direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
199.36.158.100301 Moved Permanently 0 B URL HTTP/1.1 direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
IP 199.36.158.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1 HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Accept-Ranges: bytes
Date: Fri, 02 Dec 2022 00:23:24 GMT
X-Served-By: cache-bma1636-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1669940604.460189,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16847
Expires: Fri, 02 Dec 2022 05:04:11 GMT
Date: Fri, 02 Dec 2022 00:23:24 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 144
Cache-Control: max-age=123012
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:24 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:33:36 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 00:18:10 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 314
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14731
Expires: Fri, 02 Dec 2022 04:28:55 GMT
Date: Fri, 02 Dec 2022 00:23:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: z2nILS+CN9MDvboG1PkV2foQQPObBLfI992m3b+BgvxwV3FzxG0dOpn3WhlADFri3SKvi4+wsFg=
x-amz-request-id: 902WNQKJWRKM77B2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 23:45:51 GMT
age: 2253
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
199.36.158.100200 OK 12 kB URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
IP 199.36.158.100:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (425)
Hash 7cb8d73e19d7446fd17f544b5f9b0947
0862b1572838126d418e90d566b20b8b1937aadd
a417d25c6f9941b543f633db2f88d566fedbdb1fec81004d7dc4d3e799a3b766
Analyzer Verdict Alert quad9 Sinkholed
GET /login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1 HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "27e7c5e87bb488c134e0854afb387cd728a0d7b7d2c7ccd1fb53a7e77e3e6e9d-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669940605.754585,VS0,VE64
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 12160
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 00:23:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4int/xv7Q07ZM-NY
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/xv7Q07ZM-NY
IP 142.250.74.131:0
Hash 24baf0f90a2d38da67f729438a429ea3
f96d64781680e388ad1fb40648cf7b501b0437c9
c23109a8729b793fe14db59f9ecb3461cbd550e1e57482653ceef6f1112030be
POST /s/gts1d4int/xv7Q07ZM-NY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:24 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
direct-credit-suisse-e1f47.firebaseapp.com/assets/sass-bootstrap.css
199.36.158.100200 OK 18 kB URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/sass-bootstrap.css
IP 199.36.158.100:0
File type ASCII text, with very long lines (65321), with CRLF line terminators
Hash 9aebfe85edaf025c57a0e81653ebef0e
1911d02f774e3554fac94696c6cbf06917e5e0d4
7524f8fd2f7996a458ae047d0dfde83eed0457e8e2bc590ee60edd9c214974aa
Analyzer Verdict Alert openphish Credit Suisse
quad9 Sinkholed
GET /assets/sass-bootstrap.css HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "05a0255cd7994e460fa261cf6fadc5361ef261f73f0b58297860a011bf2d445b-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.916118,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17734
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/assets/style.css
199.36.158.100200 OK 638 B URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/style.css
IP 199.36.158.100:0
File type ASCII text, with CRLF line terminators
Hash 403524eee0be9accc32e0a2d3cd53ea8
fa027f7a8f773ab9a0d3ab0c96e93cf975dd5669
abdcbe613805652f78193f1749cab458d42620fc52120d61b990b6e6bf185d67
Analyzer Verdict Alert openphish Credit Suisse
quad9 Sinkholed
GET /assets/style.css HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "8bf8c4656451392a1712461418fcb2a0d970770a561968a113f2be9124270af4-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.917111,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 638
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/assets/cs.min.css
199.36.158.100200 OK 61 kB URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/cs.min.css
IP 199.36.158.100:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a515f39c0e163b72c93f1926355d936b
b2274fd66fd63b8236af36f329b6b3501609924c
bc02a66a2c81bfc2ca011f79397b9b28516f772b45a18c30bf813a8b291e7fa6
Analyzer Verdict Alert openphish Credit Suisse
quad9 Sinkholed
GET /assets/cs.min.css HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "08e59801267e5eb2ee1fe404828e4aeba4a41e5ee2efdbf3650980f966417ca2-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.920087,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 61104
