my.forms.app/form/630e0e70c2748c14c10ef710
301 Moved Permanently 0 B URL HTTP/1.1 my.forms.app/form/630e0e70c2748c14c10ef710
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /form/630e0e70c2748c14c10ef710 HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 25 Sep 2022 22:07:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 25 Sep 2022 23:07:23 GMT
Location: https://my.forms.app/form/630e0e70c2748c14c10ef710
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9k1uP8SV7sfprokKK2dAApPopNzzNjwhi%2Bvdcq0piGK1Hz5YDw%2FVmxnurm0VNNa2oqv2ffkB%2BEtJxLfYY2JPJUeLFHJJFEw%2BMgEOlwJjCC8DvQJy1hSRspsjMc9%2FXg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7507128cfbe91c16-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 21:15:08 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2lcP8MsLWceuABVNcosUbZ92IowHS9SH8H8xnEvHh5WmH2fp72jp1w==
Age: 3135
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10804
Expires: Mon, 26 Sep 2022 01:07:27 GMT
Date: Sun, 25 Sep 2022 22:07:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: H3bUlh2JjJhdFyoc-kE4lloKolINLizTTAm4H4B9pnjVfNV12J-A7Q==
age: 63129
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 7559d4ebbe2ad94ff80914e879c29d27
9bce0a737b4aed4c6f58f3b32557d8c5fbc0cee7
f8eadbcae394c24100ce9a7ba8faa01a02e7c86b3a392a8c6741fe522675f81f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4230
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:23 GMT
Last-Modified: Sun, 25 Sep 2022 20:56:53 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 22:07:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
my.forms.app/static/css/app.bb6f5.css
200 OK 16 kB URL HTTP/2 my.forms.app/static/css/app.bb6f5.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0d6ed56b528f18024aa7b5bf0e45fda4
15ccdfb5da8ea6035042de737c74be8e8cd1a02b
802d610a1e6964caee9e9a375c75bace3984bd9a8c498409c4668fc1ef78d4e9
GET /static/css/app.bb6f5.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-12356"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qA1EwDwIE4eiXVRcVxpEDp%2FCpzveiHSZGBM8qnYI2bYxJsVvC8aWCrO%2BsHFXZ%2BR3FmyvC39FIrI7VobteVlYm%2FjGr%2BmZlHUyCrTZZn0IqWB5OzPVSPlpg3w6zJEqdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f090b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WPSL383
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WPSL383
IP
File type ASCII text, with very long lines (15501)
Hash b7c87ad26db6ef616d39bd67789b44bd
2912a3d26769e0307547c6011edb87dbd65bad9b
938d85583869bcecc02c1c28cc568a3d1dc1ea4ec392fa18109fd05f5a35940c
GET /gtm.js?id=GTM-WPSL383 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Sep 2022 22:07:24 GMT
expires: Sun, 25 Sep 2022 22:07:24 GMT
cache-control: private, max-age=900
last-modified: Sun, 25 Sep 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76163
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sun, 25 Sep 2022 22:04:17 GMT
Expires: Sun, 25 Sep 2022 22:19:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: or55E6hSrP_W_IQZyn-qjGsgYJ7OR0kK-J6Qbc7Ncu04BzbMI8JTag==
Age: 187
my.forms.app/static/js/dcomponents.15d95.js
200 OK 80 kB URL HTTP/2 my.forms.app/static/js/dcomponents.15d95.js
IP
File type ASCII text, with very long lines (10136), with no line terminators
Hash 1a322d2bb79b4605af7ddb408df30f77
68dd4864403e7d59117376eb64c9a8e050d15a72
ddf55420a5db2fa5dd51c2cae663ac72b0b4f688f847766152b2ad4673abe9f8
GET /static/js/dcomponents.15d95.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:09 GMT
vary: Accept-Encoding
etag: W/"632ac2e5-2798"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KGoituuq8yji26jMEfBNuIHnwUBp1xkSxccnT3iLmZmhi63Y9o9qurjDn3c7bu9sz71umHtZm%2FNPvQRVr9fktqvYll4ibELyXIkSJMpYbYThZXpksHiE5oIYhrq1wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f140b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
200 OK 68 kB URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
IP
Hash 14775dc0eabe4b788b9567e1255e5817
0b60622d4bc0b05dc3ce9f9add482887bdb23126
1be08ebb1f4b404be8c867c95a96808d9b19cb8f0630281b1ccb0d5b37b6c665
GET /beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 75071290b84c0af6-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fd3b36dc2b620b48de491a8d9ba00fc0
be67ba7db5215dcb7c9225876e35a5e0a5005c9e
28205ee62c77b1caad6cc24c1ce98ddb92d26f67d41270f7d5278208a907c62f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4510
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:24 GMT
Last-Modified: Sun, 25 Sep 2022 20:52:14 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
api.forms.app/user/gettimezonefromutc
204 No Content 0 B URL HTTP/2 api.forms.app/user/gettimezonefromutc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /user/gettimezonefromutc HTTP/1.1
Host: api.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://my.forms.app/
Origin: https://my.forms.app
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 204 No Content
date: Sun, 25 Sep 2022 22:07:24 GMT
access-control-allow-headers: authorization,content-type
access-control-allow-methods: POST
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-custom-header: web1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GXIdo6TjqhnJQZVSZReiEWOChR4l8FungMQQluI6XpGV329cjauW9G914I0UABBwOQGS2h45g%2Bzx5wUR5VrnHk5Jfj1%2FEMvFbeigaUsI2PWrrrBxXS3XC6zA1X8d91k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712941bab0b61-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Lc1daCYElqN3IdereeRFGw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0Jneacr9gHlc0fALiBzohuZrxo8=
my.forms.app/static/js/mainheader.5f29b.js
200 OK 3.4 kB URL HTTP/2 my.forms.app/static/js/mainheader.5f29b.js
IP
File type ASCII text, with very long lines (8620), with no line terminators
Hash 86522e10d7582060c2a3d4fcec929677
04259f5f63f73d0b7bd482d8f9018abb839c1174
7337ad064bea27dd692c2488bbaf762a746064ae5832aac729312e068a5ad9bf
GET /static/js/mainheader.5f29b.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:01 GMT
vary: Accept-Encoding
etag: W/"632ac2dd-21ac"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ACpT25B8iFweHP3etfHJprh721qXxI0shWW44u5vp8P81mvggr%2F5NXBlPjSmsj%2FDfSLcKyc76yl9tPdPxZq6bqQYPznV6Lpii0D36sh8tArgW8Pm2C7HqVSEnf18sw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ea210b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 18:01:25 GMT
expires: Sun, 24 Sep 2023 18:01:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 101160
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.forms.app/form/630e0e70c2748c14c10ef710/view
