Overview

URL my.forms.app/form/630e0e70c2748c14c10ef710
IP104.26.6.145
ASNCLOUDFLARENET
Location United States
Report completed2022-09-25 22:07:34 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-25 2 my.forms.app/form/630e0e70c2748c14c10ef710 Phishing
2022-09-25 2 my.forms.app/form/630e0e70c2748c14c10ef710 Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (21)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-25 11:34:24 UTC 143.204.55.27
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-25 05:42:52 UTC 143.204.55.35
mnemonic passive DNS bat.bing.com (3) 387 2014-04-08 09:23:16 UTC 2022-09-25 05:03:52 UTC 204.79.197.200
mnemonic passive DNS r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-09-25 05:02:41 UTC 23.36.76.226
mnemonic passive DNS my.forms.app (44) 720683 2021-06-01 10:57:28 UTC 2022-09-25 14:59:14 UTC 104.26.6.145
mnemonic passive DNS ocsp.pki.goog (12) 175 2017-06-14 07:23:31 UTC 2022-09-25 04:54:16 UTC 142.250.74.3
mnemonic passive DNS googleads.g.doubleclick.net (2) 42 2021-02-20 15:43:32 UTC 2022-09-25 18:00:33 UTC 142.250.74.98
mnemonic passive DNS www.google.no (2) 25607 2016-04-05 19:50:59 UTC 2022-09-25 07:10:10 UTC 142.250.74.3
mnemonic passive DNS js-agent.newrelic.com (1) 378 2017-01-30 05:00:15 UTC 2022-09-25 06:13:43 UTC 151.101.86.137
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-25 04:51:16 UTC 34.117.237.239
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-25 04:50:18 UTC 142.250.74.72
mnemonic passive DNS static.cloudflareinsights.com (1) 1294 2019-09-24 14:34:56 UTC 2022-09-25 05:12:25 UTC 172.64.156.26
mnemonic passive DNS api.forms.app (3) 992980 2019-05-13 23:31:27 UTC 2022-09-24 07:57:32 UTC 172.67.72.65
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-25 05:07:25 UTC 34.223.168.227
mnemonic passive DNS fonts.gstatic.com (1) 0 2014-08-29 13:43:22 UTC 2022-09-25 04:49:39 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-09-25 04:26:31 UTC 34.120.237.76
mnemonic passive DNS my.forms.app (44) 720683 2021-06-01 10:57:28 UTC 2022-09-25 14:59:14 UTC 104.26.7.145
mnemonic passive DNS ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2022-09-25 12:15:08 UTC 93.184.220.29
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-09-25 04:50:19 UTC 64.233.162.154
mnemonic passive DNS region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-25 07:10:11 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
mnemonic passive DNS www.facebook.com (1) 99 2017-01-30 05:00:00 UTC 2022-09-25 04:50:19 UTC 157.240.200.35


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.26.6.145

Date UQ / IDS / BL URL IP
2022-11-26 06:51:12 +0000
0 - 0 - 3 my.forms.app/form/63626353e5740e14f4318e02 104.26.6.145
2022-11-10 18:33:53 +0000
0 - 0 - 1 my.forms.app/form/636ba97de5740e14f4400eb7 104.26.6.145
2022-10-06 08:57:29 +0000
0 - 0 - 1 my.forms.app/form/62cbdb01971e3e097d357811 104.26.6.145
2022-09-25 22:07:34 +0000
0 - 0 - 2 my.forms.app/form/630e0e70c2748c14c10ef710 104.26.6.145
2022-09-09 01:38:19 +0000
0 - 0 - 3 my.forms.app/form/629b6312bd94a175bb849970 104.26.6.145

Last 5 reports on ASN: CLOUDFLARENET

Date UQ / IDS / BL URL IP
2022-11-27 18:06:14 +0000
0 - 0 - 2 record.sun988info.com/_Sax-MULJD4TKgDnYQLIxcm (...) 104.18.189.136
2022-11-27 18:04:56 +0000
0 - 0 - 1 sognisogni.net/nowyou5c1x0378/ 104.21.49.204
2022-11-27 18:04:35 +0000
0 - 0 - 1 torrent5.net/4827-sonic-frontiers.html 104.21.14.199
2022-11-27 18:02:53 +0000
0 - 0 - 1 investing-stories.info/lps/bitcoinuk/i/2/ 172.67.156.224
2022-11-27 18:02:25 +0000
0 - 0 - 2 aktifasionline.layanan.asia/ 104.21.23.125

Last 5 reports on domain: forms.app

Date UQ / IDS / BL URL IP
2022-11-26 06:51:12 +0000
0 - 0 - 3 my.forms.app/form/63626353e5740e14f4318e02 104.26.6.145
2022-11-12 04:38:42 +0000
0 - 0 - 2 my.forms.app/form/630e0e70c2748c14c10ef710 172.67.72.65
2022-11-10 18:33:53 +0000
0 - 0 - 1 my.forms.app/form/636ba97de5740e14f4400eb7 104.26.6.145
2022-10-06 08:57:29 +0000
0 - 0 - 1 my.forms.app/form/62cbdb01971e3e097d357811 104.26.6.145
2022-09-27 01:42:53 +0000
0 - 0 - 3 my.forms.app/form/609890b8001f18095ac075fc 172.67.72.65

No other reports with similar screenshot



JavaScript

Executed Scripts (37)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (91)


Request Response
                                        
                                            GET /form/630e0e70c2748c14c10ef710 HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         104.26.7.145
HTTP/1.1 301 Moved Permanently
                                        
Date: Sun, 25 Sep 2022 22:07:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 25 Sep 2022 23:07:23 GMT
Location: https://my.forms.app/form/630e0e70c2748c14c10ef710
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9k1uP8SV7sfprokKK2dAApPopNzzNjwhi%2Bvdcq0piGK1Hz5YDw%2FVmxnurm0VNNa2oqv2ffkB%2BEtJxLfYY2JPJUeLFHJJFEw%2BMgEOlwJjCC8DvQJy1hSRspsjMc9%2FXg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7507128cfbe91c16-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 21:15:08 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2lcP8MsLWceuABVNcosUbZ92IowHS9SH8H8xnEvHh5WmH2fp72jp1w==
Age: 3135