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/assets/cs-navigation.css
199.36.158.100200 OK 10 kB URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/cs-navigation.css
IP 199.36.158.100:0
File type ISO-8859 text, with CRLF line terminators
Hash b64ee2d7b836b0808a4ea4192fa70ed0
3b5e55b31274df1d664a67669c8ebc7da8120290
84f4e7685203a390346f28d89d70b746f0ff497a919959577c119f6678bef7cd
Analyzer Verdict Alert openphish Credit Suisse
quad9 Sinkholed
GET /assets/cs-navigation.css HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "80b36a10d3965b9dba876c1e33ff03036b46a8a3a030f92a119ab33dca294b07-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.922894,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10284
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/assets/popper.js.download
199.36.158.100200 OK 6.7 kB URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/popper.js.download
IP 199.36.158.100:0
File type ASCII text, with very long lines (21060), with CRLF line terminators
Hash a622d25629614d9bc5f170d71a50f9ee
67c0eddefd24118c014d1b22b172f4b868d1f4b2
f7b5b10e01f8cfe964b795de8821cd02a6a5c3d39498768c14691bb5fb091ea0
Analyzer Verdict Alert openphish Credit Suisse
fortinet Phishing
quad9 Sinkholed
GET /assets/popper.js.download HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
etag: "8bfdfa399426f8558f42c84b1d6734ecb86ea0068bef6279a4f1184d9c1d9726-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-type: text/html; charset=UTF-8
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.924195,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6672
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/assets/bootstrap.min.js.download
199.36.158.100200 OK 13 kB URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/bootstrap.min.js.download
IP 199.36.158.100:0
File type ASCII text, with very long lines (62961), with CRLF line terminators
Hash 77437957d9186f66eedfade04bb1f713
b352356290f4d2c316007f5679117ffda611dbdc
a6ad67f47af2af3c7d65774bc973ead8e3f84fd95376b869a77786baeeb9df62
Analyzer Verdict Alert openphish Credit Suisse
fortinet Phishing
quad9 Sinkholed
GET /assets/bootstrap.min.js.download HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
etag: "5493809303793562b0f44b40f768c7c7d8f04d259c6768dba5f9339308986be3-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-type: text/html; charset=UTF-8
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.924968,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13082
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/assets/intlTelInput.min.js.download
199.36.158.100200 OK 7.8 kB URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/intlTelInput.min.js.download
IP 199.36.158.100:0
File type Unicode text, UTF-8 text, with very long lines (30214), with no line terminators
Hash d1b043ca112205d1fede988aea68c705
4dda6651e121291dcc9ab3162fc52d78b3ece20e
e94dfac9c8bcfd86bd7ab0a67dce585434873722176b2cb94c706966d895279d
Analyzer Verdict Alert openphish Credit Suisse
fortinet Phishing
quad9 Sinkholed
GET /assets/intlTelInput.min.js.download HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
etag: "b86264184463db9c0813e629341994955bbb5018c1337d28d5fbd3293c8ad40f-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-type: text/html; charset=UTF-8
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.926302,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7843
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/assets/jquery-3.6.0.min.js.download
199.36.158.100200 OK 28 kB URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/jquery-3.6.0.min.js.download
IP 199.36.158.100:0
File type ASCII text, with very long lines (65447)
Hash b86fbea2c4fa5166af6aa34b8f66a218
5ca5379ce2fc6a7689cb9226281a5be5dc958bef
2d38da8650ee5984f038b4b58bde7939966ba2261add738c94a43d51439f7bee
Analyzer Verdict Alert openphish Credit Suisse
fortinet Phishing
quad9 Sinkholed
GET /assets/jquery-3.6.0.min.js.download HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
etag: "b9de43b31438098506334d2f0dc4f1895cc27813b4ae8203398bf9be025004f4-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-type: text/html; charset=UTF-8
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.923592,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27968
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/assets/cs-font-browser.css
199.36.158.100200 OK 402 B URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/cs-font-browser.css
IP 199.36.158.100:0
File type ASCII text, with very long lines (332), with CRLF line terminators
Hash f141b97ee507d1f5a41acf35955edf2f
