Report - cert.visadpsgiftcard.com/NavyFederal/Verify/Activate

Report Overview

Submitted URL
cert.visadpsgiftcard.com/NavyFederal/Verify/Activate
IP
104.18.31.151
ASN
#13335 CLOUDFLARENET
Submitted
2022-11-29 20:49:30
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	381 B	21 kB	142.250.74.110
www.google.com	7	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	525 B	694 B	142.250.74.132
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.76.226
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.24.78.9
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	54 kB	34.120.237.76
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	5.6 kB	216.58.211.3
stats.g.doubleclick.net	96	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	622 B	719 B	74.125.131.156
www.google.no	25607	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	524 B	694 B	142.250.74.163
cert.visadpsgiftcard.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	36 kB	202 kB	104.18.30.151
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	2.2 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (20)

	URL	Size	First Seen	Last Seen
	cert.visadpsgiftcard.com/bundles/jquery?v=Tr_v94xD5Y3yKB5v6IQ7RZbsJQVRT3NqKQFaw2TuoU41	105 kB	2023-03-08	2023-09-25
Pretty URL cert.visadpsgiftcard.com/bundles/jquery?v=Tr_v94xD5Y3yKB5v6IQ7RZbsJQVRT3NqKQFaw2TuoU41 IP 104.18.31.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:05:30 Last Seen2023-09-25 02:00:17 Times Seen7 Hash 60b47546b177d29aee7c711787951144 9a26318a2a95b9d5819fea972dd0bb6eb621674b bd5a980b909c066eaf41d0c88c8520859b9eadea5170fe318836f304f6c6c335 Loading...

	cert.visadpsgiftcard.com/NavyFederal/Verify/Activate	325 B	2023-03-07	2023-11-07
Pretty URL cert.visadpsgiftcard.com/NavyFederal/Verify/Activate IP 104.18.30.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:25:46 Last Seen2023-11-07 16:50:32 Times Seen8 Hash 84e6286cea8d43df793ffd6ce5a1ad5c 5e85f68263f4de5e5aba5f036b51eeb51efaabed 64e5725e2468fb5508ea513c05f2b82f6ccd5b389c889e5dec35e619350c11e8 Loading...

	www.googletagmanager.com/gtm.js?id=GTM-55MPT9	144 kB	2023-03-11	2023-03-11
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-55MPT9 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:36:50 Last Seen2023-03-11 22:36:50 Times Seen1 Hash c3c9ec5ec3d2d74d23cd50b89b686d0c 9900fde4570ea2a2938bc11c52cbc1fae70819b7 2d1966b2e007733f516857f6ba3886b68856b3ad9fa347a1cd476d0914f41dc0 Loading...

	cert.visadpsgiftcard.com/bundles/modernizr?v=inCVuEFe6J4Q07A0AcRsbJic_UE5MwpRMNGcOtk94TE1	11 kB	2023-03-07	2024-04-10
Pretty URL cert.visadpsgiftcard.com/bundles/modernizr?v=inCVuEFe6J4Q07A0AcRsbJic_UE5MwpRMNGcOtk94TE1 IP 104.18.31.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:15 Last Seen2024-04-10 22:51:10 Times Seen324 Hash efeac4bcc64c045f413f90ceba3f836e f6e4af16612d2c740e0d62440fce784290eab928 9e83216908224ffbc39992a5e60f93ca21b8e2240ba28025ba679c4b70f7112d Loading...

	cert.visadpsgiftcard.com/bundles/jqueryval?v=zoukwcYg-g7JDdfzyoq_F8xlMFB59Z1U0aSHkBtjg7I1	41 kB	2023-03-08	2023-09-25
Pretty URL cert.visadpsgiftcard.com/bundles/jqueryval?v=zoukwcYg-g7JDdfzyoq_F8xlMFB59Z1U0aSHkBtjg7I1 IP 104.18.31.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:05:30 Last Seen2023-09-25 02:00:17 Times Seen8 Hash af4aba7ccc8e4eb8c7a80173e319c4fd 097f7a6de4e8c6ace12f6c64a338f0771df73dfe 42ef52ae87158cd643bfb2aa1f613a233c129b5f2763263f48a7005958c011ea Loading...

	cert.visadpsgiftcard.com/bundles/foundation?v=ESYLxt5uuRKe3D3XbWrIbHO5roVJALwvUU4gNQI5B-01	98 kB	2023-03-08	2023-11-07
Pretty URL cert.visadpsgiftcard.com/bundles/foundation?v=ESYLxt5uuRKe3D3XbWrIbHO5roVJALwvUU4gNQI5B-01 IP 104.18.31.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:05:30 Last Seen2023-11-07 16:50:32 Times Seen14 Hash dd39ad1170ac3b7449272ea01f3b684a 7878a421e9d074df5f4f0a9d7ffdf2f0f804631a 8cdb11e45e5feb9caf122ce4ef454511465310d3d81f09fe29b34e9948677a8c Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-08	2024-04-19
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.110 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:22:31 Last Seen2024-04-19 19:03:21 Times Seen1521 Hash fda30e8a22c9bcd954fd8d0fadd0e77c ae47cd34cbde081a48d7f92fc80aaf06a1381193 b42e4a056cb5b80c5a315040826866445ec9332f0749e184509ab2d9d3b86719 Loading...

	cert.visadpsgiftcard.com/NavyFederal/Verify/Activate	1.4 kB	2023-03-11	2023-03-11
Pretty URL cert.visadpsgiftcard.com/NavyFederal/Verify/Activate IP 104.18.30.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:36:50 Last Seen2023-03-11 22:36:50 Times Seen1 Hash b990b94444c0c53d395260e2b6216929 18190053a63ed48d03cec444c2be426f3501abf1 140165206c981d8ae5a0add910886002f10789e22b0cc60ade6fed4e7a981962 Loading...