403 Forbidden 516 B URL HTTP/2 api.forms.app/form/630e0e70c2748c14c10ef710/view
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3d248e43b091b7030efff5062c15374d
3fde1d1265fd2655d88e4f789a61a642cdf7635c
8b6da4148f1a8a0a3624cc61f5360f1118db91119d8b735de945dd578efac826
GET /form/630e0e70c2748c14c10ef710/view HTTP/1.1
Host: api.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Authorization: none
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 25 Sep 2022 22:07:25 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mrW6sEpv%2BpQTGvQDyUJq4J%2BSVdRqTBlbHrhdgd2SkwTbov771RmAb5czDdAWLD4hoNksDeCuaGDOYW7YW0XhwAN4H6X%2FDTR3qvKH1Dipvx2QD9ZqdVhYoeCxLgKfOjI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071295dd1b0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/FormBuilder~FormView~SharedReport~shareform~shareresult.a750c.css
200 OK 7.9 kB URL HTTP/2 my.forms.app/static/css/FormBuilder~FormView~SharedReport~shareform~shareresult.a750c.css
IP
File type ASCII text, with no line terminators
Hash 83626218248f31776518528132b21028
41d475f44a6b3df6f84d039a6f886e545fb844b1
41b6cbb8fa48b58fb05a3c339e75d497dc8df3ee337a42c3afad1d917999a767
GET /static/css/FormBuilder~FormView~SharedReport~shareform~shareresult.a750c.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:53:22 GMT
vary: Accept-Encoding
etag: W/"632ac2f2-3e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RkZzkeqpvJFP7YF3jZr%2BFjnMAtI2RWVwWSVbWCCNMwdnQvifqYZcoiJjDAcMg%2FhJ1u%2BcOHSnb0yoPo47AKjDesG3Sl%2Fqa2LA9MHVPRevKm7McsbUHuB%2FBpOJDpqRGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ba030b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/iicon.59ea2.js
200 OK 4.5 kB URL HTTP/2 my.forms.app/static/js/iicon.59ea2.js
IP
File type ASCII text, with very long lines (13470), with no line terminators
Hash b40289f419d1f1bebc8696bc1de9a79b
783e6bcf35271ee69b095924b7681b061e0c3a13
b52b9a3a5a5896cef6647df58876ef6b339534e69ccfc557a3bd1c259e156995
GET /static/js/iicon.59ea2.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:52:44 GMT
vary: Accept-Encoding
etag: W/"632ac2cc-349e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8hk54134ckzdoI3yRlSYVD0dI6%2BDCMwVyWXq62ssmApnFfGYkR9NbrRj3EzYzSBDCX%2Fd%2Fk4TYtyAPzWcyX84l0T0ii99Hij1dpV53FdfbQ4JGZPVa%2FWHDCf%2FRSs7TQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f150b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/FormView.2d11d.js
200 OK 13 kB URL HTTP/2 my.forms.app/static/js/FormView.2d11d.js
IP
File type ASCII text, with very long lines (42482), with no line terminators
Hash ae836c1a799d42594041d475c551e6ee
84201de501947f401aa736cb11b597af9819bfd9
bfc9715552e24898d8da7925d9779d6a83edf06594d613fb5283c81fcf2e4772
GET /static/js/FormView.2d11d.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:11 GMT
vary: Accept-Encoding
etag: W/"632ac2e7-a5f2"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TCPKGDmvjzLLXLk3%2BHu%2BHB%2BtsJROyL1r6IEE4EervqZV9mJIN39hUcMe3DMa4T4%2Fo%2BEPf5lV3uxzyYfBuR0T%2BNe3FsjRcb%2BjoeEeQaIJaWWmGdqyx5KdlUdfbqw6lw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca0f0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/FormView.e36bb.css
200 OK 33 kB URL HTTP/2 my.forms.app/static/css/FormView.e36bb.css
IP
File type ASCII text, with very long lines (9072), with no line terminators
Hash 92fc53931507fb1e1917aafffba91c88
e4255da0a17d266ceb73ce99a9552c44129e8697
4e1dc4cd255abf35c17ab9f57c37b17cc7c25d97468087b00cf02ef6fa385e48
GET /static/css/FormView.e36bb.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:53:14 GMT
vary: Accept-Encoding
etag: W/"632ac2ea-2370"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nWcs9guI3C%2FnVLWYNvmVm55u59XQGpBUtLEe28%2FWDYMyr7cSH6c%2F0A6D7DbYZ%2FEwicA%2BsPvzBZpYnXUyhElVBcM2VXPYMUpD1NyLIwrRLVcfwhHgQr3M%2BSCS%2BoQnwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca0c0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=25BEBA3212AF683D0239A818135A692B; domain=.bing.com; expires=Fri, 20-Oct-2023 22:07:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 44ED16585B3F495B871B84E8C718A6D0 Ref B: OSL30EDGE0522 Ref C: 2022-09-25T22:07:25Z
date: Sun, 25 Sep 2022 22:07:24 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc7883d0a03d9c3559288a600fecc70a
b0e538996510ec8c861264cba4bf79fa73f6f7d6
c3bdc9bb12c7c951ca2d861c95156de2c724acc82386e882864c464132e07ac3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
my.forms.app/static/img/formsapp-logo-white.svg
200 OK 18 kB URL HTTP/2 my.forms.app/static/img/formsapp-logo-white.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1026)
Hash da6efba8a0dd29664ad3b22c05d8c86c
35f96a1ea8f9cc192bc9a589cde647f21cea3a1c
3b528dd49f09ba62cfb2ed6f4642487c591a8c4b1c47a70743d7b0b7df50dcf1
GET /static/img/formsapp-logo-white.svg HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.1.672642746.1664143643; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:25 GMT
content-type: image/svg+xml
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
etag: W/"632ac2e2-20d5"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WujpqUQvwxLktviROdjCNl3WJ1dQpuPqNkt5LXjnnkyFoL6qnrW7MBs3r%2FVbGRGpFLWiNuzbIONUku2EvnS4rhJuQWo0HdGOvGKB5GorOxuhiQzhKp%2BuRRF04VQAnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712954b690b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/mainheader.13de2.css
200 OK 3.4 kB URL HTTP/2 my.forms.app/static/css/mainheader.13de2.css
IP
File type ASCII text, with very long lines (6624), with no line terminators
Hash 47bc8c8f8c9d0450d524c571d2ee3aa0
dde2df2182d9d7b72c25a47034017cfb50643951
5b7fdbbac682227c656201e51eb69509e194874374e8b339a4504e04d8d72dc2
GET /static/css/mainheader.13de2.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-19e0"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aKYk0KKt8UNVui44JV2ggxqXnwQ84cugGklK8F6kf2%2FfnULkH8hKRgogi%2BdMTRvudG7hlOLIGqf89sQj%2F5rW%2FBUZPkvsHZQyxyTJV4cXhrxd6hjMeCyuAkFAyc16%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ea1e0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/vuegtm.3359a.js
200 OK 30 kB URL HTTP/2 my.forms.app/static/js/vuegtm.3359a.js
IP
File type ASCII text, with very long lines (10032), with no line terminators
Hash bc27940ca4b08cf7542781b6610d601b
b64345b22fe5fc074f8c319157809ad3cb2ece97
92b58678caba1ae042d0ba8d9a38dd6ef11f6c91752c0af05577bc0e27689e9d
GET /static/js/vuegtm.3359a.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:16 GMT
vary: Accept-Encoding