11393e9fa2f844ba581fff878bdea2b8ccd436e8
8e54758ef8bacdf81cfe4ad89d2048b140ae08f200dfdd9a0477ad43b55b5549
Analyzer Verdict Alert openphish Credit Suisse
quad9 Sinkholed
GET /assets/cs-font-browser.css HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "a254501af34858d2abec3c222df3678562880a858c59415f539c4e1ab22e10f2-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.927573,VS0,VE2
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 402
X-Firefox-Spdy: h2
direct-credit-suisse-e1f47.firebaseapp.com/assets/framework_pce.js.download
199.36.158.100200 OK 2.6 kB URL HTTP/2 direct-credit-suisse-e1f47.firebaseapp.com/assets/framework_pce.js.download
IP 199.36.158.100:0
File type ASCII text, with very long lines (9758), with CRLF line terminators
Hash f211bdee19704142f4d0fab7134e9a73
49f63ccdb6c44dd23706c14cd7cd398eafebe6e7
f1461181c72a3b895c68545e6d95875c58ced51d70efa0c3a95a3e95b800573b
Analyzer Verdict Alert openphish Credit Suisse
fortinet Phishing
quad9 Sinkholed
GET /assets/framework_pce.js.download HTTP/1.1
Host: direct-credit-suisse-e1f47.firebaseapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/login.html?session=cG1P9ztmvAMkiGCKvKPH4bovt1HGwwyS9QHTT7vifxmJrqCClwqOa9UgZkg3xuh7g4rTg4kqRzCBOXuoBS3uTo1q6ZWCsPRA9b&auth=349926b0-26f7-4207-a3c9-b0c80c7e6ca1
Cookie: _ga_E64ZWXYFD5=GS1.1.1669938749.1.0.1669938757.0.0.0; _ga=GA1.1.367898072.1669938750
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
etag: "cd762e78e101f8ecb1e8f944ec32aa2ee5284b0c61fb325a1be4cd04c8e91f3f-br"
last-modified: Wed, 30 Nov 2022 20:23:51 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-type: text/html; charset=UTF-8
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:24 GMT
x-served-by: cache-bma1634-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669940605.925654,VS0,VE9
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2589
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.6.0.min.js
69.16.175.10200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 69.16.175.10:0
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 00:23:25 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669940605.dop018.sk1.t,1669940605.cds235.sk1.hn,1669940605.cds210.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/firebasejs/6.1.1/firebase-database.js
142.250.74.35200 OK 48 kB URL HTTP/2 www.gstatic.com/firebasejs/6.1.1/firebase-database.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5bfd3a1d2d4c274f1cd3a7b8c59af760
2b0ccd97366bd4d62c246d56c301f30893f2d8e7
5ed649d66a13882552107974d1591bd60f9799111e60adb56d8e720ed39ddff6
GET /firebasejs/6.1.1/firebase-database.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 47735
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:45:39 GMT
expires: Wed, 29 Nov 2023 14:45:39 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 06 Jun 2019 21:07:48 GMT
content-type: text/javascript; charset=UTF-8
age: 207466
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/uuid@latest/dist/umd/uuidv4.min.js
151.101.1.229200 OK 669 B URL HTTP/2 cdn.jsdelivr.net/npm/uuid@latest/dist/umd/uuidv4.min.js
IP 151.101.1.229:0
File type ASCII text, with very long lines (1366), with no line terminators
Hash 410a517cf9f3478998f3b01bbcb6fdc9
f3374770c11535a58ef6ac7ff44fea0c2e6f9d35
37ffa90fc1782840938551dbc7a8366efa13f68af2c289e68765a89d8d1c3e48
GET /npm/uuid@latest/dist/umd/uuidv4.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 8.3.2
x-jsd-version-type: version
etag: W/"556-Wdn/VD6mBE6EvolddgVB6g4Ez5g"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 02 Dec 2022 00:23:25 GMT
age: 6295
x-served-by: cache-fra19158-FRA, cache-bma1660-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 669
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 06fc2114946e9805db925bf54fbb908b
2214214619ca63b6cdfad39a231a4aaba6c682c4
884ffbd3c4b70a88cd6b7fb2602b6693e8c1657c8a52a424d46db9e0c671251a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6505
Cache-Control: max-age=145206
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "6388c04a-118"
Expires: Sat, 03 Dec 2022 16:43:31 GMT
Last-Modified: Thu, 01 Dec 2022 14:55:06 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
www.gstatic.com/firebasejs/6.1.1/firebase-auth.js
142.250.74.35200 OK 51 kB URL HTTP/2 www.gstatic.com/firebasejs/6.1.1/firebase-auth.js
IP 142.250.74.35:0
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 99217f8b4bd38b686c487c355cea9de9
f62878357f16df9f909958ac4540d28116dc5d55
92fa6342aed2bfff5bb56e122e07a00048e7cb3e341a696e3cffca83733ec430
GET /firebasejs/6.1.1/firebase-auth.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 51196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 05:54:22 GMT