	cert.visadpsgiftcard.com/bundles/VisaBehaviorAnalyticsIntegration?v=o-vHZTln5UdDQuezeNEtFjEBOO8pbxs9sU3r2yHAPZY1	2.8 kB	2023-03-08	2024-01-17
Pretty URL cert.visadpsgiftcard.com/bundles/VisaBehaviorAnalyticsIntegration?v=o-vHZTln5UdDQuezeNEtFjEBOO8pbxs9sU3r2yHAPZY1 IP 104.18.31.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:05:30 Last Seen2024-01-17 15:31:16 Times Seen13 Hash e53e2d37dd5eb3a18c2d735b55b6c830 a6436fbeb4fb5636cbe9b9598157c1f168d48131 fe8c34b9cdaa4db63f78331aa5998c473178d2e5898ca9c04b45c34e8c7830d2 Loading...

	cert.visadpsgiftcard.com/bundles/Visa/dps?v=ZyC0R9t8h7ubYILI4r8E1AyotfynRxjE2DnI-eHH54Q1	8.8 kB	2023-03-08	2023-09-25
Pretty URL cert.visadpsgiftcard.com/bundles/Visa/dps?v=ZyC0R9t8h7ubYILI4r8E1AyotfynRxjE2DnI-eHH54Q1 IP 104.18.31.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:05:30 Last Seen2023-09-25 02:00:17 Times Seen8 Hash 67251ab313aa00f547c4d1c8052a1d0a f3167fd171e28564a527ca8feee52dffb61ee49c cf5b381a36797698b3b4a23090a14ebd63b4d2478f31be04d0bcbfd53d421b87 Loading...

	cert.visadpsgiftcard.com/bundles/Visa?v=JpghvifiBbI6usCJXh_0LKQMl3jHs3XaJkXbcL2ZR0Q1	18 kB	2023-03-08	2023-09-25
Pretty URL cert.visadpsgiftcard.com/bundles/Visa?v=JpghvifiBbI6usCJXh_0LKQMl3jHs3XaJkXbcL2ZR0Q1 IP 104.18.31.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:05:30 Last Seen2023-09-25 02:00:17 Times Seen12 Hash 1492fef480fdcfc9b59b8cf4996ad0bf b1d417bbc89b171c48719ff247a92a35751e3a52 38254be534310378122412cf37348dc356675207e5d90754444999da5f754b1a Loading...

	cert.visadpsgiftcard.com/bundles/VisaBehaviorAnalytics?v=kSj3nrqydyAGCJwo0hfCPzTkKf06pNGY6ePhWg538b41	748 kB	2023-03-08	2024-01-17
Pretty URL cert.visadpsgiftcard.com/bundles/VisaBehaviorAnalytics?v=kSj3nrqydyAGCJwo0hfCPzTkKf06pNGY6ePhWg538b41 IP 104.18.31.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:05:30 Last Seen2024-01-17 15:31:16 Times Seen17 Hash 7dbcf0f0a10bcc7f397589b17ec7ec4a 8c32d9114b0ca306cadf93c9733fd0bebb733a37 3ae80c7ea00d12786f8963851c010c7c4381c1739d45502e33e70b466a9d5eff Loading...

	cert.visadpsgiftcard.com/bundles/preventEarlyClick?v=_tY9qfNRb06Wa6fRNKeUMAHJINRnx8zdLPgzo1HCObs1	271 B	2023-03-08	2023-09-25
Pretty URL cert.visadpsgiftcard.com/bundles/preventEarlyClick?v=_tY9qfNRb06Wa6fRNKeUMAHJINRnx8zdLPgzo1HCObs1 IP 104.18.31.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:05:30 Last Seen2023-09-25 02:00:17 Times Seen147 Hash 05eb441e0fb88ca047b9e10d7f7a3ebb 06c91fbe581ccc954313f7762531c94efb2089f2 8332e9865442439990cc3f27b3e8a38c9b3bd5f548af382ae4fea0968181b4ff Loading...

	cert.visadpsgiftcard.com/NavyFederal/Verify/Activate	375 B	2023-03-08	2024-01-17
Pretty URL cert.visadpsgiftcard.com/NavyFederal/Verify/Activate IP 104.18.30.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:05:30 Last Seen2024-01-17 15:31:16 Times Seen9 Hash 0d81eb2691ecfc653b1d0b443b7cd8e4 00908d528bb8e8c4c27b4f169c1f15503f9c4a33 e04e8339fa998f8f9409dc41bbbfa931ab9f542e9fd12043f049e9a0896eee40 Loading...

		Size	First Seen	Last Seen
	#1 Eval - eacd458c2751cd23eabb2fcb04a657eb	92 B	2023-03-07	2024-04-19
Pretty Observations First Seen2023-03-07 12:10:59 Last Seen2024-04-19 01:20:16 Times Seen2250 Hash eacd458c2751cd23eabb2fcb04a657eb 78a01d75760bc72949e89d743a6824b893287ab4 2a967b9ccbab6ad1d3eed94b9157cb3dd9cbb57286e20a481d5a5c62a11fd8ca Loading...

	#2 Eval - fb5cb7b246e69034e02cb9a126ea18af	38 B	2023-03-07	2024-04-18
Pretty Observations First Seen2023-03-07 12:06:54 Last Seen2024-04-18 11:24:09 Times Seen728 Hash fb5cb7b246e69034e02cb9a126ea18af 59691e84cdc7797ab899b6828d78fe0e59015c64 21e1463f2dbdf773d27eb5b59524062b4aedb68414d396e65bb440516cdeae44 Loading...

	#3 Eval - 2c8444b5ef2b35d8dbdc14f1fd8a7527	784 B	2023-03-08	2023-06-20
Pretty Observations First Seen2023-03-08 00:05:30 Last Seen2023-06-20 14:52:50 Times Seen3 Hash 2c8444b5ef2b35d8dbdc14f1fd8a7527 03153a336182bd60ef309f9b44fbef1b0cdd2419 2e83ca1f6cf1ed75f47e26c968673c8d9b52986cee75ef457300de0d9864231c Loading...

	#4 Eval - 379ba2f71e228d1ecf71736638e5c35f	789 B	2023-03-08	2023-06-20
Pretty Observations First Seen2023-03-08 00:05:30 Last Seen2023-06-20 14:52:50 Times Seen3 Hash 379ba2f71e228d1ecf71736638e5c35f d96a2461b6ffe37effb6b3581287b95e7cefd1e5 338d4e0c8b16602db2aa63804e9ad6c0f08999a38d22e70f819e856e02b8bca9 Loading...

