225492267f4e5437398dc4d15f63aac7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uKKZN6G0v4js2yuNFB04iA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.70.239.215
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 71IIBTuWFFw5YU5SCnALLWOCRk8=

                                        
                                            GET /dn/p/slogin/img/cs/favicon-16x16.png HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=1oYEDo6qTkdt30UPJufw7n7PoPqbQ9ybcoIAZpcx3xjr4r8nydo4HGR9PHtsALflLeWMCk_yQdaG62ME80Cu5ypwuJcGtuKXg8ufdI2gOEjjWdni-gctnw$$
Content-Length: 322
Set-Cookie: SCDID_S=IkHRj1rjv42iHoGBgMFpUXKbh2kKkGwCK2HIW09cgemKdR-O-p5C7w$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   322
Md5:    9872cd395c43d1b3f603bc64bc7bc7da
Sha1:   1c942292eaa228ae696af34ad30ce3e0165183eb
Sha256: b0e479c43939d0a13d382ee9c5bd7654267b608a7a1adb8ecc8575ac5ea48460
                                        
                                            GET /dn/p/slogin/img/cs/favicon-194x194.png HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=_A4uGgdv2VCrY2IIblFVNY9gEW0Lbyn7-x1WIqeUi42caEWM9vuK6LlS5jeX6q097fpCFMAVmVfR97R72_3QY_nK76bsARmD1qR4RPA2hzN7HC7SWlfEcekDfu290ovd
Content-Length: 330
Set-Cookie: SCDID_S=KoHLzfqI3WRbOjmFmiNc1jQq5BPpzvtmpaz7C3Tf6CFoL8IkaGP8xA$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   330
Md5:    dd4e226e6b86e7a59006a08f9fd989d8
Sha1:   d0f3906cd198f9ca2b7c3b7d46b96aa972f6de8f
Sha256: 16416eb888df31db786bb6427cf9876c33c161de508d656b76e3d4f48b1a146b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/8zRofmzdPas HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?l=dataLayer HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 05:56:09 GMT
expires: Fri, 02 Dec 2022 05:56:09 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Dec 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37488
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   37488
Md5:    1e3d5c3f68ad9216069bb00e38e2e683
Sha1:   b4eb1e6b6f63044ec74b1b1db57708bc19cbaf4b
Sha256: 38d242d498bf8419eae637872f7957e23cfd8274c53ce86960dc5b748f1b9f2a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /cookie-check?trg=1oYEDo6qTkdt30UPJufw7n7PoPqbQ9ybcoIAZpcx3xjr4r8nydo4HGR9PHtsALflLeWMCk_yQdaG62ME80Cu5ypwuJcGtuKXg8ufdI2gOEjjWdni-gctnw$$ HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.web.app/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJhwufHQVBc-0ceGp14GjGM$
Content-Length: 303
Cache-Control: no-store, no-cache, must-revalidate
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   303
Md5:    76abd44ee3357a056c4af15564464661
Sha1:   2573f5d56af2227cc2fe2d6d536c5eef88e4d1ba
Sha256: 82d09bedbb744c4d7364c3da12bb576d1a03154cf2f4f252be76567efad6949f
                                        
                                            GET /cookie-check?trg=_A4uGgdv2VCrY2IIblFVNY9gEW0Lbyn7-x1WIqeUi42caEWM9vuK6LlS5jeX6q097fpCFMAVmVfR97R72_3QY_nK76bsARmD1qR4RPA2hzN7HC7SWlfEcekDfu290ovd HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.web.app/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJbk0UNCbmo8MUEbM4dJjL0$
Content-Length: 303
Cache-Control: no-store, no-cache, must-revalidate
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   303
Md5:    7ad55375bda96905ba129396c3103ec3
Sha1:   a30220b0730d8c4053da5a9ad7d00200d4fc0a06
Sha256: 3711396ae1f766d462768be476bc07fd159f3d2bb76b0e2cdaeb0201885f9a1f
                                        