expires: Sun, 26 Nov 2023 05:54:22 GMT
cache-control: public, max-age=31536000
age: 498543
last-modified: Thu, 06 Jun 2019 21:07:48 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/7.3.0/firebase-analytics.js
142.250.74.35200 OK 7.0 kB URL HTTP/2 www.gstatic.com/firebasejs/7.3.0/firebase-analytics.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (21419)
Hash d846a2e20e468143b8c1d16506676f61
3b7b9b23d118e5fa829b4590dac114729067583b
7ef679e5249b1294f6f4ba12fd2a71001aa3b78944c0c5408fd75cf65d55eb5d
GET /firebasejs/7.3.0/firebase-analytics.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 6955
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:34:48 GMT
expires: Fri, 01 Dec 2023 08:34:48 GMT
cache-control: public, max-age=31536000
age: 56917
last-modified: Thu, 07 Nov 2019 23:11:03 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/7.3.0/firebase-app.js
142.250.74.35200 OK 4.1 kB URL HTTP/2 www.gstatic.com/firebasejs/7.3.0/firebase-app.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (12024)
Hash 28c636c993e7e1c9f91062a5ae7e9ad3
77a3eeb7ae16a6296a41bcba68edd9cec7132c0d
549e9eefe09d5f2579ce3e80b0eab78da68113d741c9c78ec82511999d3a97cb
GET /firebasejs/7.3.0/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 4111
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 14:26:42 GMT
expires: Tue, 28 Nov 2023 14:26:42 GMT
cache-control: public, max-age=31536000
age: 295003
last-modified: Thu, 07 Nov 2019 23:11:03 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.21.226:0
Hash 2b9b27e63ff2088c475bdc1ba94d124f
5ba7470fb51240f3119d115c7c2a07df41398c3a
fcabdd074488ac5524b96c5eae04313bfab33eaac09ea06bb1a678cedee54128
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 00:23:25 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "1EA5261AFBC78E71F7C4D0A0DCF71EB84DDFC75F"
Expires: Fri, 02 Dec 2022 12:00:00 GMT
Last-Modified: Fri, 02 Dec 2022 00:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 599
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772fe9ee9b65b4fa-OSL
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 36606a96d9da3e5e41f1a8de70a7874a
cfb418b2834e67ff3539611e64d04b953c704c1b
1a194094e73b35e499fe897c122f8dacc8288fde45b0b0d3b7d6f4afdda8079a
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "cfb418b2834e67ff3539611e64d04b953c704c1b"
Expires: Sun, 04 Dec 2022 00:23:24 GMT
Last-Modified: Fri, 02 Dec 2022 00:23:25 GMT
Server: Apache
Content-Length: 1753
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 36606a96d9da3e5e41f1a8de70a7874a
cfb418b2834e67ff3539611e64d04b953c704c1b
1a194094e73b35e499fe897c122f8dacc8288fde45b0b0d3b7d6f4afdda8079a
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "cfb418b2834e67ff3539611e64d04b953c704c1b"
Expires: Sun, 04 Dec 2022 00:23:24 GMT
Last-Modified: Fri, 02 Dec 2022 00:23:25 GMT
Server: Apache
Content-Length: 1753
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 36606a96d9da3e5e41f1a8de70a7874a
cfb418b2834e67ff3539611e64d04b953c704c1b
1a194094e73b35e499fe897c122f8dacc8288fde45b0b0d3b7d6f4afdda8079a
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "cfb418b2834e67ff3539611e64d04b953c704c1b"
Expires: Sun, 04 Dec 2022 00:23:24 GMT
Last-Modified: Fri, 02 Dec 2022 00:23:25 GMT
Server: Apache
Content-Length: 1753
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 36606a96d9da3e5e41f1a8de70a7874a
cfb418b2834e67ff3539611e64d04b953c704c1b
1a194094e73b35e499fe897c122f8dacc8288fde45b0b0d3b7d6f4afdda8079a
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "cfb418b2834e67ff3539611e64d04b953c704c1b"
Expires: Sun, 04 Dec 2022 00:23:24 GMT
Last-Modified: Fri, 02 Dec 2022 00:23:25 GMT
Server: Apache
Content-Length: 1753
unpkg.com/axios/dist/axios.min.js
104.16.125.175302 Found 23 kB URL HTTP/2 unpkg.com/axios/dist/axios.min.js
IP 104.16.125.175:0
Hash b92a5a52058fc364deadff0d85108620
92a3b4668a8c7f0d5acc006a6a87222377ce1234
aa81367b6c2357cfe79736bbdf0ac0017743ac07e33e5fe5d2d65d953e5e4906
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 02 Dec 2022 00:23:25 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.2.0/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GK834YYP42T1MAGCS0P5RJ6M-fra
cf-cache-status: HIT
age: 325
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 772fe9ee3e99b524-OSL
X-Firefox-Spdy: h2
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 9352e531d605d450b5662e18b1239db7
909658997bcbaf35c98a64cb8b745496c7c5963f
2fd56793af9e092db665fb491a39e5004c9702042473cc4d9e8920946adfcdd0
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "909658997bcbaf35c98a64cb8b745496c7c5963f"