etag: W/"632ac2ec-2730"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mPfs4cYM7VdA1BuwwRudSPqnkyzHFh9WiBAyKL%2BcHP949UM3RAD%2Fm7y0DzIIHaGxidkZ5rMkAPMuTJqqPoiK6o48E1F0hEoHU1H9xnKW7%2Fwfk9YCuqB2sncZVPIzvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293a9f50b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/FormBuilder~FormView~SharedReport~shareform~shareresult.c42fe.js
200 OK 2.1 kB URL HTTP/2 my.forms.app/static/js/FormBuilder~FormView~SharedReport~shareform~shareresult.c42fe.js
IP
File type ASCII text, with very long lines (2823), with no line terminators
Hash 588450a2ee69e60422f10dc404def081
3aa0b43e7da1a48217abb8767d5099c047d93ff6
2e1fce9a8e82d462668bd8f3a1bc123808f729c12559a49fff464ff7ea4897fe
GET /static/js/FormBuilder~FormView~SharedReport~shareform~shareresult.c42fe.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:27 GMT
vary: Accept-Encoding
etag: W/"632ac2f7-b07"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q2RQl5Bd1I%2BOxCFfLEWspTzqRKzPZ46%2BMGChHkCUKBCrCUl%2FHt5ugmLH8pUv4XUHfNeJanq5hVBoVIF5mflQ4bK94la7AN5hnmPTIgZMUj3Bd60UG3IUfgGPPUpF1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ba040b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/vuelazyload.45220.js
200 OK 12 kB URL HTTP/2 my.forms.app/static/js/vuelazyload.45220.js
IP
File type ASCII text, with very long lines (20439)
Hash 4d73170a035fcdb629c721b8f697dba7
aab88bb5c95b6533b4bea988c2d4e6822b5fcc19
a6c1ec23a0225f2da9b45487ac8642ecc9098905f288af9fc9253f2c66fb9b44
GET /static/js/vuelazyload.45220.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:01 GMT
vary: Accept-Encoding
etag: W/"632ac2dd-50a6"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tB2tnn7s9RxhuGdGcm1d0XWck3oLlPUq72xysBMOxLiOuW2gtEwWM0zKFtibq4a6eH0WnOZsR5Uh2OkgRduhJqHO3hA5AlDTDEAE%2BSyLr2weM7bGmrfOL7AIOAgzQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129399f00b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d095ec6a56142cb2084481b06881ef4
82ff236023008fbfb871aaa7c1e976e0cf15e91a
791ac45152415413d4af27f3dde61a021c9c57dcf7ca5b0e65300ebc3cd8815d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-123158574-1&cid=672642746.1664143643&jid=443520732&gjid=1613665076&_gid=1587894932.1664143644&_u=aCDAgEAjAAAAAE~&z=1493865036
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-123158574-1&cid=672642746.1664143643&jid=443520732&gjid=1613665076&_gid=1587894932.1664143644&_u=aCDAgEAjAAAAAE~&z=1493865036
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-123158574-1&cid=672642746.1664143643&jid=443520732&gjid=1613665076&_gid=1587894932.1664143644&_u=aCDAgEAjAAAAAE~&z=1493865036 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://my.forms.app
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=137024713&tm=gtm002&Ver=2&mid=c658f99b-2894-4d35-8c4b-fe2b0dc45370&sid=6eef31303d1e11ed8d308bb9efc31a8c&vid=6eef3d003d1e11edbaf09db90d4f3cba&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&kw=form,%20builder,%20formbuilder,%20free%20form%20builder&p=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&r=<=1263&pt=1664143642021,,,,,289,322,322,322,377,325,377,567,567,589,1186,1261,1263,,,&pn=0,0&evt=pageLoad&sv=1&rn=866443
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=137024713&tm=gtm002&Ver=2&mid=c658f99b-2894-4d35-8c4b-fe2b0dc45370&sid=6eef31303d1e11ed8d308bb9efc31a8c&vid=6eef3d003d1e11edbaf09db90d4f3cba&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&kw=form,%20builder,%20formbuilder,%20free%20form%20builder&p=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&r=<=1263&pt=1664143642021,,,,,289,322,322,322,377,325,377,567,567,589,1186,1261,1263,,,&pn=0,0&evt=pageLoad&sv=1&rn=866443
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=137024713&tm=gtm002&Ver=2&mid=c658f99b-2894-4d35-8c4b-fe2b0dc45370&sid=6eef31303d1e11ed8d308bb9efc31a8c&vid=6eef3d003d1e11edbaf09db90d4f3cba&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&kw=form,%20builder,%20formbuilder,%20free%20form%20builder&p=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&r=<=1263&pt=1664143642021,,,,,289,322,322,322,377,325,377,567,567,589,1186,1261,1263,,,&pn=0,0&evt=pageLoad&sv=1&rn=866443 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1A9969E571F361C833A57BCF700660EE; domain=.bing.com; expires=Fri, 20-Oct-2023 22:07:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5949394C134942A2A42D11FBC69FAF2C Ref B: OSL30EDGE0522 Ref C: 2022-09-25T22:07:25Z
date: Sun, 25 Sep 2022 22:07:25 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d095ec6a56142cb2084481b06881ef4
82ff236023008fbfb871aaa7c1e976e0cf15e91a
791ac45152415413d4af27f3dde61a021c9c57dcf7ca5b0e65300ebc3cd8815d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/794725785/?random=1664143643726&cv=9&fst=1664143643726&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9l0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&auid=1485509254.1664143643&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/794725785/?random=1664143643726&cv=9&fst=1664143643726&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9l0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&auid=1485509254.1664143643&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2404), with no line terminators
Hash 8b6134f9a9e5d6026c0d50faeafc7abd
b9b8393d709745a57bb9e36dcf4c70584d2a4dc2
295ad0bdaa31af57b8549c78e2282caa585d7294f3e050f263f1b5d6893d9dff
GET /pagead/viewthroughconversion/794725785/?random=1664143643726&cv=9&fst=1664143643726&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9l0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&auid=1485509254.1664143643&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1076
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Sep-2022 22:22:25 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/587928374/?random=1664143643720&cv=9&fst=1664143643720&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&auid=1485509254.1664143643&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/587928374/?random=1664143643720&cv=9&fst=1664143643720&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&auid=1485509254.1664143643&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2342), with no line terminators
Hash 7ee264bd3c59bbdd081f30fc4853b74b
47ae624ee1465db459683707a668cadaea3c266d
4c85d860964956288e1b677cf347520e0c39dd37a1957c24d6a8b4d7faf6acac
GET /pagead/viewthroughconversion/587928374/?random=1664143643720&cv=9&fst=1664143643720&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9l0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&auid=1485509254.1664143643&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1055