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10804
Expires: Mon, 26 Sep 2022 01:07:27 GMT
Date: Sun, 25 Sep 2022 22:07:23 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: H3bUlh2JjJhdFyoc-kE4lloKolINLizTTAm4H4B9pnjVfNV12J-A7Q==
age: 63129
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4230
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 22:07:23 GMT
Last-Modified: Sun, 25 Sep 2022 20:56:53 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 25 Sep 2022 22:07:23 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /static/css/app.bb6f5.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-12356"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qA1EwDwIE4eiXVRcVxpEDp%2FCpzveiHSZGBM8qnYI2bYxJsVvC8aWCrO%2BsHFXZ%2BR3FmyvC39FIrI7VobteVlYm%2FjGr%2BmZlHUyCrTZZn0IqWB5OzPVSPlpg3w6zJEqdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f090b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   15889
Md5:    0d6ed56b528f18024aa7b5bf0e45fda4
Sha1:   15ccdfb5da8ea6035042de737c74be8e8cd1a02b
Sha256: 802d610a1e6964caee9e9a375c75bace3984bd9a8c498409c4668fc1ef78d4e9
                                        
                                            GET /gtm.js?id=GTM-WPSL383 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Sep 2022 22:07:24 GMT
expires: Sun, 25 Sep 2022 22:07:24 GMT
cache-control: private, max-age=900
last-modified: Sun, 25 Sep 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76163
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15501)
Size:   76163
Md5:    b7c87ad26db6ef616d39bd67789b44bd
Sha1:   2912a3d26769e0307547c6011edb87dbd65bad9b
Sha256: 938d85583869bcecc02c1c28cc568a3d1dc1ea4ec392fa18109fd05f5a35940c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sun, 25 Sep 2022 22:04:17 GMT
Expires: Sun, 25 Sep 2022 22:19:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: or55E6hSrP_W_IQZyn-qjGsgYJ7OR0kK-J6Qbc7Ncu04BzbMI8JTag==
Age: 187


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /static/js/dcomponents.15d95.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:09 GMT
vary: Accept-Encoding
etag: W/"632ac2e5-2798"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KGoituuq8yji26jMEfBNuIHnwUBp1xkSxccnT3iLmZmhi63Y9o9qurjDn3c7bu9sz71umHtZm%2FNPvQRVr9fktqvYll4ibELyXIkSJMpYbYThZXpksHiE5oIYhrq1wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f140b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10136), with no line terminators
Size:   80373
Md5:    1a322d2bb79b4605af7ddb408df30f77
Sha1:   68dd4864403e7d59117376eb64c9a8e050d15a72
Sha256: ddf55420a5db2fa5dd51c2cae663ac72b0b4f688f847766152b2ad4673abe9f8
                                        
                                            GET /beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 HTTP/1.1 
Host: static.cloudflareinsights.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         172.64.156.26
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 75071290b84c0af6-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   67562
Md5:    14775dc0eabe4b788b9567e1255e5817
Sha1:   0b60622d4bc0b05dc3ce9f9add482887bdb23126
Sha256: 1be08ebb1f4b404be8c867c95a96808d9b19cb8f0630281b1ccb0d5b37b6c665
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4510
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 22:07:24 GMT
Last-Modified: Sun, 25 Sep 2022 20:52:14 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            OPTIONS /user/gettimezonefromutc HTTP/1.1 
Host: api.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://my.forms.app/
Origin: https://my.forms.app
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         172.67.72.65
HTTP/2 204 No Content
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
access-control-allow-headers: authorization,content-type
access-control-allow-methods: POST
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-custom-header: web1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GXIdo6TjqhnJQZVSZReiEWOChR4l8FungMQQluI6XpGV329cjauW9G914I0UABBwOQGS2h45g%2Bzx5wUR5VrnHk5Jfj1%2FEMvFbeigaUsI2PWrrrBxXS3XC6zA1X8d91k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712941bab0b61-OSL
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Lc1daCYElqN3IdereeRFGw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.223.168.227
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0Jneacr9gHlc0fALiBzohuZrxo8=

                                        
                                            GET /static/js/mainheader.5f29b.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:01 GMT
vary: Accept-Encoding
etag: W/"632ac2dd-21ac"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ACpT25B8iFweHP3etfHJprh721qXxI0shWW44u5vp8P81mvggr%2F5NXBlPjSmsj%2FDfSLcKyc76yl9tPdPxZq6bqQYPznV6Lpii0D36sh8tArgW8Pm2C7HqVSEnf18sw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ea210b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8620), with no line terminators
Size:   3433
Md5:    86522e10d7582060c2a3d4fcec929677
Sha1:   04259f5f63f73d0b7bd482d8f9018abb839c1174
Sha256: 7337ad064bea27dd692c2488bbaf762a746064ae5832aac729312e068a5ad9bf
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 18:01:25 GMT
expires: Sun, 24 Sep 2023 18:01:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
age: 101160
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /form/630e0e70c2748c14c10ef710/view HTTP/1.1 
Host: api.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Authorization: none
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         172.67.72.65
HTTP/2 403 Forbidden
content-type: application/json; charset=utf-8
                                        
date: Sun, 25 Sep 2022 22:07:25 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mrW6sEpv%2BpQTGvQDyUJq4J%2BSVdRqTBlbHrhdgd2SkwTbov771RmAb5czDdAWLD4hoNksDeCuaGDOYW7YW0XhwAN4H6X%2FDTR3qvKH1Dipvx2QD9ZqdVhYoeCxLgKfOjI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071295dd1b0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   516
Md5:    3d248e43b091b7030efff5062c15374d
Sha1:   3fde1d1265fd2655d88e4f789a61a642cdf7635c
Sha256: 8b6da4148f1a8a0a3624cc61f5360f1118db91119d8b735de945dd578efac826
                                        