	#5 Eval - 5e12f6c3368f2fb11f7f9334340cc879	812 B	2023-03-08	2023-06-20
Pretty Observations First Seen2023-03-08 00:05:30 Last Seen2023-06-20 14:52:50 Times Seen3 Hash 5e12f6c3368f2fb11f7f9334340cc879 d2ec2f16f04547acf5eb762c9bb56a76289a5a7a daa48fc8cf53b0543201975e7c0452158529ef4ec0b104155ec73cbfc54f0607 Loading...

	#6 Eval - addbd059aa1ed021cd135bd65f4f9f95	228 B	2023-03-08	2024-01-17
Pretty Observations First Seen2023-03-08 00:05:30 Last Seen2024-01-17 15:31:16 Times Seen9 Hash addbd059aa1ed021cd135bd65f4f9f95 1405a0e337361a003e52b49a8ccc1cc0453b6483 bf7f609038388415e84050e2183af0b894f6b339891810aecb9f110c7f99aa81 Loading...

HTTP Transactions (55)

	URL	IP	Response	Size
	cert.visadpsgiftcard.com/NavyFederal/Verify/Activate	104.18.30.151	301 Moved Permanently	0 B
URL HTTP/1.1 cert.visadpsgiftcard.com/NavyFederal/Verify/Activate IP 104.18.30.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /NavyFederal/Verify/Activate HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1` `HTTP/1.1 301 Moved Permanently Date: Tue, 29 Nov 2022 20:49:19 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Tue, 29 Nov 2022 21:49:19 GMT Location: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Vary: Accept-Encoding Set-Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; path=/; domain=.cert.visadpsgiftcard.com; HttpOnly Server: cloudflare CF-RAY: 771e3590db81b523-OSL`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c 0153d1d3d830a457043e16bb40d48a0b9ddef4b8 8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2851 Expires: Tue, 29 Nov 2022 21:36:50 GMT Date: Tue, 29 Nov 2022 20:49:19 GMT Connection: keep-alive`

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 4ed065cb23b5fca1a179dd73b3c5b7b2 4422eb24688f5e056fc1b18b127c7f63b1dbf5e0 b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 4586 Cache-Control: max-age=140298 Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:19 GMT Etag: "6385df6f-1d7" Expires: Thu, 01 Dec 2022 11:47:37 GMT Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT Server: ECS (ska/F71D) X-Cache: HIT Content-Length: 471`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 6d9d34c96b9a826ae5676640c966469c 8052a16d41a637e420478b7de1ff5a2dc951fccd f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14605 Expires: Wed, 30 Nov 2022 00:52:44 GMT Date: Tue, 29 Nov 2022 20:49:19 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	34.102.187.140	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 34.102.187.140:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash 14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Tue, 29 Nov 2022 20:19:38 GMT cache-control: public,max-age=3600 content-type: application/json age: 1781 alt-svc: clear X-Firefox-Spdy: h2`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: 8TXYb4Z3qklBBjL8XNEcDfp/FkHlWGvmSqbfiM2PgRkp6XJhcveWvafIWCbRhpqJrVvdVxhaR7o= x-amz-request-id: MQZKZDSA2215YPQ8 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 29 Nov 2022 20:44:57 GMT age: 262 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	ocsp.digicert.com/	93.184.220.29	200 OK	280 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 280 B (280 bytes) Hash 9417cda8a5b4bd692b1ad6b5caf41aaf 2b26375081f59361575be634dcfb77411d4c579c a9a677e8d017a60a3b29183b3c6d26bdbbd3c23b386655bd906b6b1aa0937155 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=110114 Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:19 GMT Etag: "63857b71-118" Expires: Thu, 01 Dec 2022 03:24:33 GMT Last-Modified: Tue, 29 Nov 2022 03:24:33 GMT Server: nginx Content-Length: 280`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Tue, 29 Nov 2022 20:49:19 GMT content-type: application/json content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	34.102.187.140	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 34.102.187.140:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Tue, 29 Nov 2022 20:08:56 GMT cache-control: public,max-age=3600 age: 2424 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json alt-svc: clear X-Firefox-Spdy: h2

	cert.visadpsgiftcard.com/bundles/preventEarlyClickCss?v=AjE3qz4xe4LPPh9UwnSuF7YqcFXF2UG5PMA-GpfTe5c1	104.18.31.151	200 OK	45 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/preventEarlyClickCss?v=AjE3qz4xe4LPPh9UwnSuF7YqcFXF2UG5PMA-GpfTe5c1 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type ASCII text, with no line terminators Size 45 B (45 bytes) Hash 767c36b019fd1afe37e2f7cd7d735350 eec42ead258c1cd7c987bb0260d700d6b3253806 42a0994f945e96989c7b09cd6d4c08fced929ce73f63396a83b3f071720c3c49 HTTP Headers GET /bundles/preventEarlyClickCss?v=AjE3qz4xe4LPPh9UwnSuF7YqcFXF2UG5PMA-GpfTe5c1 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/css; charset=utf-8 content-length: 45 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e35949d600b49-OSL X-Firefox-Spdy: h2`

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 3c8c689bd654417640d85f3da51af313 85123b6d46230a23d03768bf304b386e5d301305 516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 6177 Cache-Control: max-age=136825 Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:20 GMT Etag: "6385cba8-1d7" Expires: Thu, 01 Dec 2022 10:49:45 GMT Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT Server: ECS (ska/F71D) X-Cache: HIT Content-Length: 471`