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 25-Sep-2022 22:22:25 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
my.forms.app/static/js/FormDesign~FormView~LocalForm~shareform.853a4.js
200 OK 470 B URL HTTP/2 my.forms.app/static/js/FormDesign~FormView~LocalForm~shareform.853a4.js
IP
File type ASCII text, with very long lines (2713), with no line terminators
Hash 79d5fee63d166823db422432998a3327
92c8b02de4230fce2eb4f05054dcfb4172384634
1c7caf10e5a2f352fada0f2459ba7d95fc4eefcfdb8248b52da3454f6e69d04c
GET /static/js/FormDesign~FormView~LocalForm~shareform.853a4.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:04 GMT
vary: Accept-Encoding
etag: W/"632ac2e0-a99"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RaFT0Hk6F9blQbDgxm%2BsAVuf5qLQnzKYMMoMi1jxHELtX1p9nZ9JSckg47q06uQ9TscMVwhEEZbZr%2FfxtDR3WrcRELdsaxULonMOR7Ney0pq%2FRsclS1PzwgChGWHpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca0a0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/form/630e0e70c2748c14c10ef710
200 OK 84 kB URL HTTP/2 my.forms.app/form/630e0e70c2748c14c10ef710
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40679)
Hash 3ea9cbcda9ed91f270bd1a08fb41c775
94b520153f5c606bac1622f8123d4b98c80c6212
96093564455b878a9878d99b85832e154acac99f3df8e27835e78a301da9fb91
Analyzer Verdict Alert fortinet Phishing
GET /form/630e0e70c2748c14c10ef710 HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/html
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VDWFC8B8QxxHPh6StRpw3dK1RIp%2FKB0i%2FdAgCzcYRx6aRE0ALrrPBJH5gNsuhhZyjdV2jpSp0Z9uKbO51IjeAeiOuYSwSMXbu92tVi29ZFi5LZ6EpF05ph9jB8LwGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507128eede00b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/p/action/137024713.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/137024713.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/137024713.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=1715E93D226364BF36F8FB1723966584; domain=.bing.com; expires=Fri, 20-Oct-2023 22:07:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4A3938F0618C48A5A1A69A233DFD61C5 Ref B: OSL30EDGE0522 Ref C: 2022-09-25T22:07:25Z
date: Sun, 25 Sep 2022 22:07:25 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-740JKHV4FZ>m=2oe9l0&_p=69686888&cid=672642746.1664143643&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664143643&sct=1&seg=0&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&dt=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&en=page_view&_fv=1&_nsi=1&_ss=2
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-740JKHV4FZ>m=2oe9l0&_p=69686888&cid=672642746.1664143643&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664143643&sct=1&seg=0&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&dt=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&en=page_view&_fv=1&_nsi=1&_ss=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-740JKHV4FZ>m=2oe9l0&_p=69686888&cid=672642746.1664143643&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664143643&sct=1&seg=0&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&dt=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&en=page_view&_fv=1&_nsi=1&_ss=2 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://my.forms.app
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-123158574-1&cid=672642746.1664143643&jid=443520732&_u=aCDAgEAjAAAAAE~&z=774560307
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-123158574-1&cid=672642746.1664143643&jid=443520732&_u=aCDAgEAjAAAAAE~&z=774560307
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-123158574-1&cid=672642746.1664143643&jid=443520732&_u=aCDAgEAjAAAAAE~&z=774560307 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/587928374/?random=1664143643720&cv=9&fst=1664143200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9l0&sendb=1&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&async=1&fmt=3&is_vtc=1&random=2058782631&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/587928374/?random=1664143643720&cv=9&fst=1664143200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9l0&sendb=1&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&async=1&fmt=3&is_vtc=1&random=2058782631&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/587928374/?random=1664143643720&cv=9&fst=1664143200000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9l0&sendb=1&frm=0&url=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&tiba=forms.app%3A%20Online%20Form%20Builder%20%7C%20Free%20Online%20Survey%20Tool&async=1&fmt=3&is_vtc=1&random=2058782631&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 25 Sep 2022 22:07:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
my.forms.app/static/css/Account-PaymentHistory~mainheader~upgradepopup.61ec5.css
200 OK 112 B URL HTTP/2 my.forms.app/static/css/Account-PaymentHistory~mainheader~upgradepopup.61ec5.css
IP
File type ASCII text, with no line terminators
Hash b92f15982d966b9ed19aac3ab13fe07c
8c58a40d45dc1c491dd0f9a61d560628cef44418
74637515794256606b56ce8d07395929058205d9388af2ebc9fbbbd41c9e1278
GET /static/css/Account-PaymentHistory~mainheader~upgradepopup.61ec5.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:53:22 GMT
vary: Accept-Encoding
etag: W/"632ac2f2-4b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FI%2BLLM1Vi3BiU7COG4y%2B%2BDQjD8CBpzPgcSoekdaJv%2F5Wm%2BBVvaTOdrhj9uVjdnJMepOnMhQhdI37V6rZyPv5MgZNJhP3MZfPCsMSz0t5pE%2F2dLMvDlwPGVgKjpUMNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ea1a0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13483
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 22:07:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13483
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 22:07:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13483
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 22:07:26 GMT
Connection: keep-alive
my.forms.app/static/js/carousel.e5ce5.js
200 OK 18 kB URL HTTP/2 my.forms.app/static/js/carousel.e5ce5.js
IP
File type ASCII text, with very long lines (19044), with no line terminators
Hash e751f15dfcbc226547388e8f2871566e
b49c11e3ab0b21c8682a2c584330835f43d50802
402ac21f8de0e706fd0e391b22aebe61b6cbed24c681a4254580737ab747c9b8
GET /static/js/carousel.e5ce5.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.1.672642746.1664143643; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:25 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:52:55 GMT