Expires: Sun, 04 Dec 2022 00:23:24 GMT
Last-Modified: Fri, 02 Dec 2022 00:23:25 GMT
Server: Apache
Content-Length: 1781
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 9352e531d605d450b5662e18b1239db7
909658997bcbaf35c98a64cb8b745496c7c5963f
2fd56793af9e092db665fb491a39e5004c9702042473cc4d9e8920946adfcdd0
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "909658997bcbaf35c98a64cb8b745496c7c5963f"
Expires: Sun, 04 Dec 2022 00:23:24 GMT
Last-Modified: Fri, 02 Dec 2022 00:23:25 GMT
Server: Apache
Content-Length: 1781
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 9352e531d605d450b5662e18b1239db7
909658997bcbaf35c98a64cb8b745496c7c5963f
2fd56793af9e092db665fb491a39e5004c9702042473cc4d9e8920946adfcdd0
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "909658997bcbaf35c98a64cb8b745496c7c5963f"
Expires: Sun, 04 Dec 2022 00:23:24 GMT
Last-Modified: Fri, 02 Dec 2022 00:23:25 GMT
Server: Apache
Content-Length: 1781
ocsp.quovadisglobal.com/
152.195.132.213200 OK 1.8 kB IP 152.195.132.213:0
Hash 9352e531d605d450b5662e18b1239db7
909658997bcbaf35c98a64cb8b745496c7c5963f
2fd56793af9e092db665fb491a39e5004c9702042473cc4d9e8920946adfcdd0
POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "909658997bcbaf35c98a64cb8b745496c7c5963f"
Expires: Sun, 04 Dec 2022 00:23:24 GMT
Last-Modified: Fri, 02 Dec 2022 00:23:25 GMT
Server: Apache
Content-Length: 1781
direct.credit-suisse.com/dn/p/slogin/css/fonts/cs-icon-font-cb.ttf
198.240.216.40302 Found 330 B URL HTTP/1.1 direct.credit-suisse.com/dn/p/slogin/css/fonts/cs-icon-font-cb.ttf
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 00fe749998c88546cbdd7b32d2238fbd
6a87f454faf4ac3350ef9c52bd7c7ec84a399ec6
035fb32d38e92507e20c8b9cdf8a6d5f5c3c135b9bd481eb3cc19658f8ca553c
GET /dn/p/slogin/css/fonts/cs-icon-font-cb.ttf HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://direct-credit-suisse-e1f47.firebaseapp.com
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=6kLNiwiHfg_l9NuRtrAvWPLZSwT4SDU02DXoNi-rqZcJ0Yfq5OexcGt94lGCAmBtTlsel6CFl9vRcAxIK4wnoNZGDkBewxoPulTnHKGe8OQ0VRrkF-hKkTrCydW2M86x
Content-Length: 330
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: SCDID_S=G1nxHk2Bqn0GpxilKHzCm1gdq0M_FH7rGc1iYfmMlNrnB2x8Oe5_PA$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
direct.credit-suisse.com/dn/p/slogin/css/fonts/cs-icon-font-cb.woff
198.240.216.40302 Found 330 B URL HTTP/1.1 direct.credit-suisse.com/dn/p/slogin/css/fonts/cs-icon-font-cb.woff
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3c62a9b777be2dd4677e18941ebf5391
5295d2cd6597e27bcef58c11e5c508fd32c64e89
16f9b3847634be604442d494e6abe4bdfad2f0e4f5ed3e50f2d87ac0a582ac3c
GET /dn/p/slogin/css/fonts/cs-icon-font-cb.woff HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://direct-credit-suisse-e1f47.firebaseapp.com
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=21-e86ZPTLgIW7q3NhQLPZvEPsWQ1D1bXu4sX2rfDRm8fxomgrUM8lvzpijBQ7jSIT5ON0FmzaKNiKkdSqMKPYocgEyMukf3Ua09Ji-YoySgRa9lYzmNH9ZgqLZoJM_u
Content-Length: 330
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: SCDID_S=oS0AV9YWfV_zN2cfnYDQfHQ6QeqMqeLtL8TWUdKzWJ1RUzsy8oT4XQ$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
direct.credit-suisse.com/dn/p/slogin/css/fonts/cs-icon-font-cb.svg
198.240.216.40302 Found 330 B URL HTTP/1.1 direct.credit-suisse.com/dn/p/slogin/css/fonts/cs-icon-font-cb.svg
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b35b05f2ea938d77d6265b8271a4feb7
ad2e55d81dd37a2eedcbf861b97aceae4d222076
8c79e86c86d2496fc35dbe5684ddcad4307403e4cc6f56b368407a4f4935d28c
GET /dn/p/slogin/css/fonts/cs-icon-font-cb.svg HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://direct-credit-suisse-e1f47.firebaseapp.com
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=lE8GlW6-DPakbYOzrOvOAhb7As85x36Q5GzLt5mNHEEFSQ9f5898u-XOx-9YKr-V5Nb1Zo2V3OxUpNhjlSc_gKWk-lxwhsNHBwrcAyrfdqJsl0prmvN9MU1yfOqAMapO
Content-Length: 330
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: SCDID_S=7R_RQthbJEXj1M62YaDglpIMaYDUqqOkvywvg5o2W-SjZBNg8brVyA$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
direct.credit-suisse.com/dn/p/slogin/css/fonts/cs-icon-font-cb.eot
198.240.216.40302 Found 330 B URL HTTP/1.1 direct.credit-suisse.com/dn/p/slogin/css/fonts/cs-icon-font-cb.eot
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e50d74b3df54e7dfa63f7f443d47ac21
519927908c2685d68b8fb5b11e5206d7936bc871
cbf107ddb36919711e54a8c0494243b0fe1448b68c3b2874fbe0e1c331f908c3
GET /dn/p/slogin/css/fonts/cs-icon-font-cb.eot HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://direct-credit-suisse-e1f47.firebaseapp.com