                                            GET /static/css/FormBuilder~FormView~SharedReport~shareform~shareresult.a750c.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:22 GMT
vary: Accept-Encoding
etag: W/"632ac2f2-3e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RkZzkeqpvJFP7YF3jZr%2BFjnMAtI2RWVwWSVbWCCNMwdnQvifqYZcoiJjDAcMg%2FhJ1u%2BcOHSnb0yoPo47AKjDesG3Sl%2Fqa2LA9MHVPRevKm7McsbUHuB%2FBpOJDpqRGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ba030b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7880
Md5:    83626218248f31776518528132b21028
Sha1:   41d475f44a6b3df6f84d039a6f886e545fb844b1
Sha256: 41b6cbb8fa48b58fb05a3c339e75d497dc8df3ee337a42c3afad1d917999a767
                                        
                                            GET /static/js/iicon.59ea2.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:52:44 GMT
vary: Accept-Encoding
etag: W/"632ac2cc-349e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8hk54134ckzdoI3yRlSYVD0dI6%2BDCMwVyWXq62ssmApnFfGYkR9NbrRj3EzYzSBDCX%2Fd%2Fk4TYtyAPzWcyX84l0T0ii99Hij1dpV53FdfbQ4JGZPVa%2FWHDCf%2FRSs7TQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f150b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13470), with no line terminators
Size:   4468
Md5:    b40289f419d1f1bebc8696bc1de9a79b
Sha1:   783e6bcf35271ee69b095924b7681b061e0c3a13
Sha256: b52b9a3a5a5896cef6647df58876ef6b339534e69ccfc557a3bd1c259e156995
                                        
                                            GET /static/js/FormView.2d11d.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:11 GMT
vary: Accept-Encoding
etag: W/"632ac2e7-a5f2"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TCPKGDmvjzLLXLk3%2BHu%2BHB%2BtsJROyL1r6IEE4EervqZV9mJIN39hUcMe3DMa4T4%2Fo%2BEPf5lV3uxzyYfBuR0T%2BNe3FsjRcb%2BjoeEeQaIJaWWmGdqyx5KdlUdfbqw6lw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca0f0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (42482), with no line terminators
Size:   12893
Md5:    ae836c1a799d42594041d475c551e6ee
Sha1:   84201de501947f401aa736cb11b597af9819bfd9
Sha256: bfc9715552e24898d8da7925d9779d6a83edf06594d613fb5283c81fcf2e4772
                                        
                                            GET /static/css/FormView.e36bb.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:14 GMT
vary: Accept-Encoding
etag: W/"632ac2ea-2370"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nWcs9guI3C%2FnVLWYNvmVm55u59XQGpBUtLEe28%2FWDYMyr7cSH6c%2F0A6D7DbYZ%2FEwicA%2BsPvzBZpYnXUyhElVBcM2VXPYMUpD1NyLIwrRLVcfwhHgQr3M%2BSCS%2BoQnwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca0c0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9072), with no line terminators
Size:   32996
Md5:    92fc53931507fb1e1917aafffba91c88
Sha1:   e4255da0a17d266ceb73ce99a9552c44129e8697
Sha256: 4e1dc4cd255abf35c17ab9f57c37b17cc7c25d97468087b00cf02ef6fa385e48
                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         204.79.197.200
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: private,max-age=1800
content-length: 11367
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=25BEBA3212AF683D0239A818135A692B; domain=.bing.com; expires=Fri, 20-Oct-2023 22:07:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 44ED16585B3F495B871B84E8C718A6D0 Ref B: OSL30EDGE0522 Ref C: 2022-09-25T22:07:25Z
date: Sun, 25 Sep 2022 22:07:24 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Size:   11367
Md5:    293ae3e0fc8b0d5c143fdf9d8490228d
Sha1:   3976c659b908e70818a3a1ac71860b497fe2d1a9
Sha256: 04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/img/formsapp-logo-white.svg HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.1.672642746.1664143643; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 25 Sep 2022 22:07:25 GMT
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
etag: W/"632ac2e2-20d5"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WujpqUQvwxLktviROdjCNl3WJ1dQpuPqNkt5LXjnnkyFoL6qnrW7MBs3r%2FVbGRGpFLWiNuzbIONUku2EvnS4rhJuQWo0HdGOvGKB5GorOxuhiQzhKp%2BuRRF04VQAnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712954b690b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1026)
Size:   18487
Md5:    da6efba8a0dd29664ad3b22c05d8c86c
Sha1:   35f96a1ea8f9cc192bc9a589cde647f21cea3a1c
Sha256: 3b528dd49f09ba62cfb2ed6f4642487c591a8c4b1c47a70743d7b0b7df50dcf1
                                        
                                            GET /static/css/mainheader.13de2.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-19e0"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aKYk0KKt8UNVui44JV2ggxqXnwQ84cugGklK8F6kf2%2FfnULkH8hKRgogi%2BdMTRvudG7hlOLIGqf89sQj%2F5rW%2FBUZPkvsHZQyxyTJV4cXhrxd6hjMeCyuAkFAyc16%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ea1e0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6624), with no line terminators
Size:   3350
Md5:    47bc8c8f8c9d0450d524c571d2ee3aa0
Sha1:   dde2df2182d9d7b72c25a47034017cfb50643951
Sha256: 5b7fdbbac682227c656201e51eb69509e194874374e8b339a4504e04d8d72dc2
                                        