	cert.visadpsgiftcard.com/content/PRC809/_Images/logo.png	104.18.31.151	200 OK	52 kB
URL HTTP/2 cert.visadpsgiftcard.com/content/PRC809/_Images/logo.png IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type PNG image data, 161 x 51, 8-bit/color RGBA, non-interlaced\012- data Size 52 kB (51972 bytes) Hash ba7584b728ceb1b646cd0f37735d713c 331ac97efe73cd15606167a3acb431c2babd9add 53032bf57c4b8cc22a432b13ab96f16e07e19c29049b8050f22e97aeabf7af38 HTTP Headers GET /content/PRC809/_Images/logo.png HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j; .ASPXAUTH=50C317D26E979B55C68865A41E3E9980C4310DBC58591BA43972A656D8E01471C7472EA30EF9FFFC0B6A67BF0F5411C213B784145AF8DE7E31B1726C42AD973DB5D28BCF92BD9F1B3CB4C8C9AB25D79124D2672AF2C230DCDAC91ED4CA43C310A3C33F83C0AF51965F8EE1FCC642499E3D11E46D44376F963377349758FEB6B7A7B278C8FB57555152226CCE575A5C9434FA3B8EA4395F0467E204D0938ACEECD220B9041E0A3E9965027AB2EA70C581084235F471520EE2F5639EB84BB42F4AA9287EF79A419A47BA7DCC5940ED4C4B7934520CD5803F5CEFC0CE15D5CFCA7815872F326556DC7DC1EE2A67026BA5BC6F56FDDF4BF176AA0780D03895D7643B24DDC274946974C5F2A04B53F8C2DD7BAF58456A93F756F8B55B837796D7583C28A576F26E4964A38AA982B6BB4E8C5E34E1A4DE06AAECED47962D0C2C53E1A13A5080BDF9336285483BE8D1064793BA7E1400F4E39D669C07FA0C8B77EE59176D976EF1FD24745DE49142E03E1F9EDCCA645EF2CAD03E4CF0E1D06E173A1B2C6530DEED7B9BF3946C973DD92FF0D66A9942B36F580F78EE209DC6D2264D5D75B5FC57149631CC4911B2C2F4917CFB10; __RequestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: image/png content-length: 51972 last-modified: Wed, 01 Mar 2017 15:37:10 GMT etag: "017c1b0a192d21:0" strict-transport-security: max-age=3153600; includeSubDomains cf-cache-status: MISS expires: Wed, 30 Nov 2022 00:49:20 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 771e3594ad730b49-OSL X-Firefox-Spdy: h2`