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=5BSQ2UhRLM6_hYxYIoyahlvrtlAKIdxVW-Eqhf3hv1jnQBs4oWqo1gSqAc7N4TB5XQgmnqqSSoF2DoEgvJOyvrdIcovHVR2Mp7fnbCS_Aqukp_6Z2pUxywC7ETUnXvYf
Content-Length: 330
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: SCDID_S=PAoKfhCcBESWUDzdcv8-Kmcuu-hXg02ZQua7kBn4SVe7JiBrXbAkUg$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 00:08:57 GMT
cache-control: public,max-age=3600
age: 868
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
direct.credit-suisse.com/dn/p/slogin/img/cs/favicon-194x194.png
198.240.216.40302 Found 330 B URL HTTP/1.1 direct.credit-suisse.com/dn/p/slogin/img/cs/favicon-194x194.png
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 227c1ec67d58aaa949630460006715ed
7661a65a5fa40f5f95a04f596b2af1e7d6d89cec
7d2c7f8ff855b863f867ec3f720ebb14cb5144aa9eced01c27b9707e38299bc8
GET /dn/p/slogin/img/cs/favicon-194x194.png HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=KDK5DMP_s-mCUHHzcNXP0v3dGjguyVoIwFfhSeSwEfcBLYxPPuIu2Xa8eDoX_BB51yGefl8KQWHgnFKBihve9WoclDk4-nLhFKEB56wfpyxmK9bp7mhiN1vERtkUpWHM
Content-Length: 330
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: SCDID_S=JEYhA2eH9nAmXs3rSP7IktYHG3xs2tx8b3t6sZog034yRezp-_dF5A$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
direct.credit-suisse.com/dn/p/slogin/img/cs/favicon-16x16.png
198.240.216.40302 Found 322 B URL HTTP/1.1 direct.credit-suisse.com/dn/p/slogin/img/cs/favicon-16x16.png
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fd5ad094736b309b1f3f0037174ebcf5
a45b6cf7e57fbaf8e3af5ebb25600e7634184e47
f28eeb0567e6ef5408d5f8b4a84a26c73f33e40c451aedbfd30a45f06518892c
GET /dn/p/slogin/img/cs/favicon-16x16.png HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check?trg=i3HVf5I-DNwaRrifKounCt28Tqbp2rwAX7lpuW11d62DbUeo5wputSN_YbeHKlmdWyA0eYrV_BwtDHHKCeVX7gJ3wrY5VIUNGWeQMrRLySDbasOe6IlrQA$$
Content-Length: 322
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: SCDID_S=nz2fWROjP4BlM1hlFk7xFc4DDo958V6gJOL-y1hAJ4KTHPKMUHWRbA$$; path=/; Secure; HttpOnly; SameSite=Lax
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/8zRofmzdPas
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/8zRofmzdPas
IP 142.250.74.131:0
Hash 928787913d912ccfb57b94ff920ddd6f
a16f49efe281fae7790855d5dbb935bdd6aa4375
a98416339a34e7ea0631466b676dc11ef24f47044b5b2d1d5d703e6bf71e5300
POST /s/gts1d4/8zRofmzdPas HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?l=dataLayer
142.250.74.40200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtag/js?l=dataLayer
IP 142.250.74.40:0
File type ASCII text, with very long lines (1921)
Hash dca85d1b9a47c91160c61e29b20baa2b
aa7212e98a0420f6ab2d287cffd5519aeb1d0917
91770e950638ddf40258db0e0ab735663a3cdfc82493304076db695ba1e0d598
GET /gtag/js?l=dataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 00:23:25 GMT
expires: Fri, 02 Dec 2022 00:23:25 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37487
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 83
Cache-Control: max-age=117887
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:08:12 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-E64ZWXYFD5&l=dataLayer&cx=c
142.250.74.40200 OK 67 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-E64ZWXYFD5&l=dataLayer&cx=c
IP 142.250.74.40:0
File type ASCII text, with very long lines (6356)
Hash d1ffdd1393bfd76ae0c3d5010992a629
ea5c62f87d866648e6b15b52693b306b808b32db
5a008c8089b40722e1f29faac1cd0c1385c2e1bf4b730165af96ec484f926804
GET /gtag/js?id=G-E64ZWXYFD5&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 00:23:25 GMT
expires: Fri, 02 Dec 2022 00:23:25 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 67030
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
direct.credit-suisse.com/cookie-check?trg=KDK5DMP_s-mCUHHzcNXP0v3dGjguyVoIwFfhSeSwEfcBLYxPPuIu2Xa8eDoX_BB51yGefl8KQWHgnFKBihve9WoclDk4-nLhFKEB56wfpyxmK9bp7mhiN1vERtkUpWHM
198.240.216.40302 Found 303 B URL HTTP/1.1 direct.credit-suisse.com/cookie-check?trg=KDK5DMP_s-mCUHHzcNXP0v3dGjguyVoIwFfhSeSwEfcBLYxPPuIu2Xa8eDoX_BB51yGefl8KQWHgnFKBihve9WoclDk4-nLhFKEB56wfpyxmK9bp7mhiN1vERtkUpWHM
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7ad55375bda96905ba129396c3103ec3
a30220b0730d8c4053da5a9ad7d00200d4fc0a06
3711396ae1f766d462768be476bc07fd159f3d2bb76b0e2cdaeb0201885f9a1f
GET /cookie-check?trg=KDK5DMP_s-mCUHHzcNXP0v3dGjguyVoIwFfhSeSwEfcBLYxPPuIu2Xa8eDoX_BB51yGefl8KQWHgnFKBihve9WoclDk4-nLhFKEB56wfpyxmK9bp7mhiN1vERtkUpWHM HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJbk0UNCbmo8MUEbM4dJjL0$
Content-Length: 303
Content-Type: text/html; charset=iso-8859-1
Cache-Control: no-store, no-cache, must-revalidate
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