vary: Accept-Encoding
etag: W/"632ac2d7-4a64"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PJi%2FHQ%2FdcMgMkDGXO6kiqJHMGo05BBBPgrfFCnpxnF50Cl68ID3blHbFYaIy%2FXMaXcuqqW7P8hxby6BMMzmqQ%2B8rylHZkYA7HwHBLsnaHKBM33EybOq8Id%2FUTC%2B5cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712953b670b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bfaf0f-e716-4cf7-9785-ffcd146aed68.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bfaf0f-e716-4cf7-9785-ffcd146aed68.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75a459d4f554d38a1701e727185c7e91
042d4b6927f80c5a44bb7baf77b763577c19ed36
c01b0d3a28ed31ec9432d879310cffa313260f97044f1ed473aa0331bdba5607
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bfaf0f-e716-4cf7-9785-ffcd146aed68.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7648
x-amzn-requestid: 359116cc-4e08-4c57-8aba-0aa7bd232c98
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSKWG2BIAMFlHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca42-2130239f2dab781c0f49f0e4;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: caqLwNG92a0CRHwZLzFYIndWri6UOUyN9Bm8pqEytrumcpAMAo0WmQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:47:32 GMT
age: 1194
etag: "042d4b6927f80c5a44bb7baf77b763577c19ed36"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65e3b72afc2f13978ee80cc87dc289f1
78a82653eb0e5aa4f1355c13b665da44a3412024
9f3a89f268fca25f5a6c7319b1f8412a193cd73bc9c8f4c5a9d294582df3a57b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbad0bb4-9ab3-47a9-80fd-6567993349dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9352
x-amzn-requestid: efae9f72-8dce-4899-9dc8-c6cc9b4b2540
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvwFwWoAMFmig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-744ade88393a83467fea2b97;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NOu92heW0-RynLU34xGoSq36WGjOu75Ukkd8IA3IoQ2FMHFUMlkJrA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 1050
etag: "78a82653eb0e5aa4f1355c13b665da44a3412024"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8703b7f0-bb10-4a43-a50f-a8a5c8857499.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8703b7f0-bb10-4a43-a50f-a8a5c8857499.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38f828e3aa86057cc3b686ca9d4accc5
c529507a70247c7e03c849c3ff45f93eada6f0c4
76016d51352ff6a8372b92206119d88747600874ecee5315573ca4e539e03c6f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8703b7f0-bb10-4a43-a50f-a8a5c8857499.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10045
x-amzn-requestid: a01e6cef-fe8f-498c-aa68-2603a66b1121
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvwHPwoAMF7pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-1a4405e54c54eccb4f0846a2;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dBJjUHYsSR4YA1SMcbZJ_iNdvPOhtXlltVN3f36IduFe2h2zsMT_Yw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 1050
etag: "c529507a70247c7e03c849c3ff45f93eada6f0c4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d79a3a5bd7dc7aa6cab306176fafd11
0d5cb1f3e3ea510308034a5e569c0e65fae30835
57979dfcf6fdc76f04e4790c2b94b876e188ac780aa49d9bfc8a58c498dc4203
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7185
x-amzn-requestid: e7b997d7-f9ce-40c6-b9bb-372ee10d8ad0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTAfEX5oAMFcHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb9c-31e295e33ead940f381121a1;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:43:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p7rimTrmOgUnwPuESSKSrsWlzhiSBJYx9h8XIacxP8DUyyvXye2iyg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 1050
etag: "0d5cb1f3e3ea510308034a5e569c0e65fae30835"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ef17205adb2b478d3bff54b048208d22
12aac1bd22e675f09a220de08b4656e801c2e647
620fe39cf421ed3a21e968570f7e863d69224113be867ec2457ed3850ea113f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5980
x-amzn-requestid: fbf0c390-da24-49e2-8492-43e29e5d4bb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHCGJVoAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc6-1f9b1b7d63467c58702e6d7e;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:38 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pt7rJi8EIQFBk0gHQZ1WnjvThPba86XZCGFs83l1ZW2dj-_6bZprAA==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 1050
etag: "12aac1bd22e675f09a220de08b4656e801c2e647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=175163836725648&ev=PageView&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&rl=&if=false&ts=1664143644798&sw=1280&sh=1024&v=2.9.84&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1664143644797.521496295&it=1664143643737&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=175163836725648&ev=PageView&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&rl=&if=false&ts=1664143644798&sw=1280&sh=1024&v=2.9.84&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1664143644797.521496295&it=1664143643737&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=175163836725648&ev=PageView&dl=https%3A%2F%2Fmy.forms.app%2Fform%2F630e0e70c2748c14c10ef710&rl=&if=false&ts=1664143644798&sw=1280&sh=1024&v=2.9.84&r=stable&a=tmgoogletagmanager&ec=0&o=30&fbp=fb.1.1664143644797.521496295&it=1664143643737&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Sun, 25 Sep 2022 22:07:26 GMT
X-Firefox-Spdy: h2
js-agent.newrelic.com/nr-spa-1216.min.js
200 OK 18 kB URL HTTP/2 js-agent.newrelic.com/nr-spa-1216.min.js
IP
File type ASCII text, with very long lines (32010)
Hash 6561a2403142205f966207d61576f1a6
1310e72f494e12ab63a4280fc1600a2c89dc9bb8
0e496fcab0b9120938373e271fa6631b7da17adf33f8a490637467c170a3e37a
GET /nr-spa-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TAwVDFAylU9PwNPPW/eXC4UyIMC8EQ1d6JNW9Q+uXGnPmL1fuimq9M3lAe733gCMeKNDiCQX1YM=
x-amz-request-id: SYTECJR5CMD8NJ8E
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "63e2df852d15ab21d7ff8fc4363222e8"
x-amz-version-id: UU.F5jvoumAjQChriwTQHbisCFw_OInU
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Sep 2022 22:07:26 GMT
via: 1.1 varnish
x-served-by: cache-bma1647-BMA
x-cache: HIT
x-cache-hits: 677
x-timer: S1664143647.527178,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 18216
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 59c84ea1e13af944fd53e6acfdc55b02
fd03214680da68b2a88048c712674b0e0d2a5a41