	push.services.mozilla.com/	52.24.78.9	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 52.24.78.9:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: JfXVIVVTG2Bt4SZ5lbkamQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: K5k15PP9s3iY8kyWg+gL+33i3Hc=`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash f50fd635895870df33a17fe377a6a038 dd65dfbbc810b095432cfd59f971af04a9e31ab7 ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:21 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	cert.visadpsgiftcard.com/bundles/css/print?v=C9Dd5svAXUhZlhbDNm-V5kSiAQLu3PAQMCRzss6hD1Q1	104.18.31.151	200 OK	52 kB
URL HTTP/2 cert.visadpsgiftcard.com/bundles/css/print?v=C9Dd5svAXUhZlhbDNm-V5kSiAQLu3PAQMCRzss6hD1Q1 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type data Size 52 kB (51980 bytes) Hash 355911505c0fdb4ee3a5ecd68a5fba26 58ddac97f7586617ae48f82200d337c143a2cae4 7515ad396fb963880f9068c3c00b557fed4395f7c5cba43f5642c7365ef196c2 HTTP Headers GET /bundles/css/print?v=C9Dd5svAXUhZlhbDNm-V5kSiAQLu3PAQMCRzss6hD1Q1 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: OCE=3462690173; __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:21 GMT content-type: text/css; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:21 GMT last-modified: Tue, 29 Nov 2022 20:49:21 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e359b58900b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash f50fd635895870df33a17fe377a6a038 dd65dfbbc810b095432cfd59f971af04a9e31ab7 ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:21 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	cert.visadpsgiftcard.com/Content/_Fonts/OpenSans-Light-webfont.woff	104.18.31.151	200 OK	22 kB
URL HTTP/2 cert.visadpsgiftcard.com/Content/_Fonts/OpenSans-Light-webfont.woff IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Web Open Font Format, TrueType, length 22248, version 1.0\012- data Size 22 kB (22248 bytes) Hash 45b47f3e9c7d74b80f5c6e0a3c513b23 523f9403d934ba017bfe924cdc40f1bb0e5d97e2 a1cb81c9f07f1f399db66ec188c02a1c74bc382df9a8550ab8091aac93dff8a2 HTTP Headers GET /Content/_Fonts/OpenSans-Light-webfont.woff HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/content/PRC809/_Styles/site.min.css Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:21 GMT content-type: application/x-font-woff content-length: 22248 last-modified: Tue, 18 Oct 2022 18:50:03 GMT etag: "4741e16e22e3d81:0" strict-transport-security: max-age=3153600; includeSubDomains cf-cache-status: MISS expires: Wed, 30 Nov 2022 00:49:21 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 771e359c5a0a0b49-OSL X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/Content/_Fonts/OpenSans-Bold-webfont.woff	104.18.31.151	200 OK	22 kB
URL HTTP/2 cert.visadpsgiftcard.com/Content/_Fonts/OpenSans-Bold-webfont.woff IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Web Open Font Format, TrueType, length 22432, version 1.0\012- data Size 22 kB (22432 bytes) Hash 2e90d5152ce92858b62ba053c7b9d2cb 8cf65f42a2a8c349ccd6ab63b6cbd17c96fd665c a0357cb694b5284870c77c0dbcaf33f238004800419288afde313317b0dbd0b7 HTTP Headers GET /Content/_Fonts/OpenSans-Bold-webfont.woff HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/content/PRC809/_Styles/site.min.css Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:21 GMT content-type: application/x-font-woff content-length: 22432 last-modified: Tue, 18 Oct 2022 18:45:04 GMT etag: "27407bbc21e3d81:0" strict-transport-security: max-age=3153600; includeSubDomains cf-cache-status: MISS expires: Wed, 30 Nov 2022 00:49:21 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 771e359c6a100b49-OSL X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a97c452e75cf1d4833e777d7ba7f2c47 58f15763fd33f742ce870f49f1c2dbed5b41205f 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2794 Expires: Tue, 29 Nov 2022 21:35:55 GMT Date: Tue, 29 Nov 2022 20:49:21 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a97c452e75cf1d4833e777d7ba7f2c47 58f15763fd33f742ce870f49f1c2dbed5b41205f 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2794 Expires: Tue, 29 Nov 2022 21:35:55 GMT Date: Tue, 29 Nov 2022 20:49:21 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a97c452e75cf1d4833e777d7ba7f2c47 58f15763fd33f742ce870f49f1c2dbed5b41205f 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2794 Expires: Tue, 29 Nov 2022 21:35:55 GMT Date: Tue, 29 Nov 2022 20:49:21 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a97c452e75cf1d4833e777d7ba7f2c47 58f15763fd33f742ce870f49f1c2dbed5b41205f 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2794 Expires: Tue, 29 Nov 2022 21:35:55 GMT Date: Tue, 29 Nov 2022 20:49:21 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png	34.120.237.76	200 OK	10 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10 kB (10176 bytes) Hash 03014221d7f49b50ffc2d1b0a0e75457 772d86ad983042a728ee3490630a9cf1134ad0dd 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10176 x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cMpbgEFOIAMF71A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g== via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 04:52:21 GMT age: 57420 etag: "772d86ad983042a728ee3490630a9cf1134ad0dd" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg	34.120.237.76	200 OK	9.2 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.2 kB (9203 bytes) Hash 5d574c4db20a68295dbd06cb08f5990b 433061bbb226048765a711deca3026ee3e52372f 8cc1a4d18e242f8bfc8ab94637f635b73554b903462c29b06d0ec67872542afb HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9203 x-amzn-requestid: 8cba52d6-3c1c-495c-bb9d-3ba6f0adc7e1 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cHcHmGmQoAMF6dQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637fa6fd-73abfa592ff223061401af9a;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 17:16:45 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: UmhWm03jrsV8dFagrzIA0E-8eL8dykoO5kw3cYOBd172dCGqNdAX-Q== via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 04:05:38 GMT age: 60223 etag: "433061bbb226048765a711deca3026ee3e52372f" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp	34.120.237.76	200 OK	4.9 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.9 kB (4916 bytes) Hash 83c1fedec73299637cc7dc47c48af758 2e3f7326aeea6be8a34bf2c39b34862c07bfdc41 1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4916 x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cPYcrELFoAMFaeQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg== via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 03:01:17 GMT age: 64084 etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg	34.120.237.76	200 OK	9.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.4 kB (9430 bytes) Hash 1f434933b5bd6377d299ada22d1ae7ef 075531f525e625b117b2497f31139c9824d0e9c5 b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9430 x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR7wyGCIIAMFhgw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 02:55:32 GMT age: 64429 etag: "075531f525e625b117b2497f31139c9824d0e9c5" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg	34.120.237.76	200 OK	9.5 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.5 kB (9546 bytes) Hash 9a6e5f60b87d3879606a6707feb37a73 373c96c2e0006d70954d4b4ebd850f62f558e92c 1ae48f692f44d357e21eec708b46f22c36a3de21be8d0f1c2035d197e0aa89de HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9546 x-amzn-requestid: 60e352b5-ab38-4975-bf26-500f0a639a2d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cFfulExwIAMFzQA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637edff6-1364912f7fd292da6453a83e;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 03:07:34 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: qtRAIXoswvTgNWZzaQE1WHZQXoJRtK9nKpusFtXH3pDRHH_DZtsLFw== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 11:46:43 GMT age: 32558 etag: "373c96c2e0006d70954d4b4ebd850f62f558e92c" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg	34.120.237.76	200 OK	4.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.4 kB (4417 bytes) Hash a2a5c8d4113d282600462749315f2c4f e2b4d2e15bb7c086333c0da438873e4c139ba931 9b5d0e5dd11d4cbf1c78a71730cd63544170c91ab635bf3cf917827ac84874e6 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4417 x-amzn-requestid: 01de83c2-51d2-4329-98f6-09a0edf46942 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cVNnGEcRIAMFaXA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63852960-34583b6c588a0e937fcfaa46;Sampled=0 x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:24 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Jb1eLyzn88lV_UTId-Fl3OnftDn8c7o5j8d16_nzHCNST_68MZ1pvA== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 20:39:42 GMT age: 579 etag: "e2b4d2e15bb7c086333c0da438873e4c139ba931" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	cert.visadpsgiftcard.com/Content/_Fonts/OpenSans-Regular-webfont.woff	104.18.31.151	200 OK	23 kB
URL HTTP/2 cert.visadpsgiftcard.com/Content/_Fonts/OpenSans-Regular-webfont.woff IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Web Open Font Format, TrueType, length 22660, version 1.0\012- data Size 23 kB (22660 bytes) Hash 79515ad0788973c533405f7012dfeccd 5092881fad2caffdc6bf71bdab1ea547b73d3564 22e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40 HTTP Headers GET /Content/_Fonts/OpenSans-Regular-webfont.woff HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/content/PRC809/_Styles/site.min.css Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:22 GMT content-type: application/x-font-woff content-length: 22660 last-modified: Tue, 18 Oct 2022 18:45:04 GMT etag: "298a7dbc21e3d81:0" strict-transport-security: max-age=3153600; includeSubDomains cf-cache-status: MISS expires: Wed, 30 Nov 2022 00:49:22 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 771e359c5a010b49-OSL X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/content/PRC809/_Fonts/source-sans-pro-v9-latin-600.woff	104.18.31.151	200 OK	17 kB
URL HTTP/2 cert.visadpsgiftcard.com/content/PRC809/_Fonts/source-sans-pro-v9-latin-600.woff IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Web Open Font Format, TrueType, length 17380, version 1.1\012- data Size 17 kB (17380 bytes) Hash e59c7c6c65e9c25fdaed924c5233f668 c6e05bd39ac316d19cb74d3791bff2e876328e12 d4baa84c5bb927222aee6bcebcb29510b33b6de1a7ec71acbb2a4921d9f6ff22 HTTP Headers GET /content/PRC809/_Fonts/source-sans-pro-v9-latin-600.woff HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/content/PRC809/_Styles/site.min.css Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi; vid=1382457247 Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:22 GMT content-type: application/x-font-woff content-length: 17380 last-modified: Tue, 12 Dec 2017 20:15:56 GMT etag: "0a65e48673d31:0" strict-transport-security: max-age=3153600; includeSubDomains cf-cache-status: MISS expires: Wed, 30 Nov 2022 00:49:22 GMT cache-control: public, max-age=14400 accept-ranges: bytes vary: Accept-Encoding server: cloudflare cf-ray: 771e359ede8b0b49-OSL X-Firefox-Spdy: h2`