direct.credit-suisse.com/cookie-check?trg=i3HVf5I-DNwaRrifKounCt28Tqbp2rwAX7lpuW11d62DbUeo5wputSN_YbeHKlmdWyA0eYrV_BwtDHHKCeVX7gJ3wrY5VIUNGWeQMrRLySDbasOe6IlrQA$$
198.240.216.40302 Found 303 B URL HTTP/1.1 direct.credit-suisse.com/cookie-check?trg=i3HVf5I-DNwaRrifKounCt28Tqbp2rwAX7lpuW11d62DbUeo5wputSN_YbeHKlmdWyA0eYrV_BwtDHHKCeVX7gJ3wrY5VIUNGWeQMrRLySDbasOe6IlrQA$$
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 76abd44ee3357a056c4af15564464661
2573f5d56af2227cc2fe2d6d536c5eef88e4d1ba
82d09bedbb744c4d7364c3da12bb576d1a03154cf2f4f252be76567efad6949f
GET /cookie-check?trg=i3HVf5I-DNwaRrifKounCt28Tqbp2rwAX7lpuW11d62DbUeo5wputSN_YbeHKlmdWyA0eYrV_BwtDHHKCeVX7gJ3wrY5VIUNGWeQMrRLySDbasOe6IlrQA$$ HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Location: https://direct.credit-suisse.com/cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJhwufHQVBc-0ceGp14GjGM$
Content-Length: 303
Content-Type: text/html; charset=iso-8859-1
Cache-Control: no-store, no-cache, must-revalidate
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/5EXjxzFGjgM
IP 142.250.74.131:0
Hash dded16aba60d219f3431d24598a39fa0
90623342e4adafb8e3f87857dd8c849c90021725
59c9e42c87787b45d8030e78057fc7082ed55f1e7dcde99ec9ffec1c350dbaa6
POST /s/gts1d4int/5EXjxzFGjgM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/8zRofmzdPas
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/8zRofmzdPas
IP 142.250.74.131:0
Hash 928787913d912ccfb57b94ff920ddd6f
a16f49efe281fae7790855d5dbb935bdd6aa4375
a98416339a34e7ea0631466b676dc11ef24f47044b5b2d1d5d703e6bf71e5300
POST /s/gts1d4/8zRofmzdPas HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 00:23:25 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
direct.credit-suisse.com/cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJbk0UNCbmo8MUEbM4dJjL0$
198.240.216.40200 OK 1.9 kB URL HTTP/1.1 direct.credit-suisse.com/cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJbk0UNCbmo8MUEbM4dJjL0$
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash eeaaa1e93f3c6e86f993d32d863873db
41831692622171d761c7c3d17307db8514319bd6
fb91783e513ec5755d75a7b6cadd8c69b3f846415f3b7a0f464539b739565bb3
GET /cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJbk0UNCbmo8MUEbM4dJjL0$ HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Last-Modified: Wed, 16 Jun 2021 13:25:38 GMT
ETag: "1f2f-5c4e206b91880-gzip"
Accept-Ranges: bytes
Content-Type: text/html
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-store, no-cache, must-revalidate
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
direct.credit-suisse.com/cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJhwufHQVBc-0ceGp14GjGM$
198.240.216.40200 OK 1.9 kB URL HTTP/1.1 direct.credit-suisse.com/cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJhwufHQVBc-0ceGp14GjGM$
IP 198.240.216.40:0
ASN #8729 Credit Suisse Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash eeaaa1e93f3c6e86f993d32d863873db
41831692622171d761c7c3d17307db8514319bd6
fb91783e513ec5755d75a7b6cadd8c69b3f846415f3b7a0f464539b739565bb3
GET /cookie-check/cs/CookieCheckError.html?trg=AviMTQyrxUGdsqoPafA5NhFubSX-Za_G2MH_x3IQneAO4YeI4kmKjJhwufHQVBc-0ceGp14GjGM$ HTTP/1.1
Host: direct.credit-suisse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 00:23:25 GMT
Server: Credit Suisse Entry Server
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Robots-Tag: all
Content-Security-Policy: default-src dnmb: 'self' *.credit-suisse.com *.employee-shares.com; script-src dnmb: 'self' 'unsafe-inline' 'unsafe-eval' *.credit-suisse.com *.employee-shares.com; style-src 'self' 'unsafe-inline' *.credit-suisse.com *.employee-shares.com; img-src 'self' data: blob: *.credit-suisse.com *.employee-shares.com; connect-src 'self' wss: *.credit-suisse.com *.employee-shares.com; font-src 'self' data: ; worker-src 'self' blob: dnmb:; child-src 'self' data: blob: dnmb:;
Last-Modified: Wed, 16 Jun 2021 13:25:38 GMT
ETag: "1f2f-5c4e206b91880-gzip"
Accept-Ranges: bytes
Content-Type: text/html
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-store, no-cache, must-revalidate
X-Permitted-Cross-Domain-Policies: none
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
s-usc1b-nss-2124.firebaseio.com/.ws?v=5&ns=cpnlify-default-rtdb
34.120.160.131101 Switching Protocols 0 B URL HTTP/1.1 s-usc1b-nss-2124.firebaseio.com/.ws?v=5&ns=cpnlify-default-rtdb
IP 34.120.160.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /.ws?v=5&ns=cpnlify-default-rtdb HTTP/1.1
Host: s-usc1b-nss-2124.firebaseio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://direct-credit-suisse-e1f47.firebaseapp.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 22jtDt0/cS2HElnMA2CixA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 02 Dec 2022 00:23:25 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: obBUuYMQnVw+81Pp5L/OEAOcnaA=