                                            GET /static/js/vuegtm.3359a.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:16 GMT
vary: Accept-Encoding
etag: W/"632ac2ec-2730"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mPfs4cYM7VdA1BuwwRudSPqnkyzHFh9WiBAyKL%2BcHP949UM3RAD%2Fm7y0DzIIHaGxidkZ5rMkAPMuTJqqPoiK6o48E1F0hEoHU1H9xnKW7%2Fwfk9YCuqB2sncZVPIzvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293a9f50b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (10032), with no line terminators
Size:   30152
Md5:    bc27940ca4b08cf7542781b6610d601b
Sha1:   b64345b22fe5fc074f8c319157809ad3cb2ece97
Sha256: 92b58678caba1ae042d0ba8d9a38dd6ef11f6c91752c0af05577bc0e27689e9d
                                        
                                            GET /static/js/FormBuilder~FormView~SharedReport~shareform~shareresult.c42fe.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:27 GMT
vary: Accept-Encoding
etag: W/"632ac2f7-b07"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q2RQl5Bd1I%2BOxCFfLEWspTzqRKzPZ46%2BMGChHkCUKBCrCUl%2FHt5ugmLH8pUv4XUHfNeJanq5hVBoVIF5mflQ4bK94la7AN5hnmPTIgZMUj3Bd60UG3IUfgGPPUpF1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ba040b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2823), with no line terminators
Size:   2053
Md5:    588450a2ee69e60422f10dc404def081
Sha1:   3aa0b43e7da1a48217abb8767d5099c047d93ff6
Sha256: 2e1fce9a8e82d462668bd8f3a1bc123808f729c12559a49fff464ff7ea4897fe
                                        
                                            GET /static/js/vuelazyload.45220.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:01 GMT
vary: Accept-Encoding
etag: W/"632ac2dd-50a6"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tB2tnn7s9RxhuGdGcm1d0XWck3oLlPUq72xysBMOxLiOuW2gtEwWM0zKFtibq4a6eH0WnOZsR5Uh2OkgRduhJqHO3hA5AlDTDEAE%2BSyLr2weM7bGmrfOL7AIOAgzQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129399f00b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (20439)
Size:   12309
Md5:    4d73170a035fcdb629c721b8f697dba7
Sha1:   aab88bb5c95b6533b4bea988c2d4e6822b5fcc19
Sha256: a6c1ec23a0225f2da9b45487ac8642ecc9098905f288af9fc9253f2c66fb9b44
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-123158574-1&cid=672642746.1664143643&jid=443520732&gjid=1613665076&_gid=1587894932.1664143644&_u=aCDAgEAjAAAAAE~&z=1493865036 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         64.233.162.154
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://my.forms.app
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /action/0?ti=137024713&tm=gtm002&Ver=2&mid=c658f99b-2894-4d35-8c4b-fe2b0dc45370&sid=6eef31303d1e11ed8d308bb9efc31a8c&vid=6eef3d003d1e11edbaf09db90d4f3cba&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&kw=form,%20builder,%20formbuilder,%20free%20form%20builder&p=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&r=&lt=1263&pt=1664143642021,,,,,289,322,322,322,377,325,377,567,567,589,1186,1261,1263,,,&pn=0,0&evt=pageLoad&sv=1&rn=866443 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         204.79.197.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1A9969E571F361C833A57BCF700660EE; domain=.bing.com; expires=Fri, 20-Oct-2023 22:07:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5949394C134942A2A42D11FBC69FAF2C Ref B: OSL30EDGE0522 Ref C: 2022-09-25T22:07:25Z
date: Sun, 25 Sep 2022 22:07:25 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/viewthroughconversion/794725785/?random=1664143643726&cv=9&fst=1664143643726&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2oa9l0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&auid=1485509254.1664143643&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.98
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1076
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Sep-2022 22:22:25 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2404), with no line terminators
Size:   1076
Md5:    8b6134f9a9e5d6026c0d50faeafc7abd
Sha1:   b9b8393d709745a57bb9e36dcf4c70584d2a4dc2
Sha256: 295ad0bdaa31af57b8549c78e2282caa585d7294f3e050f263f1b5d6893d9dff
                                        
                                            GET /pagead/viewthroughconversion/587928374/?random=1664143643720&cv=9&fst=1664143643720&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&auid=1485509254.1664143643&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.98
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1055
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Sep-2022 22:22:25 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2342), with no line terminators
Size:   1055
Md5:    7ee264bd3c59bbdd081f30fc4853b74b
Sha1:   47ae624ee1465db459683707a668cadaea3c266d
Sha256: 4c85d860964956288e1b677cf347520e0c39dd37a1957c24d6a8b4d7faf6acac
                                        
                                            GET /static/js/FormDesign~FormView~LocalForm~shareform.853a4.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:04 GMT
vary: Accept-Encoding
etag: W/"632ac2e0-a99"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RaFT0Hk6F9blQbDgxm%2BsAVuf5qLQnzKYMMoMi1jxHELtX1p9nZ9JSckg47q06uQ9TscMVwhEEZbZr%2FfxtDR3WrcRELdsaxULonMOR7Ney0pq%2FRsclS1PzwgChGWHpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca0a0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2713), with no line terminators
Size:   470
Md5:    79d5fee63d166823db422432998a3327
Sha1:   92c8b02de4230fce2eb4f05054dcfb4172384634
Sha256: 1c7caf10e5a2f352fada0f2459ba7d95fc4eefcfdb8248b52da3454f6e69d04c
                                        
                                            GET /form/630e0e70c2748c14c10ef710 HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/html
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VDWFC8B8QxxHPh6StRpw3dK1RIp%2FKB0i%2FdAgCzcYRx6aRE0ALrrPBJH5gNsuhhZyjdV2jpSp0Z9uKbO51IjeAeiOuYSwSMXbu92tVi29ZFi5LZ6EpF05ph9jB8LwGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507128eede00b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40679)
Size:   83948
Md5:    3ea9cbcda9ed91f270bd1a08fb41c775
Sha1:   94b520153f5c606bac1622f8123d4b98c80c6212
Sha256: 96093564455b878a9878d99b85832e154acac99f3df8e27835e78a301da9fb91