3c6c62e401d16ed69f8de86f5610d4e58c0ebd10d1439c884cc1a5edd6d599a5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6541
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:26 GMT
Last-Modified: Sun, 25 Sep 2022 20:18:25 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
my.forms.app/static/js/iavatar.4fa87.js
200 OK 47 kB URL HTTP/2 my.forms.app/static/js/iavatar.4fa87.js
IP
File type ASCII text, with very long lines (2672), with no line terminators
Hash 05b49a2c13294a6b10a4791286fa7f92
0474559a97fb7a1c81beb04fb8e2c1e76bd7d846
654097d7045b5b102873ec921988c8d8dfbbc07f02a3f94ac522fe306052a26d
GET /static/js/iavatar.4fa87.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:26 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:07 GMT
vary: Accept-Encoding
etag: W/"632ac2e3-a70"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3357
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XoTCilRWzaC2PKUjGJtsDUhYv%2FkHjkbv7IECET2%2BDqlRiqijqOMdkEYNUwvSsilRw%2F3PSBoms%2BLZWqAI4wST0s%2FmFG0N3w72GZf72dJ9uu%2FsR4QX1JPEmUiyVpZOtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7acd0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/inputcomponents.f3c17.css
200 OK 3.7 kB URL HTTP/2 my.forms.app/static/css/inputcomponents.f3c17.css
IP
File type Unicode text, UTF-8 text, with very long lines (17674), with no line terminators
Hash 23fa5dcbca32c104b1096f06427c8dad
4b0eb8e35a731ed7beb870986564d6504ece813c
8a197031bd9afe153d73bd9e5fa79b09f3a90062c7fcdcfba66266707c662455
GET /static/css/inputcomponents.f3c17.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:26 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
etag: W/"632ac2e2-450c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Msfh3bqaFiaRa7XDPoNTLKm%2FAaNwhQ58AkHWdqyLbTOQ2K3fQ%2BQmwKw%2BtlIfJgfHf0D3FFlYeeIq4O3ksaS9QAnHqHMbqBeuFAr7KpZb9oZ%2BggrtlOnWT%2BVNDOm9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac10b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/imaskedtext.8cad2.css
200 OK 955 B URL HTTP/2 my.forms.app/static/css/imaskedtext.8cad2.css
IP
File type ASCII text, with very long lines (1307), with no line terminators
Hash 6b082bea907399fc656abb25191cd26c
d3006038531cdbf66e5cdb9ce2c98469c272ec28
dba6312c73321c4fe5c3bb3b19206feff0ec9a7c5b3c7b3d6bc262b9c4aaab80
GET /static/css/imaskedtext.8cad2.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:26 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:52:38 GMT
vary: Accept-Encoding
etag: W/"632ac2c6-51b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3358
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V9ynH6kwxtLaFW%2B6LZG3pkZA5IKxeYTDUk4cPggnaqimof3pJUNyvH8gYkkxU6V7Oxl4LvSDzAGcSIiwEdz5WlOMAe5zdjWKlVVTk%2FBIvs733WbHDYukN6dPjQeK9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac00b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/questionvalidation.71e97.js
200 OK 754 B URL HTTP/2 my.forms.app/static/js/questionvalidation.71e97.js
IP
File type ASCII text, with very long lines (1384), with no line terminators
Hash bf995416bffc5e2384024185f369bc7b
867bad4e363ae265a0b55517e0c05ac1657502b6
745d5b49d4e9f1d540eee9827f8ffe6d45c6ff9713e7ba8f5137ef8a0ca1d933
GET /static/js/questionvalidation.71e97.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:26 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:52:47 GMT
vary: Accept-Encoding
etag: W/"632ac2cf-568"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yRr5cw0j29a76ODZF1Y58FtlrghxpnkxVjzUPaOry5a2OVobZTSx0QO7vPuK%2Bi4zS7cx4E4b7FaS31Vfi9t%2BNXk9sJDjAxqCG%2F5XDCwDyKO0CjBdnmLTlNFvVGcU2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129ebb0b0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/runtime~app.4691c.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/runtime~app.4691c.js
IP
GET /static/js/runtime~app.4691c.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:00 GMT
vary: Accept-Encoding
etag: W/"632ac2dc-5fda"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=McJvGWFQTpDajj2PCmZ9oWHWvcrtstZifJGSbcPPXzDJVj62T3bcbfkNQwkaOGFM7phjtWTE99%2FE3fS9yICVu%2BuH7XjF80gVggr5Ti2Z6DwXv%2F6JQZHpk2NEsNXsJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071290af170b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/vendor.523c4.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/vendor.523c4.js
IP
GET /static/js/vendor.523c4.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:17 GMT
vary: Accept-Encoding
etag: W/"632ac2ed-5e95c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2FnjT9ChnTaNVwsoRfTPyVW8YMymgucke5vBvbuumBND%2BLJHtuE7b5b2Gyn8FsjKJVYJl3xq40%2FvQI2w4COOtidZ9gmXQGyuFNgmWon6b6N9vyYmwyirkCrpVSeV3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071290af160b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/inputcomponents.ed0b3.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/inputcomponents.ed0b3.js
IP
GET /static/js/inputcomponents.ed0b3.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:26 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:23 GMT
vary: Accept-Encoding
etag: W/"632ac2f3-1ad96"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=swizTsWwGB3Vj%2BwIzW0JgrPLGI7Ik2g%2FbxlV6Ci8jPOtZj16FNiLNYO8m39NqaL4Zbagk6WIF7cSj%2FT7n9sSAxtqdxu%2FZO40KMg5qt0iBZgM15zrCaotrv3sp3VlWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac30b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/FormBuilder~FormDesign~FormView~LocalForm.a2bed.css
200 OK 0 B URL HTTP/2 my.forms.app/static/css/FormBuilder~FormDesign~FormView~LocalForm.a2bed.css
IP
GET /static/css/FormBuilder~FormDesign~FormView~LocalForm.a2bed.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:52:51 GMT
vary: Accept-Encoding
etag: W/"632ac2d3-4303"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BJVZgjApuhms0roIldmW9QLf1R%2BCJ25eFx1220IxsbRCUFVT1sKaE6K%2FIWV09hOcdFqNnX8nvQTrTeGbRdXFdEhfr21gEMsGuU6tO%2FHFoBmwhTcnXm2bnO3HkAIXGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca060b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/FormBuilder~FormDesign~FormView~LocalForm.d4928.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/FormBuilder~FormDesign~FormView~LocalForm.d4928.js
IP
GET /static/js/FormBuilder~FormDesign~FormView~LocalForm.d4928.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:52:48 GMT
vary: Accept-Encoding