	www.google-analytics.com/analytics.js	142.250.74.110	200 OK	20 kB
URL HTTP/2 www.google-analytics.com/analytics.js IP 142.250.74.110:0 ASN #15169 GOOGLE File type ASCII text, with very long lines (1325) Size 20 kB (20039 bytes) Hash 47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e HTTP Headers `GET /analytics.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK strict-transport-security: max-age=10886400; includeSubDomains; preload x-content-type-options: nosniff vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 20039 date: Tue, 29 Nov 2022 20:41:08 GMT expires: Tue, 29 Nov 2022 22:41:08 GMT cache-control: public, max-age=7200 age: 494 last-modified: Tue, 27 Sep 2022 22:01:05 GMT content-type: text/javascript alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash f1cfa609ebdf236e2f3e3ff25dd05caf c8117b0187d4d9021ed1a42907bd93d24ed4ebf0 7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:22 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-63470806-13&cid=522756058.1669754961&jid=211614904&gjid=100594282&_gid=1011566108.1669754961&_u=YGBAgEABAAAAAEAAI~&z=645584479	74.125.131.156	200 OK	4 B
URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-63470806-13&cid=522756058.1669754961&jid=211614904&gjid=100594282&_gid=1011566108.1669754961&_u=YGBAgEABAAAAAEAAI~&z=645584479 IP 74.125.131.156:0 ASN #15169 GOOGLE File type ASCII text, with no line terminators Size 4 B (4 bytes) Hash 48c0473b7821185d937e685216e2168b 3743e47f8a429a5e87b86cb582d78940733d9d2e 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a HTTP Headers POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-63470806-13&cid=522756058.1669754961&jid=211614904&gjid=100594282&_gid=1011566108.1669754961&_u=YGBAgEABAAAAAEAAI~&z=645584479 HTTP/1.1 Host: stats.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 0 Origin: https://cert.visadpsgiftcard.com Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK access-control-allow-origin: https://cert.visadpsgiftcard.com strict-transport-security: max-age=10886400; includeSubDomains; preload date: Tue, 29 Nov 2022 20:49:22 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate last-modified: Sun, 17 May 1998 03:00:00 GMT access-control-allow-credentials: true x-content-type-options: nosniff content-type: text/plain cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 4 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 798c6088f000b3a2464e23a92271c24d 2a53b3d3bd4a9104c79595f664276db5b32b9bad dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:22 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash a0fe20d41a043db700a84924cd9793f3 c0da481fef6cd00558f6e68b074acb34bef8292f 03caeb65ab9e22f6d6fe0d344d327950d20ee9ed144e2da0e5e062943a03fc56 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:22 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash f1cfa609ebdf236e2f3e3ff25dd05caf c8117b0187d4d9021ed1a42907bd93d24ed4ebf0 7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:22 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-63470806-13&cid=522756058.1669754961&jid=211614904&_u=YGBAgEABAAAAAEAAI~&z=1989100616	142.250.74.163	200 OK	42 B
URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-63470806-13&cid=522756058.1669754961&jid=211614904&_u=YGBAgEABAAAAAEAAI~&z=1989100616 IP 142.250.74.163:0 ASN #15169 GOOGLE File type GIF image data, version 89a, 1 x 1\012- data Size 42 B (42 bytes) Hash d89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 HTTP Headers GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-63470806-13&cid=522756058.1669754961&jid=211614904&_u=YGBAgEABAAAAAEAAI~&z=1989100616 HTTP/1.1 Host: www.google.no User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site HTTP/2 200 OK p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Tue, 29 Nov 2022 20:49:22 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate content-type: image/gif x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2