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p/action/137024713.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         204.79.197.200
HTTP/2 204 No Content
                                        
cache-control: private,max-age=1800
set-cookie: MUID=1715E93D226364BF36F8FB1723966584; domain=.bing.com; expires=Fri, 20-Oct-2023 22:07:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4A3938F0618C48A5A1A69A233DFD61C5 Ref B: OSL30EDGE0522 Ref C: 2022-09-25T22:07:25Z
date: Sun, 25 Sep 2022 22:07:25 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /g/collect?v=2&tid=G-740JKHV4FZ&gtm=2oe9l0&_p=69686888&cid=672642746.1664143643&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664143643&sct=1&seg=0&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&dt=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&en=page_view&_fv=1&_nsi=1&_ss=2 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://my.forms.app
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-123158574-1&cid=672642746.1664143643&jid=443520732&_u=aCDAgEAjAAAAAE~&z=774560307 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/587928374/?random=1664143643720&cv=9&fst=1664143200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&gtm=2wg9l0&sendb=1&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&async=1&fmt=3&is_vtc=1&random=2058782631&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /static/css/Account-PaymentHistory~mainheader~upgradepopup.61ec5.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:22 GMT
vary: Accept-Encoding
etag: W/"632ac2f2-4b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FI%2BLLM1Vi3BiU7COG4y%2B%2BDQjD8CBpzPgcSoekdaJv%2F5Wm%2BBVvaTOdrhj9uVjdnJMepOnMhQhdI37V6rZyPv5MgZNJhP3MZfPCsMSz0t5pE%2F2dLMvDlwPGVgKjpUMNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ea1a0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   112
Md5:    b92f15982d966b9ed19aac3ab13fe07c
Sha1:   8c58a40d45dc1c491dd0f9a61d560628cef44418
Sha256: 74637515794256606b56ce8d07395929058205d9388af2ebc9fbbbd41c9e1278
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13483
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 22:07:26 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13483
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 22:07:26 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13483
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 22:07:26 GMT
Connection: keep-alive

                                        
                                            GET /static/js/carousel.e5ce5.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.1.672642746.1664143643; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:25 GMT
last-modified: Wed, 21 Sep 2022 07:52:55 GMT
vary: Accept-Encoding
etag: W/"632ac2d7-4a64"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PJi%2FHQ%2FdcMgMkDGXO6kiqJHMGo05BBBPgrfFCnpxnF50Cl68ID3blHbFYaIy%2FXMaXcuqqW7P8hxby6BMMzmqQ%2B8rylHZkYA7HwHBLsnaHKBM33EybOq8Id%2FUTC%2B5cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712953b670b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19044), with no line terminators
Size:   18241
Md5:    e751f15dfcbc226547388e8f2871566e
Sha1:   b49c11e3ab0b21c8682a2c584330835f43d50802
Sha256: 402ac21f8de0e706fd0e391b22aebe61b6cbed24c681a4254580737ab747c9b8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bfaf0f-e716-4cf7-9785-ffcd146aed68.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7648
x-amzn-requestid: 359116cc-4e08-4c57-8aba-0aa7bd232c98
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSKWG2BIAMFlHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca42-2130239f2dab781c0f49f0e4;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: caqLwNG92a0CRHwZLzFYIndWri6UOUyN9Bm8pqEytrumcpAMAo0WmQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:47:32 GMT
age: 1194
etag: "042d4b6927f80c5a44bb7baf77b763577c19ed36"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7648
Md5:    75a459d4f554d38a1701e727185c7e91
Sha1:   042d4b6927f80c5a44bb7baf77b763577c19ed36
Sha256: c01b0d3a28ed31ec9432d879310cffa313260f97044f1ed473aa0331bdba5607
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9352
x-amzn-requestid: efae9f72-8dce-4899-9dc8-c6cc9b4b2540
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvwFwWoAMFmig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-744ade88393a83467fea2b97;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NOu92heW0-RynLU34xGoSq36WGjOu75Ukkd8IA3IoQ2FMHFUMlkJrA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 1050
etag: "78a82653eb0e5aa4f1355c13b665da44a3412024"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9352
Md5:    65e3b72afc2f13978ee80cc87dc289f1
Sha1:   78a82653eb0e5aa4f1355c13b665da44a3412024
Sha256: 9f3a89f268fca25f5a6c7319b1f8412a193cd73bc9c8f4c5a9d294582df3a57b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8703b7f0-bb10-4a43-a50f-a8a5c8857499.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10045
x-amzn-requestid: a01e6cef-fe8f-498c-aa68-2603a66b1121
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvwHPwoAMF7pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-1a4405e54c54eccb4f0846a2;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dBJjUHYsSR4YA1SMcbZJ_iNdvPOhtXlltVN3f36IduFe2h2zsMT_Yw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 1050
etag: "c529507a70247c7e03c849c3ff45f93eada6f0c4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10045
Md5:    38f828e3aa86057cc3b686ca9d4accc5
Sha1:   c529507a70247c7e03c849c3ff45f93eada6f0c4
Sha256: 76016d51352ff6a8372b92206119d88747600874ecee5315573ca4e539e03c6f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7185
x-amzn-requestid: e7b997d7-f9ce-40c6-b9bb-372ee10d8ad0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTAfEX5oAMFcHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb9c-31e295e33ead940f381121a1;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:43:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p7rimTrmOgUnwPuESSKSrsWlzhiSBJYx9h8XIacxP8DUyyvXye2iyg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 1050
etag: "0d5cb1f3e3ea510308034a5e569c0e65fae30835"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7185
Md5:    6d79a3a5bd7dc7aa6cab306176fafd11
Sha1:   0d5cb1f3e3ea510308034a5e569c0e65fae30835
Sha256: 57979dfcf6fdc76f04e4790c2b94b876e188ac780aa49d9bfc8a58c498dc4203
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5980
x-amzn-requestid: fbf0c390-da24-49e2-8492-43e29e5d4bb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHCGJVoAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc6-1f9b1b7d63467c58702e6d7e;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:38 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pt7rJi8EIQFBk0gHQZ1WnjvThPba86XZCGFs83l1ZW2dj-_6bZprAA==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 1050
etag: "12aac1bd22e675f09a220de08b4656e801c2e647"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5980
Md5:    ef17205adb2b478d3bff54b048208d22
Sha1:   12aac1bd22e675f09a220de08b4656e801c2e647
Sha256: 620fe39cf421ed3a21e968570f7e863d69224113be867ec2457ed3850ea113f6
                                        