                                            POST /s/gts1d4/8zRofmzdPas HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /v1/projects/cpnlify/installations HTTP/1.1 
Host: firebaseinstallations.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key
Referer: https://direct-credit-suisse-e1f47.web.app/
Origin: https://direct-credit-suisse-e1f47.web.app
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.170
HTTP/2 200 OK
content-type: text/html
                                        
access-control-allow-origin: https://direct-credit-suisse-e1f47.web.app
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key
access-control-max-age: 3600
date: Fri, 02 Dec 2022 05:56:09 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /s/gts1d4int/5EXjxzFGjgM HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJbk0UNCbmo8MUEbM4dJjL0$ HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.web.app/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Last-Modified: Wed, 16 Jun 2021 13:25:38 GMT
ETag: "1f2f-5c4e206b91880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-store, no-cache, must-revalidate
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size:   1923
Md5:    eeaaa1e93f3c6e86f993d32d863873db
Sha1:   41831692622171d761c7c3d17307db8514319bd6
Sha256: fb91783e513ec5755d75a7b6cadd8c69b3f846415f3b7a0f464539b739565bb3
                                        
                                            GET /cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJhwufHQVBc-0ceGp14GjGM$ HTTP/1.1 
Host: direct.credit-suisse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.web.app/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         198.240.216.40
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 02 Dec 2022 05:56:09 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Last-Modified: Wed, 16 Jun 2021 13:25:38 GMT
ETag: "1f2f-5c4e206b91880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-store, no-cache, must-revalidate
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size:   1923
Md5:    eeaaa1e93f3c6e86f993d32d863873db
Sha1:   41831692622171d761c7c3d17307db8514319bd6
Sha256: fb91783e513ec5755d75a7b6cadd8c69b3f846415f3b7a0f464539b739565bb3
                                        
                                            GET /.ws?v=5 HTTP/1.1 
Host: cpnlify-default-rtdb.firebaseio.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://direct-credit-suisse-e1f47.web.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GOJraD1GWzYnyHJUmVC05Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.120.160.131
HTTP/1.1 101 Switching Protocols
                                        
Server: nginx
Date: Fri, 02 Dec 2022 05:56:09 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xUge/zJ3PNB+R1gdUzjyJiE2Eug=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload

                                        
                                            POST /v1/projects/cpnlify/installations HTTP/1.1 
Host: firebaseinstallations.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.web.app/
content-type: application/json
x-goog-api-key: AIzaSyDPEubL0PW1RbCDnHLj0Hm3YtC-91zxGh4
Origin: https://direct-credit-suisse-e1f47.web.app
Content-Length: 130
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.170
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                        
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 02 Dec 2022 05:56:09 GMT
server: ESF
cache-control: private
content-length: 488
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://direct-credit-suisse-e1f47.web.app
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (331)
Size:   488
Md5:    7f2d61ab6c95d4b667c97b01e4bb41e4
Sha1:   db0a9627b0cec345b566083c6f9a0007c5188dca
Sha256: 982e14f74a1548c580ee2d4cc0b4075e677c5765c85d878b11e474679f75f4a4
                                        