	www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-63470806-13&cid=522756058.1669754961&jid=211614904&_u=YGBAgEABAAAAAEAAI~&z=1989100616	142.250.74.132	200 OK	42 B
URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-63470806-13&cid=522756058.1669754961&jid=211614904&_u=YGBAgEABAAAAAEAAI~&z=1989100616 IP 142.250.74.132:0 ASN #15169 GOOGLE File type GIF image data, version 89a, 1 x 1\012- data Size 42 B (42 bytes) Hash d89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 HTTP Headers GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-63470806-13&cid=522756058.1669754961&jid=211614904&_u=YGBAgEABAAAAAEAAI~&z=1989100616 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site HTTP/2 200 OK p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Tue, 29 Nov 2022 20:49:22 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate content-type: image/gif x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 798c6088f000b3a2464e23a92271c24d 2a53b3d3bd4a9104c79595f664276db5b32b9bad dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:22 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	472 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash abd55ecd24d357a9f02612558f723a90 6a1e6963864f0b53ddc6205d35225e6cf0bcbeec 195fa531e0462be58d5c62ebbe6060e147c94bdb1d38ff46c341c74e0ab2671a HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 29 Nov 2022 20:49:22 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	cert.visadpsgiftcard.com/bundles/css?v=VXM6M57zACD6NOmrn-CLIWdXiNyPoHxyPJj7fE7s50g1	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/css?v=VXM6M57zACD6NOmrn-CLIWdXiNyPoHxyPJj7fE7s50g1 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/css?v=VXM6M57zACD6NOmrn-CLIWdXiNyPoHxyPJj7fE7s50g1 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/css; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e35949d590b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/bundles/jquery?v=Tr_v94xD5Y3yKB5v6IQ7RZbsJQVRT3NqKQFaw2TuoU41	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/jquery?v=Tr_v94xD5Y3yKB5v6IQ7RZbsJQVRT3NqKQFaw2TuoU41 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/jquery?v=Tr_v94xD5Y3yKB5v6IQ7RZbsJQVRT3NqKQFaw2TuoU41 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/javascript; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e35949d5b0b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/bundles/modernizr?v=inCVuEFe6J4Q07A0AcRsbJic_UE5MwpRMNGcOtk94TE1	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/modernizr?v=inCVuEFe6J4Q07A0AcRsbJic_UE5MwpRMNGcOtk94TE1 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/modernizr?v=inCVuEFe6J4Q07A0AcRsbJic_UE5MwpRMNGcOtk94TE1 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j; .ASPXAUTH=50C317D26E979B55C68865A41E3E9980C4310DBC58591BA43972A656D8E01471C7472EA30EF9FFFC0B6A67BF0F5411C213B784145AF8DE7E31B1726C42AD973DB5D28BCF92BD9F1B3CB4C8C9AB25D79124D2672AF2C230DCDAC91ED4CA43C310A3C33F83C0AF51965F8EE1FCC642499E3D11E46D44376F963377349758FEB6B7A7B278C8FB57555152226CCE575A5C9434FA3B8EA4395F0467E204D0938ACEECD220B9041E0A3E9965027AB2EA70C581084235F471520EE2F5639EB84BB42F4AA9287EF79A419A47BA7DCC5940ED4C4B7934520CD5803F5CEFC0CE15D5CFCA7815872F326556DC7DC1EE2A67026BA5BC6F56FDDF4BF176AA0780D03895D7643B24DDC274946974C5F2A04B53F8C2DD7BAF58456A93F756F8B55B837796D7583C28A576F26E4964A38AA982B6BB4E8C5E34E1A4DE06AAECED47962D0C2C53E1A13A5080BDF9336285483BE8D1064793BA7E1400F4E39D669C07FA0C8B77EE59176D976EF1FD24745DE49142E03E1F9EDCCA645EF2CAD03E4CF0E1D06E173A1B2C6530DEED7B9BF3946C973DD92FF0D66A9942B36F580F78EE209DC6D2264D5D75B5FC57149631CC4911B2C2F4917CFB10; __RequestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/javascript; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e35949d6a0b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/bundles/foundation?v=ESYLxt5uuRKe3D3XbWrIbHO5roVJALwvUU4gNQI5B-01	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/foundation?v=ESYLxt5uuRKe3D3XbWrIbHO5roVJALwvUU4gNQI5B-01 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/foundation?v=ESYLxt5uuRKe3D3XbWrIbHO5roVJALwvUU4gNQI5B-01 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/javascript; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e35949d660b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/bundles/jqueryval?v=zoukwcYg-g7JDdfzyoq_F8xlMFB59Z1U0aSHkBtjg7I1	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/jqueryval?v=zoukwcYg-g7JDdfzyoq_F8xlMFB59Z1U0aSHkBtjg7I1 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/jqueryval?v=zoukwcYg-g7JDdfzyoq_F8xlMFB59Z1U0aSHkBtjg7I1 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/javascript; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e3594ad780b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/bundles/Visa/dps?v=ZyC0R9t8h7ubYILI4r8E1AyotfynRxjE2DnI-eHH54Q1	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/Visa/dps?v=ZyC0R9t8h7ubYILI4r8E1AyotfynRxjE2DnI-eHH54Q1 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/Visa/dps?v=ZyC0R9t8h7ubYILI4r8E1AyotfynRxjE2DnI-eHH54Q1 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/javascript; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e35949d6e0b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/bundles/VisaBehaviorAnalyticsIntegration?v=o-vHZTln5UdDQuezeNEtFjEBOO8pbxs9sU3r2yHAPZY1	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/VisaBehaviorAnalyticsIntegration?v=o-vHZTln5UdDQuezeNEtFjEBOO8pbxs9sU3r2yHAPZY1 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/VisaBehaviorAnalyticsIntegration?v=o-vHZTln5UdDQuezeNEtFjEBOO8pbxs9sU3r2yHAPZY1 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/javascript; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e3594ad850b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/bundles/Visa?v=JpghvifiBbI6usCJXh_0LKQMl3jHs3XaJkXbcL2ZR0Q1	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/Visa?v=JpghvifiBbI6usCJXh_0LKQMl3jHs3XaJkXbcL2ZR0Q1 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/Visa?v=JpghvifiBbI6usCJXh_0LKQMl3jHs3XaJkXbcL2ZR0Q1 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/javascript; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e35949d6c0b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/content/PRC809/_Fonts/source-sans/source-sans-pro-v9-latin-600.woff2	104.18.31.151	404 Not Found	0 B
URL HTTP/2 cert.visadpsgiftcard.com/content/PRC809/_Fonts/source-sans/source-sans-pro-v9-latin-600.woff2 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /content/PRC809/_Fonts/source-sans/source-sans-pro-v9-latin-600.woff2 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/content/PRC809/_Styles/site.min.css Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 404 Not Found date: Tue, 29 Nov 2022 20:49:21 GMT content-type: text/html strict-transport-security: max-age=3153600; includeSubDomains x-cnection: close cf-cache-status: MISS expires: Wed, 30 Nov 2022 00:49:21 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 771e359c5a040b49-OSL X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com//content/PRC809/_Images/favicon.ico	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com//content/PRC809/_Images/favicon.ico IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET //content/PRC809/_Images/favicon.ico HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi; vid=1382457247 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:22 GMT content-type: image/x-icon last-modified: Thu, 18 Aug 2016 18:22:50 GMT etag: W/"079e7867df9d11:0" strict-transport-security: max-age=3153600; includeSubDomains cf-cache-status: MISS expires: Wed, 30 Nov 2022 00:49:22 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 771e35a10a000b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/NavyFederal/Verify/Activate	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/NavyFederal/Verify/Activate IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /NavyFederal/Verify/Activate HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1` HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:19 GMT content-type: text/html; charset=utf-8 cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: -1 x-frame-options: SAMEORIGIN content-security-policy: script-src 'self' 'nonce-Wj+t5NXOJP17KNSLUFTOZHpK' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com www.google.com; base-uri 'self'; x-download-options: noopen strict-transport-security: max-age=3153600; includeSubDomains cf-cache-status: DYNAMIC set-cookie: ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j; path=/; secure; HttpOnly; SameSite=Lax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path=/; secure; HttpOnly ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j; path=/; secure; HttpOnly; SameSite=Lax .ASPXAUTH=50C317D26E979B55C68865A41E3E9980C4310DBC58591BA43972A656D8E01471C7472EA30EF9FFFC0B6A67BF0F5411C213B784145AF8DE7E31B1726C42AD973DB5D28BCF92BD9F1B3CB4C8C9AB25D79124D2672AF2C230DCDAC91ED4CA43C310A3C33F83C0AF51965F8EE1FCC642499E3D11E46D44376F963377349758FEB6B7A7B278C8FB57555152226CCE575A5C9434FA3B8EA4395F0467E204D0938ACEECD220B9041E0A3E9965027AB2EA70C581084235F471520EE2F5639EB84BB42F4AA9287EF79A419A47BA7DCC5940ED4C4B7934520CD5803F5CEFC0CE15D5CFCA7815872F326556DC7DC1EE2A67026BA5BC6F56FDDF4BF176AA0780D03895D7643B24DDC274946974C5F2A04B53F8C2DD7BAF58456A93F756F8B55B837796D7583C28A576F26E4964A38AA982B6BB4E8C5E34E1A4DE06AAECED47962D0C2C53E1A13A5080BDF9336285483BE8D1064793BA7E1400F4E39D669C07FA0C8B77EE59176D976EF1FD24745DE49142E03E1F9EDCCA645EF2CAD03E4CF0E1D06E173A1B2C6530DEED7B9BF3946C973DD92FF0D66A9942B36F580F78EE209DC6D2264D5D75B5FC57149631CC4911B2C2F4917CFB10; path=/; secure; HttpOnly __RequestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; path=/; secure; HttpOnly OCE=3462690173 __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi; SameSite=None; Secure; path=/; expires=Wed, 30-Nov-22 19:49:19 GMT; HttpOnly __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; path=/; domain=.cert.visadpsgiftcard.com; HttpOnly; Secure; SameSite=None server: cloudflare cf-ray: 771e3592da830b49-OSL content-encoding: gzip X-Firefox-Spdy: h2