                                            GET /tr/?id=175163836725648&ev=PageView&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&rl=&if=false&ts=1664143644798&sw=1280&sh=1024&v=2.9.84&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1664143644797.521496295&it=1664143643737&coo=false&tm=1&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.35
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Sun, 25 Sep 2022 22:07:26 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /nr-spa-1216.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.137
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: TAwVDFAylU9PwNPPW/eXC4UyIMC8EQ1d6JNW9Q+uXGnPmL1fuimq9M3lAe733gCMeKNDiCQX1YM=
x-amz-request-id: SYTECJR5CMD8NJ8E
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "63e2df852d15ab21d7ff8fc4363222e8"
x-amz-version-id: UU.F5jvoumAjQChriwTQHbisCFw_OInU
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Sep 2022 22:07:26 GMT
via: 1.1 varnish
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 677
x-timer: S1664143647.527178,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 18216
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32010)
Size:   18216
Md5:    6561a2403142205f966207d61576f1a6
Sha1:   1310e72f494e12ab63a4280fc1600a2c89dc9bb8
Sha256: 0e496fcab0b9120938373e271fa6631b7da17adf33f8a490637467c170a3e37a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6541
Cache-Control: 'max-age=158059'
Date: Sun, 25 Sep 2022 22:07:26 GMT
Last-Modified: Sun, 25 Sep 2022 20:18:25 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /static/js/iavatar.4fa87.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:26 GMT
last-modified: Wed, 21 Sep 2022 07:53:07 GMT
vary: Accept-Encoding
etag: W/"632ac2e3-a70"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3357
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XoTCilRWzaC2PKUjGJtsDUhYv%2FkHjkbv7IECET2%2BDqlRiqijqOMdkEYNUwvSsilRw%2F3PSBoms%2BLZWqAI4wST0s%2FmFG0N3w72GZf72dJ9uu%2FsR4QX1JPEmUiyVpZOtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7acd0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2672), with no line terminators
Size:   46822
Md5:    05b49a2c13294a6b10a4791286fa7f92
Sha1:   0474559a97fb7a1c81beb04fb8e2c1e76bd7d846
Sha256: 654097d7045b5b102873ec921988c8d8dfbbc07f02a3f94ac522fe306052a26d
                                        
                                            GET /static/css/inputcomponents.f3c17.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:26 GMT
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
etag: W/"632ac2e2-450c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Msfh3bqaFiaRa7XDPoNTLKm%2FAaNwhQ58AkHWdqyLbTOQ2K3fQ%2BQmwKw%2BtlIfJgfHf0D3FFlYeeIq4O3ksaS9QAnHqHMbqBeuFAr7KpZb9oZ%2BggrtlOnWT%2BVNDOm9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac10b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (17674), with no line terminators
Size:   3701
Md5:    23fa5dcbca32c104b1096f06427c8dad
Sha1:   4b0eb8e35a731ed7beb870986564d6504ece813c
Sha256: 8a197031bd9afe153d73bd9e5fa79b09f3a90062c7fcdcfba66266707c662455
                                        
                                            GET /static/css/imaskedtext.8cad2.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:26 GMT
last-modified: Wed, 21 Sep 2022 07:52:38 GMT
vary: Accept-Encoding
etag: W/"632ac2c6-51b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3358
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V9ynH6kwxtLaFW%2B6LZG3pkZA5IKxeYTDUk4cPggnaqimof3pJUNyvH8gYkkxU6V7Oxl4LvSDzAGcSIiwEdz5WlOMAe5zdjWKlVVTk%2FBIvs733WbHDYukN6dPjQeK9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac00b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1307), with no line terminators
Size:   955
Md5:    6b082bea907399fc656abb25191cd26c
Sha1:   d3006038531cdbf66e5cdb9ce2c98469c272ec28
Sha256: dba6312c73321c4fe5c3bb3b19206feff0ec9a7c5b3c7b3d6bc262b9c4aaab80
                                        
                                            GET /static/js/questionvalidation.71e97.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:26 GMT
last-modified: Wed, 21 Sep 2022 07:52:47 GMT
vary: Accept-Encoding
etag: W/"632ac2cf-568"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yRr5cw0j29a76ODZF1Y58FtlrghxpnkxVjzUPaOry5a2OVobZTSx0QO7vPuK%2Bi4zS7cx4E4b7FaS31Vfi9t%2BNXk9sJDjAxqCG%2F5XDCwDyKO0CjBdnmLTlNFvVGcU2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129ebb0b0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1384), with no line terminators
Size:   754
Md5:    bf995416bffc5e2384024185f369bc7b
Sha1:   867bad4e363ae265a0b55517e0c05ac1657502b6
Sha256: 745d5b49d4e9f1d540eee9827f8ffe6d45c6ff9713e7ba8f5137ef8a0ca1d933
                                        