etag: W/"632ac2d0-d5c9"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zFhsxKqXmH4Mddd4dUmvb3Mp52lrL1K%2FgEcm%2B17CHelH69XL5rxrXYo44jtMdbKQQ34DvRy5k4XAdoiBLe6cSHVf97fUJfRZJno%2FvPjX1bHJLdwySvDYG3%2F7qv9bvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca090b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/FormBuilder~FormDesign~FormTemplate~FormView~LocalForm.4854d.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/FormBuilder~FormDesign~FormTemplate~FormView~LocalForm.4854d.js
IP
GET /static/js/FormBuilder~FormDesign~FormTemplate~FormView~LocalForm.4854d.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:01 GMT
vary: Accept-Encoding
etag: W/"632ac2dd-114"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hGNkaVl1C7xQzQDfGGlRHKLX6DdTjCo9SeNYUdxdujE98YpybHJMI6KvQg8F6FlUw7JPtSL8A%2B5AA5U5EgAL1i2dzC%2FCkpWXbmeWRochpOxP3fAkC9Q4UpfUpt4NDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca050b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/imaskedtext.71ae2.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/imaskedtext.71ae2.js
IP
GET /static/js/imaskedtext.71ae2.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:26 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:02 GMT
vary: Accept-Encoding
etag: W/"632ac2de-3f13"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3358
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bf1x930iFCPAK%2BWqkJ4nkHw0vCHCribIeUX584JXvDAgnrUdmyuIYHFronzdwwKyUWRvMG7jHfVc8XHoQf9tTZK4TE0EkaER6LiEPvFEZzUmpVngw6I4hUlAFOl5PQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac20b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/Account-PaymentHistory~mainheader~upgradepopup.dbf5d.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/Account-PaymentHistory~mainheader~upgradepopup.dbf5d.js
IP
GET /static/js/Account-PaymentHistory~mainheader~upgradepopup.dbf5d.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:07 GMT
vary: Accept-Encoding
etag: W/"632ac2e3-512"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gASDPDrBgYmdi3eADwTqHCjYtKQkMg08nIgAMtYWxpakV8gtkwQ7mWjK0Zlt2UHLf2Q0r4jCUA%2FO35Z7sqqLL6aZIB3j%2B2rrzqghevdBAbcjFQv2J5o5pP0Wl0t4yw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ea1c0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/swal.4f135.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/swal.4f135.js
IP
GET /static/js/swal.4f135.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-12468"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zu2QjnQxbRIM8Ls6WEl7vBPFwaH6GFaZE%2F81OZc3m9lODkqR8r%2B7EzqacCCKKKCJCsmUHqRs%2Bv5BwwXvqSXWG%2BzMLNCn2ZHTYAI6qmUmRtwLuYd4auOO9uM04QtGjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293a9f30b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 0 B IP
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6233
Cache-Control: max-age=88265
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:07:25 GMT
Etag: "632f6e8e-1d7"
Expires: Mon, 26 Sep 2022 22:38:30 GMT
Last-Modified: Sat, 24 Sep 2022 20:54:38 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
my.forms.app/static/js/country-en.83d29.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/country-en.83d29.js
IP
GET /static/js/country-en.83d29.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:03 GMT
vary: Accept-Encoding
etag: W/"632ac2df-102a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h1lhqhbKP2Opo7BxxsRGA60poBjWn8fjMJd6h17zN1OKWi%2B7y93anbUtcIUfxPzcrgDhKC4M6rCHCLluDIK%2BWPCbJcfD8td1KwJ987Dv2O0%2BHVjK1yXCfMWkzjehEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129359b40b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/vendor.88295.css
200 OK 0 B URL HTTP/2 my.forms.app/static/css/vendor.88295.css
IP
GET /static/css/vendor.88295.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
etag: W/"632ac2e2-b52"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Z9aCCztTujyrDFxUcKfsgkKt1RgGDzMqkPJiYuoycvjBAGd7d8ZTDB8CiFWo5STynKAhy3OC3jbWk6eTL3EeHFP32dSGkOM4kBiCdCi9aBtWvJeWKVglHxaQuAH1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f030b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/swal.2ebcf.css
200 OK 0 B URL HTTP/2 my.forms.app/static/css/swal.2ebcf.css
IP
GET /static/css/swal.2ebcf.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:53:22 GMT
vary: Accept-Encoding
etag: W/"632ac2f2-5f0e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TGRSnBwPZAsOSiS0pc9xKGz3WNAYbuF%2F46kZ31mmi1HG9KjvXle1%2BxCh0BSPjJegR1sm7Bt%2B7aieBjtsR6XXkGmq80naGT45bqqvzYVa5BEdT5A1icAP704FFS%2FH1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293a9f10b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/vendors~Discover~DiscoverForm~DiscoverUser~FormBuilder~FormResult~iavatar.cbe56.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/vendors~Discover~DiscoverForm~DiscoverUser~FormBuilder~FormResult~iavatar.cbe56.js
IP
GET /static/js/vendors~Discover~DiscoverForm~DiscoverUser~FormBuilder~FormResult~iavatar.cbe56.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:26 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-257"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3357
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5xbSIbsKVhUa7mY2YFWTTU5G8t1TOPbUYm5CBrihln4ox1Ir2Iz5AeJs5lFHd1kGQt6NjQRaQKBe7yPHgCaRr3Iwc88yPedIkMuaBXaI6j1CvkY9Q4YafvzQWWDF8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129e7ac40b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/asyncstyles.4869d.css
200 OK 0 B URL HTTP/2 my.forms.app/static/css/asyncstyles.4869d.css
IP
GET /static/css/asyncstyles.4869d.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:53:07 GMT
vary: Accept-Encoding
etag: W/"632ac2e3-2555"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yHRgSkA4JEFng1N62D1SspCj1ut0gssc5MS7T1Qj%2F2%2B7OOT9pNLGXamy8Guq9I179bbc6Hk7zq1qJORcRi1IX3%2F8ImPFRmJuuvhSMsEzeVZfFQy8x2CVJwhD4DFDFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f0b0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/cdn-cgi/rum?
200 OK 0 B URL HTTP/2 my.forms.app/cdn-cgi/rum?
IP
POST /cdn-cgi/rum? HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4ODU3MzIiLCJhcCI6IjQ5OTU3NTY1NSIsImlkIjoiOGZmY2Q5NGYzODNlODczMyIsInRyIjoiNDY3MzBmZWE0ZWM5NDkyZjZmMzdmZDI4MmFjYWVlOGYiLCJ0aSI6MTY2NDE0MzY0NDg4MH19
traceparent: 00-46730fea4ec9492f6f37fd282acaee8f-8ffcd94f383e8733-01
tracestate: 2885732@nr=0-1-2885732-499575655-8ffcd94f383e8733----1664143644880
content-type: application/json
Content-Length: 23028
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:26 GMT
content-type: text/plain
access-control-allow-origin: https://my.forms.app
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7507129e7ac50b65-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
my.forms.app/cdn-cgi/rum?