Strict-Transport-Security: max-age=31556926; includeSubDomains; preload
unpkg.com/axios@1.2.0/dist/axios.min.js
104.16.125.175200 OK 11 kB URL HTTP/2 unpkg.com/axios@1.2.0/dist/axios.min.js
IP 104.16.125.175:0
File type ASCII text, with very long lines (29551)
Hash ff676ccfad69a84bdcb08211957c0c5a
54e0a3971c141d7ac6b6cf1cdd7d37c6356238de
4869241b2583730c744b90f81760358f8410ffd0f086d69b51e31a15dfed75cb
GET /axios@1.2.0/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 00:23:25 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7396-Wc6sdIzlj1RsovoMRKQah8UZFhA"
via: 1.1 fly.io
fly-request-id: 01GJGC0D1SRCGJTEVMAF435H8Z-ams
cf-cache-status: HIT
age: 796343
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 772fe9ee9ed3b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4328
Expires: Fri, 02 Dec 2022 01:35:35 GMT
Date: Fri, 02 Dec 2022 00:23:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4328
Expires: Fri, 02 Dec 2022 01:35:35 GMT
Date: Fri, 02 Dec 2022 00:23:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4328
Expires: Fri, 02 Dec 2022 01:35:35 GMT
Date: Fri, 02 Dec 2022 00:23:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4328
Expires: Fri, 02 Dec 2022 01:35:35 GMT
Date: Fri, 02 Dec 2022 00:23:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25c68d8b1fae82820f93efca500fd848
45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48
f0ec6b6f6ba0a931c9b71f5bc7ad1e5b89c8e4d8b7441f35eeebfba418d0e588
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6882
x-amzn-requestid: 6b5f15a5-c15b-46bf-9fd5-5d013d37a0eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGfrG3WIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dfd-6038ca700dfb4489230c2683;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2O6x-8-ESFDtlhcjVyGxEXCZcLbbfhsCVQeX02lbNMupPWmM-fKuLA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:47:56 GMT
age: 9331
etag: "45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ipinfo.io/json?token=3737089960275b
34.117.59.81200 OK 12 kB URL HTTP/2 ipinfo.io/json?token=3737089960275b
IP 34.117.59.81:0
Hash 823eab8f7ae2fea38e88472ffed248b0
d63a230776098f1e1ba0fcb7751aa12bee3e4007
0f4fba185a0d34e61d97645901b26dd6c1bba7071b21fd7b0d3b61b0d145d306
GET /json?token=3737089960275b HTTP/1.1
Host: ipinfo.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Origin: https://direct-credit-suisse-e1f47.firebaseapp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-type: application/json; charset=utf-8
date: Fri, 02 Dec 2022 00:23:25 GMT
x-envoy-upstream-service-time: 2
strict-transport-security: max-age=2592000; includeSubDomains
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
34.120.237.76200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 10120
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e65083422468e512aa73eb68f20b2ec
73884daab5e71e4917637b3679c0bb5a1f0447de
f0d97bb9e3f01bbdbe91ba1f9b6ea0f649c66192383c51fe5c7ca9ac2a38ebdb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9719
x-amzn-requestid: c4ba3502-e191-40fa-8ae0-71dc6f733db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPjhHE8woAMFyKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382e606-70ab0e5523c91e5420efec78;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 04:22:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: IeSNcoyQJCF2o0-QIQnETp6mLbxcnY3yJmBGX6z0FRxjBttZ0yW7Og==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 03:37:58 GMT
age: 74729
etag: "73884daab5e71e4917637b3679c0bb5a1f0447de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:15:42 GMT
age: 61665
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d147ccb10bda82b153a596c3c967cd6a
ffd0763f997e71a8c1458523fc17cafe8849dfdf
1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:08:56 GMT
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
content-type: image/jpeg
age: 8071
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/5.9.4/firebase.js
142.250.74.35200 OK 0 B URL HTTP/2 www.gstatic.com/firebasejs/5.9.4/firebase.js
IP 142.250.74.35:0
GET /firebasejs/5.9.4/firebase.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://direct-credit-suisse-e1f47.firebaseapp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 215186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 19:13:27 GMT
expires: Sat, 25 Nov 2023 19:13:27 GMT
cache-control: public, max-age=31536000
age: 536998
last-modified: Thu, 11 Apr 2019 22:18:35 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2