                                            GET /static/js/runtime~app.4691c.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:00 GMT
vary: Accept-Encoding
etag: W/"632ac2dc-5fda"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=McJvGWFQTpDajj2PCmZ9oWHWvcrtstZifJGSbcPPXzDJVj62T3bcbfkNQwkaOGFM7phjtWTE99%2FE3fS9yICVu%2BuH7XjF80gVggr5Ti2Z6DwXv%2F6JQZHpk2NEsNXsJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071290af170b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/vendor.523c4.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:17 GMT
vary: Accept-Encoding
etag: W/"632ac2ed-5e95c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2FnjT9ChnTaNVwsoRfTPyVW8YMymgucke5vBvbuumBND%2BLJHtuE7b5b2Gyn8FsjKJVYJl3xq40%2FvQI2w4COOtidZ9gmXQGyuFNgmWon6b6N9vyYmwyirkCrpVSeV3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071290af160b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/inputcomponents.ed0b3.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:26 GMT
last-modified: Wed, 21 Sep 2022 07:53:23 GMT
vary: Accept-Encoding
etag: W/"632ac2f3-1ad96"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=swizTsWwGB3Vj%2BwIzW0JgrPLGI7Ik2g%2FbxlV6Ci8jPOtZj16FNiLNYO8m39NqaL4Zbagk6WIF7cSj%2FT7n9sSAxtqdxu%2FZO40KMg5qt0iBZgM15zrCaotrv3sp3VlWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac30b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/css/FormBuilder~FormDesign~FormView~LocalForm.a2bed.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:52:51 GMT
vary: Accept-Encoding
etag: W/"632ac2d3-4303"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BJVZgjApuhms0roIldmW9QLf1R%2BCJ25eFx1220IxsbRCUFVT1sKaE6K%2FIWV09hOcdFqNnX8nvQTrTeGbRdXFdEhfr21gEMsGuU6tO%2FHFoBmwhTcnXm2bnO3HkAIXGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca060b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/FormBuilder~FormDesign~FormView~LocalForm.d4928.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:52:48 GMT
vary: Accept-Encoding
etag: W/"632ac2d0-d5c9"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zFhsxKqXmH4Mddd4dUmvb3Mp52lrL1K%2FgEcm%2B17CHelH69XL5rxrXYo44jtMdbKQQ34DvRy5k4XAdoiBLe6cSHVf97fUJfRZJno%2FvPjX1bHJLdwySvDYG3%2F7qv9bvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca090b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/FormBuilder~FormDesign~FormTemplate~FormView~LocalForm.4854d.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:01 GMT
vary: Accept-Encoding
etag: W/"632ac2dd-114"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hGNkaVl1C7xQzQDfGGlRHKLX6DdTjCo9SeNYUdxdujE98YpybHJMI6KvQg8F6FlUw7JPtSL8A%2B5AA5U5EgAL1i2dzC%2FCkpWXbmeWRochpOxP3fAkC9Q4UpfUpt4NDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca050b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/imaskedtext.71ae2.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:26 GMT
last-modified: Wed, 21 Sep 2022 07:53:02 GMT
vary: Accept-Encoding
etag: W/"632ac2de-3f13"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3358
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bf1x930iFCPAK%2BWqkJ4nkHw0vCHCribIeUX584JXvDAgnrUdmyuIYHFronzdwwKyUWRvMG7jHfVc8XHoQf9tTZK4TE0EkaER6LiEPvFEZzUmpVngw6I4hUlAFOl5PQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac20b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/Account-PaymentHistory~mainheader~upgradepopup.dbf5d.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:07 GMT
vary: Accept-Encoding
etag: W/"632ac2e3-512"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gASDPDrBgYmdi3eADwTqHCjYtKQkMg08nIgAMtYWxpakV8gtkwQ7mWjK0Zlt2UHLf2Q0r4jCUA%2FO35Z7sqqLL6aZIB3j%2B2rrzqghevdBAbcjFQv2J5o5pP0Wl0t4yw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ea1c0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/swal.4f135.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-12468"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zu2QjnQxbRIM8Ls6WEl7vBPFwaH6GFaZE%2F81OZc3m9lODkqR8r%2B7EzqacCCKKKCJCsmUHqRs%2Bv5BwwXvqSXWG%2BzMLNCn2ZHTYAI6qmUmRtwLuYd4auOO9uM04QtGjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293a9f30b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6233
Cache-Control: max-age=88265
Date: Sun, 25 Sep 2022 22:07:25 GMT
Etag: "632f6e8e-1d7"
Expires: Mon, 26 Sep 2022 22:38:30 GMT
Last-Modified: Sat, 24 Sep 2022 20:54:38 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
                                        
                                            GET /static/js/country-en.83d29.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:03 GMT
vary: Accept-Encoding
etag: W/"632ac2df-102a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h1lhqhbKP2Opo7BxxsRGA60poBjWn8fjMJd6h17zN1OKWi%2B7y93anbUtcIUfxPzcrgDhKC4M6rCHCLluDIK%2BWPCbJcfD8td1KwJ987Dv2O0%2BHVjK1yXCfMWkzjehEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129359b40b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/css/vendor.88295.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
etag: W/"632ac2e2-b52"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Z9aCCztTujyrDFxUcKfsgkKt1RgGDzMqkPJiYuoycvjBAGd7d8ZTDB8CiFWo5STynKAhy3OC3jbWk6eTL3EeHFP32dSGkOM4kBiCdCi9aBtWvJeWKVglHxaQuAH1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f030b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/css/swal.2ebcf.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:22 GMT
vary: Accept-Encoding
etag: W/"632ac2f2-5f0e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TGRSnBwPZAsOSiS0pc9xKGz3WNAYbuF%2F46kZ31mmi1HG9KjvXle1%2BxCh0BSPjJegR1sm7Bt%2B7aieBjtsR6XXkGmq80naGT45bqqvzYVa5BEdT5A1icAP704FFS%2FH1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293a9f10b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/vendors~Discover~DiscoverForm~DiscoverUser~FormBuilder~FormResult~iavatar.cbe56.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:26 GMT
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-257"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3357
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5xbSIbsKVhUa7mY2YFWTTU5G8t1TOPbUYm5CBrihln4ox1Ir2Iz5AeJs5lFHd1kGQt6NjQRaQKBe7yPHgCaRr3Iwc88yPedIkMuaBXaI6j1CvkY9Q4YafvzQWWDF8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac40b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/css/asyncstyles.4869d.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:07 GMT
vary: Accept-Encoding
etag: W/"632ac2e3-2555"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yHRgSkA4JEFng1N62D1SspCj1ut0gssc5MS7T1Qj%2F2%2B7OOT9pNLGXamy8Guq9I179bbc6Hk7zq1qJORcRi1IX3%2F8ImPFRmJuuvhSMsEzeVZfFQy8x2CVJwhD4DFDFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f0b0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /cdn-cgi/rum? HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4ODU3MzIiLCJhcCI6IjQ5OTU3NTY1NSIsImlkIjoiOGZmY2Q5NGYzODNlODczMyIsInRyIjoiNDY3MzBmZWE0ZWM5NDkyZjZmMzdmZDI4MmFjYWVlOGYiLCJ0aSI6MTY2NDE0MzY0NDg4MH19
traceparent: 00-46730fea4ec9492f6f37fd282acaee8f-8ffcd94f383e8733-01
tracestate: 2885732@nr=0-1-2885732-499575655-8ffcd94f383e8733----1664143644880
content-type: application/json
Content-Length: 23028
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/plain
                                        