                                            POST /g/collect?v=2&tid=G-E64ZWXYFD5&gtm=2oebu0&_p=1899185667&_fid=dNg8SyfE-hsluN9vrT5FU6&cid=2000224600.1669960568&ul=en-us&sr=1280x1024&_s=1&sid=1669960567&sct=1&seg=0&dl=https%3A%2F%2Fdirect-credit-suisse-e1f47.web.app%2Flogin.html%3Fsession%3D1QshlMK5g5dL9440b8DbCyf5ncQezryyoRqfOWGz0OqAxbdL5EBkBw0dx8dvOClHuTay0ZRHU53nHfV8s51eJBTzrlvKHQJsQQ%26auth%3D13b87d4c-8b96-43dc-90cc-67a9fb032725&dr=https%3A%2F%2Fdirect-credit-suisse-e1f47.web.app%2F&dt=Login%20-%20Credit%20Suisse%20Direct%20%2F%20CSX&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://direct-credit-suisse-e1f47.web.app
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://direct-credit-suisse-e1f47.web.app
date: Fri, 02 Dec 2022 05:56:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3784
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 05:56:10 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3784
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 05:56:10 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3784
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 05:56:10 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3784
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 05:56:10 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3784
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 05:56:10 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb543a0f6-0efe-4518-9420-4eff88edf8e6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4840
x-amzn-requestid: 6bc8fa91-5696-4bc6-b1e7-3c36b2c01801
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGxTFxyoAMFRzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e6e-3e85b78905aaa73726eef85a;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UraCGe--VISONXzaUBpA7vuLuD5l7zihtQIph7LVn1QsS8MjLBbvKw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:51 GMT
age: 29239
etag: "5ce119089f4a4cd139b523889b6cd84cd79191f4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4840
Md5:    60ccdde4ce64b4a3fe6fc2a059b3bde1
Sha1:   5ce119089f4a4cd139b523889b6cd84cd79191f4
Sha256: 2089225a6dc13845ab8e031416920d16952ae1461ca10d72c408ad001ed8f27b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 30083
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2942
Md5:    b47431190f34eccf0a6efb98e2a32b7d
Sha1:   9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:15:42 GMT
age: 81628
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6174
Md5:    b986f9fcbeca91ed5c8d58fbfaf47d19
Sha1:   6e6c8bd2bce144cc4da1cd7be375b046b60dca79
Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6564
x-amzn-requestid: e2875cf3-3915-43a5-a724-4de2ca03de56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGepHOiIAMFTFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-5f7e2a3f609d54a609a12670;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mwGAEu-gPXY5Opwd972VbBA6l33dNk7bPFSyZmciaplQKj2ZuTkQSg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:47:56 GMT
age: 29294
etag: "9bc47ee49fc070d0997e49a719bd9758685ad583"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6564
Md5:    58a28fc1cbcacdb07b3ca175281982b5
Sha1:   9bc47ee49fc070d0997e49a719bd9758685ad583
Sha256: d3bfcf749c4652cb29f7c82a5d7ba940bd607f9060e49c1c40a112eb3e625bd9
                                        
                                            GET /json?token=3737089960275b HTTP/1.1 
Host: ipinfo.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.web.app/
Origin: https://direct-credit-suisse-e1f47.web.app
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.59.81
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
date: Fri, 02 Dec 2022 05:56:09 GMT
x-envoy-upstream-service-time: 2
strict-transport-security: max-age=2592000; includeSubDomains
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   11589
Md5:    823eab8f7ae2fea38e88472ffed248b0
Sha1:   d63a230776098f1e1ba0fcb7751aa12bee3e4007
Sha256: 0f4fba185a0d34e61d97645901b26dd6c1bba7071b21fd7b0d3b61b0d145d306
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4834
x-amzn-requestid: 63a0b8b5-5cb3-4a1f-aa46-47c84abe726f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQrjEeAIAMF3sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7e3-0032799009f893ba79f314db;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bBj-TXtavCuORZ9qBoZeVj-GXeRljAeW-98HY7lTk5_VRSKF4_07VQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 04:22:38 GMT
age: 5612
etag: "0de97f3a4964038222bd751e043e413113e6db9d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4834
Md5:    cd8ad22c2eb1eb91c76970fa449f1bc4
Sha1:   0de97f3a4964038222bd751e043e413113e6db9d
Sha256: 668f805815aede3bc04f8564bd6aefd56029362bb0aa8a794673eb78ab2d4643
                                        
                                            GET /axios/dist/axios.min.js HTTP/1.1 
Host: unpkg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.16.125.175
HTTP/2 302 Found
content-type: text/plain; charset=utf-8
                                        
date: Fri, 02 Dec 2022 05:56:08 GMT
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.2.0/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GK8P4J1TXJ64N4NYAJ7SDVKW-fra
cf-cache-status: HIT
age: 378
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7731d1527f51b50c-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /axios@1.2.0/dist/axios.min.js HTTP/1.1 
Host: unpkg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.web.app/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.16.125.175
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Fri, 02 Dec 2022 05:56:08 GMT
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7396-Wc6sdIzlj1RsovoMRKQah8UZFhA"
via: 1.1 fly.io
fly-request-id: 01GJGC0D1SRCGJTEVMAF435H8Z-ams
cf-cache-status: HIT
age: 816306
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7731d153e863b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---