200 OK 0 B URL HTTP/2 my.forms.app/cdn-cgi/rum?
IP
POST /cdn-cgi/rum? HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 497
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143651.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:32 GMT
content-type: text/plain
access-control-allow-origin: https://my.forms.app
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 750712c64b710b65-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
my.forms.app/static/css/iicon.8278c.css
200 OK 0 B URL HTTP/2 my.forms.app/static/css/iicon.8278c.css
IP
GET /static/css/iicon.8278c.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:53:06 GMT
vary: Accept-Encoding
etag: W/"632ac2e2-23e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2BdupLdkd6Z24vOkzICTvcQ01j0X6J4ZsMwSOQ2ws5zLxPsytS0uLrbpQKIGvittYvlUsN2acY1b38BilhBztIljalKni9KPxavaYz56tCdidc3Vnn2c%2BN%2B2%2FBU2Lg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f100b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
api.forms.app/user/gettimezonefromutc
200 OK 0 B URL HTTP/2 api.forms.app/user/gettimezonefromutc
IP
POST /user/gettimezonefromutc HTTP/1.1
Host: api.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Authorization: none
Content-Length: 21
Origin: https://my.forms.app
Connection: keep-alive
Referer: https://my.forms.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:25 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-custom-header: web1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HQvPfwLFYsE%2F9r%2FjBNlG0zFvDeJ7%2F7gGJzMCfqkLwFHU7xVoybmgFm%2B%2Bos5dHMkfsvx4WGrJ1f3%2B7rPb0AjVKlZ1Ay70aIczwEhRydu71VwbbS7SGgUXsPH9izHW2Po%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712950c880b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/ialert.c193d.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/ialert.c193d.js
IP
GET /static/js/ialert.c193d.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.2.672642746.1664143643; language=en; _gid=GA1.2.1587894932.1664143644; _dc_gtm_UA-123158574-1=1; _uetsid=6eef31303d1e11ed8d308bb9efc31a8c; _uetvid=6eef3d003d1e11edbaf09db90d4f3cba; _fbp=fb.1.1664143644797.521496295
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:26 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:03 GMT
vary: Accept-Encoding
etag: W/"632ac2df-4cf"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3357
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lgyUZNGOXLept%2B1u5jsYTc2K81dmoHSjnD4A7m1OmazJlaYpAhy3f3rvXtQOb36F06n%2FxQV8AH3ggs%2BV11Pn95x%2BinP778IgM2Ro9JyvDbVN00kxGkmrs9upkanecg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129ebb050b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/FormBuilder~FormDesign~FormView.ac83c.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/FormBuilder~FormDesign~FormView.ac83c.js
IP
GET /static/js/FormBuilder~FormDesign~FormView.ac83c.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:52:59 GMT
vary: Accept-Encoding
etag: W/"632ac2db-213a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SL6JsIDLC8h7%2B4f2ULSq3ixbLdztwTfJvg018pZ2R5ShuVd0wqxtGCmK%2Bel9y%2Fi6MoeYrkyhtiyrDQE%2BjbYHQS3ZlXiU2FpgEMbBpVgSZ58WzO0fKzsbW%2FyUDK5wHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 75071293ca0b0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/lang-en.bdd06.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/lang-en.bdd06.js
IP
GET /static/js/lang-en.bdd06.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:16 GMT
vary: Accept-Encoding
etag: W/"632ac2ec-fbce"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zmJzwgAnQhr4nc7x8jWsxFdPsdikY3Sbwb%2BPREolGzF5HoK9IQ%2BI5MLE9XL6UGN76ebjJCRgNj7sdiWL71DaC%2B2HKIYmw%2FxOpwALcJ3otFLwu0hFH8fa9%2BFv6rhJbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129359b60b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/js/vendors~FormView~LocalForm~webfontloader.3a8b0.js
200 OK 0 B URL HTTP/2 my.forms.app/static/js/vendors~FormView~LocalForm~webfontloader.3a8b0.js
IP
GET /static/js/vendors~FormView~LocalForm~webfontloader.3a8b0.js HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:53:25 GMT
vary: Accept-Encoding
etag: W/"632ac2f5-2f93"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=US5S38kY3qNpDoCk4XJ0oG15LxNeAZaGKZkDsK0jSSYUSL%2BaD00jVErki%2BvKJHT3ZwxepTj0Wm7v%2Fa2uiUfvauNuqko22UsC8HWxJImhFB0K%2BUo%2BgJcpcNzL166x1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 7507129399ef0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/img/formsapp-logo.svg
200 OK 0 B URL HTTP/2 my.forms.app/static/img/formsapp-logo.svg
IP
GET /static/img/formsapp-logo.svg HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Cookie: _gcl_au=1.1.1485509254.1664143643; _ga_740JKHV4FZ=GS1.1.1664143643.1.0.1664143643.0.0.0; _ga=GA1.1.672642746.1664143643; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:25 GMT
content-type: image/svg+xml
last-modified: Wed, 21 Sep 2022 07:52:38 GMT
vary: Accept-Encoding
etag: W/"632ac2c6-20f0"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Aqj9i8B9kwy%2FnmFvRSLGM8Liy0pz4CaMpuTgXkOa6%2FrE%2BLy0Y0wnD%2FcJFOv3cWF2HONJZXIn3PvaJB4S9UbntXOp%2Fz%2B5REVduXLKPDRbIoI0%2FzAre%2F4WHjtIsga2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712953b680b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.forms.app/static/css/dcomponents.77be9.css
200 OK 0 B URL HTTP/2 my.forms.app/static/css/dcomponents.77be9.css
IP
GET /static/css/dcomponents.77be9.css HTTP/1.1
Host: my.forms.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://my.forms.app/form/630e0e70c2748c14c10ef710
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 22:07:24 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 07:53:14 GMT
vary: Accept-Encoding
etag: W/"632ac2ea-1ac3"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 4388
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JeSkTM9VKHCf132h9flYS5S97jP5tEz5Xm6Cag9q47O7heP%2FEhlXu%2Fsbw3qUg7dNp%2FfQuwGZmjyuWjVXvrUDdl8mfPuGpRGQKwr6kIiwteXGiK%2BvJxdpQpl4wKte6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 750712909f0d0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
104.26.6.145
93.184.220.29
157.240.200.35
151.101.86.137
23.36.76.226
0.0.0.0