date: Sun, 25 Sep 2022 22:07:26 GMT
access-control-allow-origin: https://my.forms.app
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7507129e7ac50b65-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /cdn-cgi/rum? HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 497
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143651.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/plain
                                        
date: Sun, 25 Sep 2022 22:07:32 GMT
access-control-allow-origin: https://my.forms.app
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 750712c64b710b65-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/css/iicon.8278c.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
etag: W/"632ac2e2-23e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2BdupLdkd6Z24vOkzICTvcQ01j0X6J4ZsMwSOQ2ws5zLxPsytS0uLrbpQKIGvittYvlUsN2acY1b38BilhBztIljalKni9KPxavaYz56tCdidc3Vnn2c%2BN%2B2%2FBU2Lg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f100b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            POST /user/gettimezonefromutc HTTP/1.1 
Host: api.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Authorization: none
Content-Length: 21
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         172.67.72.65
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
date: Sun, 25 Sep 2022 22:07:25 GMT
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-custom-header: web1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HQvPfwLFYsE%2F9r%2FjBNlG0zFvDeJ7%2F7gGJzMCfqkLwFHU7xVoybmgFm%2B%2Bos5dHMkfsvx4WGrJ1f3%2B7rPb0AjVKlZ1Ay70aIczwEhRydu71VwbbS7SGgUXsPH9izHW2Po%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712950c880b61-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/ialert.c193d.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:26 GMT
last-modified: Wed, 21 Sep 2022 07:53:03 GMT
vary: Accept-Encoding
etag: W/"632ac2df-4cf"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3357
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lgyUZNGOXLept%2B1u5jsYTc2K81dmoHSjnD4A7m1OmazJlaYpAhy3f3rvXtQOb36F06n%2FxQV8AH3ggs%2BV11Pn95x%2BinP778IgM2Ro9JyvDbVN00kxGkmrs9upkanecg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129ebb050b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/FormBuilder~FormDesign~FormView.ac83c.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-213a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SL6JsIDLC8h7%2B4f2ULSq3ixbLdztwTfJvg018pZ2R5ShuVd0wqxtGCmK%2Bel9y%2Fi6MoeYrkyhtiyrDQE%2BjbYHQS3ZlXiU2FpgEMbBpVgSZ58WzO0fKzsbW%2FyUDK5wHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca0b0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/lang-en.bdd06.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:16 GMT
vary: Accept-Encoding
etag: W/"632ac2ec-fbce"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zmJzwgAnQhr4nc7x8jWsxFdPsdikY3Sbwb%2BPREolGzF5HoK9IQ%2BI5MLE9XL6UGN76ebjJCRgNj7sdiWL71DaC%2B2HKIYmw%2FxOpwALcJ3otFLwu0hFH8fa9%2BFv6rhJbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129359b60b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/js/vendors~FormView~LocalForm~webfontloader.3a8b0.js HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:25 GMT
vary: Accept-Encoding
etag: W/"632ac2f5-2f93"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=US5S38kY3qNpDoCk4XJ0oG15LxNeAZaGKZkDsK0jSSYUSL%2BaD00jVErki%2BvKJHT3ZwxepTj0Wm7v%2Fa2uiUfvauNuqko22UsC8HWxJImhFB0K%2BUo%2BgJcpcNzL166x1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129399ef0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/img/formsapp-logo.svg HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.1.672642746.1664143643; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sun, 25 Sep 2022 22:07:25 GMT
last-modified: Wed, 21 Sep 2022 07:52:38 GMT
vary: Accept-Encoding
etag: W/"632ac2c6-20f0"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Aqj9i8B9kwy%2FnmFvRSLGM8Liy0pz4CaMpuTgXkOa6%2FrE%2BLy0Y0wnD%2FcJFOv3cWF2HONJZXIn3PvaJB4S9UbntXOp%2Fz%2B5REVduXLKPDRbIoI0%2FzAre%2F4WHjtIsga2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712953b680b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/css/dcomponents.77be9.css HTTP/1.1 
Host: my.forms.app
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.26.6.145
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 25 Sep 2022 22:07:24 GMT
last-modified: Wed, 21 Sep 2022 07:53:14 GMT
vary: Accept-Encoding
etag: W/"632ac2ea-1ac3"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JeSkTM9VKHCf132h9flYS5S97jP5tEz5Xm6Cag9q47O7heP%2FEhlXu%2Fsbw3qUg7dNp%2FfQuwGZmjyuWjVXvrUDdl8mfPuGpRGQKwr6kIiwteXGiK%2BvJxdpQpl4wKte6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f0d0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---