	cert.visadpsgiftcard.com/bundles/preventEarlyClick?v=_tY9qfNRb06Wa6fRNKeUMAHJINRnx8zdLPgzo1HCObs1	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/preventEarlyClick?v=_tY9qfNRb06Wa6fRNKeUMAHJINRnx8zdLPgzo1HCObs1 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/preventEarlyClick?v=_tY9qfNRb06Wa6fRNKeUMAHJINRnx8zdLPgzo1HCObs1 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/javascript; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e35949d640b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/bundles/VisaBehaviorAnalytics?v=kSj3nrqydyAGCJwo0hfCPzTkKf06pNGY6ePhWg538b41	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/VisaBehaviorAnalytics?v=kSj3nrqydyAGCJwo0hfCPzTkKf06pNGY6ePhWg538b41 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/VisaBehaviorAnalytics?v=kSj3nrqydyAGCJwo0hfCPzTkKf06pNGY6ePhWg538b41 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/javascript; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e3594ad7c0b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/bundles/foundation/css?v=TgYukCV0BSpb98GObtBe6i9KeBqBppGV5EzParDKRD01	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/bundles/foundation/css?v=TgYukCV0BSpb98GObtBe6i9KeBqBppGV5EzParDKRD01 IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /bundles/foundation/css?v=TgYukCV0BSpb98GObtBe6i9KeBqBppGV5EzParDKRD01 HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j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equestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/css; charset=utf-8 cache-control: public expires: Wed, 29 Nov 2023 20:49:20 GMT last-modified: Tue, 29 Nov 2022 20:49:20 GMT vary: User-Agent x-frame-options: SAMEORIGIN strict-transport-security: max-age=3153600; includeSubDomains set-cookie: OCE=3462690173 cf-cache-status: DYNAMIC server: cloudflare cf-ray: 771e35949d570b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

	cert.visadpsgiftcard.com/content/PRC809/_Styles/site.min.css	104.18.31.151	200 OK	0 B
URL HTTP/2 cert.visadpsgiftcard.com/content/PRC809/_Styles/site.min.css IP 104.18.31.151:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers GET /content/PRC809/_Styles/site.min.css HTTP/1.1 Host: cert.visadpsgiftcard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cert.visadpsgiftcard.com/NavyFederal/Verify/Activate Cookie: __cfruid=3ba121f939141bedee570b5db92400928fa5de8b-1669754959; ASP.NET_SessionId=qwsfqbwmissnevgt1tzwzr1j; .ASPXAUTH=50C317D26E979B55C68865A41E3E9980C4310DBC58591BA43972A656D8E01471C7472EA30EF9FFFC0B6A67BF0F5411C213B784145AF8DE7E31B1726C42AD973DB5D28BCF92BD9F1B3CB4C8C9AB25D79124D2672AF2C230DCDAC91ED4CA43C310A3C33F83C0AF51965F8EE1FCC642499E3D11E46D44376F963377349758FEB6B7A7B278C8FB57555152226CCE575A5C9434FA3B8EA4395F0467E204D0938ACEECD220B9041E0A3E9965027AB2EA70C581084235F471520EE2F5639EB84BB42F4AA9287EF79A419A47BA7DCC5940ED4C4B7934520CD5803F5CEFC0CE15D5CFCA7815872F326556DC7DC1EE2A67026BA5BC6F56FDDF4BF176AA0780D03895D7643B24DDC274946974C5F2A04B53F8C2DD7BAF58456A93F756F8B55B837796D7583C28A576F26E4964A38AA982B6BB4E8C5E34E1A4DE06AAECED47962D0C2C53E1A13A5080BDF9336285483BE8D1064793BA7E1400F4E39D669C07FA0C8B77EE59176D976EF1FD24745DE49142E03E1F9EDCCA645EF2CAD03E4CF0E1D06E173A1B2C6530DEED7B9BF3946C973DD92FF0D66A9942B36F580F78EE209DC6D2264D5D75B5FC57149631CC4911B2C2F4917CFB10; __RequestVerificationToken=hYOkAIGVru5NZSs3gAapSiNLmANXTLSVD1WgGQOcvq-VhCczohgfia2a_gVILwCqsmRrnEUcyWHuB-CDRjDS703GeOuu5IsygAXaC5oLUdQ1; __cflb=02DiuDSDfsJ7kR6CpFPjShUezqtFR6kA6Tcs5Kjpjfxyi Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Tue, 29 Nov 2022 20:49:20 GMT content-type: text/css last-modified: Mon, 03 May 2021 17:04:10 GMT etag: W/"0e1a8553e40d71:0" strict-transport-security: max-age=3153600; includeSubDomains cf-cache-status: MISS expires: Wed, 30 Nov 2022 00:49:20 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 771e3594ad720b49-OSL content-encoding: gzip X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (20)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations